Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/FcUUg3FeejoDm9dC_yBznpIP6-Y.roa
File: FcUUg3FeejoDm9dC_yBznpIP6-Y.roa (raw, json)
Hash identifier: nvxH8W7/1d+ivDM3QoKLBqVmok/2ZvgpbOfx+bDcoCQ=
Subject key identifier: 15:C5:14:83:71:5E:7A:3A:03:9B:D7:42:FF:20:73:9E:92:0F:EB:E6
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/FcUUg3FeejoDm9dC_yBznpIP6-Y.roa
Signing time: Thu 15 Sep 2022 02:37:17 +0000
ROA not before: Thu 15 Sep 2022 02:37:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 27.96.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=15C51483715E7A3A039BD742FF20739E920FEBE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:a8:e9:d3:3a:74:83:a2:ef:35:ae:37:39:
1e:a9:4f:91:0c:b1:43:0c:a1:de:6c:91:c6:47:70:
29:46:dc:41:92:06:76:73:37:5e:5a:91:9c:73:6d:
1c:9d:3d:d0:1b:a2:2d:d8:2d:4c:fc:20:5c:09:84:
12:f1:13:d5:fe:74:87:a0:18:3f:b0:f0:74:a9:48:
37:a3:77:0f:c2:69:23:e3:5a:65:82:57:56:2a:30:
af:0a:8f:a0:e7:21:2b:e8:e5:76:8c:fb:a3:c7:8a:
be:62:98:2f:24:de:01:e8:f8:6c:b7:31:7d:7d:9d:
44:cc:3a:86:71:d9:d5:ce:2c:8e:45:c0:41:8a:ca:
cd:6b:d6:aa:94:e4:71:66:e4:00:12:4b:94:13:e7:
07:a7:94:de:d4:f6:3e:f5:f0:ab:8c:4e:59:80:94:
be:45:10:92:64:ac:3a:77:89:53:17:d8:a8:6e:65:
59:f7:cc:cc:48:ba:ae:d8:59:7a:87:51:16:34:ff:
38:92:bb:ff:8e:ce:78:07:5a:2e:b3:b8:28:5f:03:
09:69:86:8e:62:2d:9a:11:98:8b:f4:16:83:47:8a:
90:e1:20:d4:8b:08:23:d4:0f:8e:30:00:50:16:c2:
f7:f4:d4:a2:67:e3:1b:4e:18:3f:aa:33:e9:a6:82:
4a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C5:14:83:71:5E:7A:3A:03:9B:D7:42:FF:20:73:9E:92:0F:EB:E6
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/FcUUg3FeejoDm9dC_yBznpIP6-Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.232.0/21
Signature Algorithm: sha256WithRSAEncryption
59:1d:9d:35:a7:17:02:4c:f4:b4:89:6b:5e:77:46:ed:62:b8:
27:41:f8:d8:6e:f9:bc:0d:44:db:42:c1:d2:bd:5d:72:90:42:
60:cb:be:c0:da:fa:19:ef:40:dd:ee:56:65:43:68:dc:19:e4:
ca:7d:8d:2d:d8:90:31:26:8d:52:51:4b:e0:d7:95:40:0e:fa:
96:4e:86:98:24:a5:2b:6f:1d:f0:c0:9e:61:ed:5f:fa:bd:11:
ce:13:9b:8a:f6:1c:c9:3f:07:9b:63:83:c4:81:f2:82:38:78:
53:a1:6f:1f:ca:f3:f5:33:12:0b:41:f0:42:22:a8:03:2c:ff:
bb:30:ee:fb:ce:f1:5b:21:60:b3:78:c3:68:7a:0b:8e:81:53:
b9:d5:21:68:58:92:54:02:7e:e8:1b:1f:11:89:77:f3:e7:fb:
e9:8b:56:e7:dc:65:86:47:84:5b:3a:18:28:88:19:6b:48:d7:
a4:00:6a:5c:c9:d7:b5:8d:05:aa:c4:8c:76:37:b0:85:5e:a4:
f5:4f:67:9d:a1:16:d9:c3:8b:fa:a7:21:6c:c6:9c:3a:0b:1c:
5e:b6:f6:ad:ee:b9:8f:5e:65:b3:b7:0a:6a:5d:fa:b2:7c:25:
72:8c:ed:03:65:30:70:d3:15:8d:fd:bc:d0:55:d9:b3:44:b7:
4f:8b:8d:49
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMjA5MTUw
MjM3MTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE1QzUxNDgzNzE1RTdB
M0EwMzlCRDc0MkZGMjA3MzlFOTIwRkVCRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMIajp0zp0g6LvNa43OR6pT5EMsUMMod5skcZHcClG3EGSBnZz
N15akZxzbRydPdAboi3YLUz8IFwJhBLxE9X+dIegGD+w8HSpSDejdw/CaSPjWmWC
V1YqMK8Kj6DnISvo5XaM+6PHir5imC8k3gHo+Gy3MX19nUTMOoZx2dXOLI5FwEGK
ys1r1qqU5HFm5AASS5QT5wenlN7U9j718KuMTlmAlL5FEJJkrDp3iVMX2KhuZVn3
zMxIuq7YWXqHURY0/ziSu/+OzngHWi6zuChfAwlpho5iLZoRmIv0FoNHipDhINSL
CCPUD44wAFAWwvf01KJn4xtOGD+qM+mmgkqRAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUFcUUg3FeejoDm9dC/yBznpIP6+YwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvRmNVVWczRmVlam9EbTlkQ195Qnpu
cElQNi1ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAxtg6DAN
BgkqhkiG9w0BAQsFAAOCAQEAWR2dNacXAkz0tIlrXndG7WK4J0H42G75vA1E20LB
0r1dcpBCYMu+wNr6Ge9A3e5WZUNo3Bnkyn2NLdiQMSaNUlFL4NeVQA76lk6GmCSl
K28d8MCeYe1f+r0RzhObivYcyT8Hm2ODxIHygjh4U6FvH8rz9TMSC0HwQiKoAyz/
uzDu+87xWyFgs3jDaHoLjoFTudUhaFiSVAJ+6BsfEYl38+f76YtW59xlhkeEWzoY
KIgZa0jXpABqXMnXtY0FqsSMdjewhV6k9U9nnaEW2cOL+qchbMacOgscXrb2re65
j15ls7cKal36snwlcoztA2UwcNMVjf280FXZs0S3T4uNSQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org