Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/GyeSrfF4ny35hn9Ls03NfiwTdwE.roa
File: GyeSrfF4ny35hn9Ls03NfiwTdwE.roa (raw, json)
Hash identifier: bLUgsGDrIJrXcBBCUyFqTqoYeNAJTkA1z+fAf/thkL8=
Subject key identifier: 1B:27:92:AD:F1:78:9F:2D:F9:86:7F:4B:B3:4D:CD:7E:2C:13:77:01
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 098F
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/GyeSrfF4ny35hn9Ls03NfiwTdwE.roa
Signing time: Sun 07 Feb 2021 13:15:14 +0000
ROA not before: Sun 07 Feb 2021 13:15:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 119.15.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2447 (0x98f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 7 13:15:14 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1B2792ADF1789F2DF9867F4BB34DCD7E2C137701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:6a:08:a7:a7:55:f0:52:7b:da:c6:73:0c:
ba:79:51:6c:06:87:24:8b:6c:43:35:60:e7:6e:84:
f7:d7:b1:ab:08:48:78:21:d7:4d:24:23:05:6b:59:
4c:27:bd:e2:82:97:e3:23:ca:94:72:f6:89:81:ae:
32:7d:f1:7d:87:5e:ac:da:f2:54:76:52:4f:74:1c:
6b:7c:a3:0d:4f:52:b5:93:ed:03:f2:aa:70:4e:6b:
49:a2:e3:f0:52:a4:b7:c5:b4:d3:37:51:4e:fa:ff:
57:a6:3c:f1:13:7c:a9:6d:1e:41:ef:a4:f5:fc:c8:
38:c3:c8:60:3d:38:b8:66:44:2c:40:a1:86:0d:01:
96:86:90:70:a5:53:8a:4e:63:39:3d:c0:13:0a:e1:
bc:b8:48:bc:7b:5a:3f:08:bc:a4:78:d4:ab:45:9d:
4b:96:99:93:5f:fa:d5:bd:f4:f0:3e:71:c6:f7:fa:
0b:09:ee:d5:d9:93:d9:85:46:99:ce:b0:e9:59:ab:
ca:2b:ce:30:5d:1a:2a:8c:13:c9:77:9e:fd:e6:09:
aa:7a:c3:90:16:e8:cd:4b:db:72:8e:80:b8:d8:1f:
ee:8f:e2:11:6e:b9:fd:c7:b1:5b:9c:10:a3:e6:f9:
c1:b0:66:4b:b0:98:9e:0d:ff:b3:e1:fd:15:f4:1a:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:27:92:AD:F1:78:9F:2D:F9:86:7F:4B:B3:4D:CD:7E:2C:13:77:01
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/GyeSrfF4ny35hn9Ls03NfiwTdwE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.192.0/21
Signature Algorithm: sha256WithRSAEncryption
88:97:41:83:01:7d:34:ca:c6:da:c0:60:d3:fd:11:44:39:01:
5d:c3:b1:7c:f1:90:59:23:5b:be:d9:4f:7f:54:30:6a:58:fa:
c9:c6:45:b2:39:7e:97:98:9f:c3:29:20:81:29:93:2b:55:4a:
27:18:f0:56:63:48:db:f1:b7:e8:a6:54:8b:59:00:9a:d2:f6:
d1:d9:f2:ef:1f:40:f3:0d:f5:82:ce:47:c9:3e:e7:7e:ca:f0:
1e:e3:90:57:f8:ec:09:00:d8:e8:20:b2:f1:61:3f:d0:33:d6:
cd:08:df:65:bd:84:de:52:bc:cd:ff:75:50:cf:18:18:62:7d:
b2:d4:df:93:0c:82:ce:d1:f4:ad:4c:3a:94:09:3f:0d:1d:61:
ae:c3:da:46:a8:46:0c:3e:c2:97:c9:84:3b:17:cb:aa:e2:39:
f3:d8:8c:4d:39:6a:90:3b:d9:41:0e:8f:c1:ac:45:50:61:ef:
82:28:7b:76:01:13:9a:be:fb:fe:4e:d9:19:ba:8e:42:e1:ca:
86:89:0d:02:91:e7:bb:c4:7b:3c:3b:3a:63:7e:60:28:1f:df:
aa:7d:83:dd:9e:95:5c:48:13:3e:40:c2:53:8d:96:e2:d0:b0:
a2:8d:17:d0:52:e2:79:23:0d:7a:f6:c2:51:ea:f0:28:1e:5c:
b3:31:24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org