Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/HTuhslOtXRVE5F1Ien2_36ABzWM.roa
File: HTuhslOtXRVE5F1Ien2_36ABzWM.roa (raw, json)
Hash identifier: pdosSBFJTgbLiXO3AnAn1RRLknSuJy0AG+F+JzJDFCY=
Subject key identifier: 1D:3B:A1:B2:53:AD:5D:15:44:E4:5D:48:7A:7D:BF:DF:A0:01:CD:63
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 096E
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/HTuhslOtXRVE5F1Ien2_36ABzWM.roa
Signing time: Thu 21 Jan 2021 10:26:28 +0000
ROA not before: Thu 21 Jan 2021 10:26:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17809
IP address blocks: 210.209.128.0/17 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414 (0x96e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Jan 21 10:26:28 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1D3BA1B253AD5D1544E45D487A7DBFDFA001CD63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3b:be:8b:06:95:76:30:f8:5d:fe:0a:a2:97:
92:3c:7d:f2:a4:f8:38:ff:51:ca:b7:36:dd:c3:46:
f9:8a:e3:8a:f9:e0:28:6c:86:85:de:f5:67:a5:72:
ea:e1:ca:19:13:94:b0:f9:bc:11:76:9d:32:6a:14:
97:0d:0f:58:9b:40:71:b5:22:a0:66:71:46:84:68:
79:dc:bf:f6:b9:93:28:6f:38:8b:2a:0c:d1:b1:3b:
18:eb:54:2e:bf:00:72:4a:21:2f:42:42:14:c5:7b:
67:df:16:7b:65:6a:c9:3a:fb:7b:5f:69:f0:5e:02:
f0:77:78:4a:61:f7:17:7d:1a:f1:99:20:04:77:9c:
66:e4:a2:48:5f:47:a2:f9:71:13:bb:bd:4c:b3:ac:
d7:6d:0f:26:89:ae:43:22:82:32:34:65:16:86:66:
15:34:6e:87:46:e8:83:28:3e:89:7a:c9:13:55:59:
cd:02:9f:10:b8:5d:91:6d:ce:8c:73:70:e4:1d:81:
67:29:d7:f8:22:49:03:d4:77:63:fb:2e:5c:1d:e5:
c4:fc:cb:13:8c:9b:f7:79:c9:3d:f6:a3:f6:7e:38:
a0:48:6b:9b:5f:e7:e0:82:66:72:a9:bb:13:e9:d0:
87:ea:a9:e7:bf:a1:c5:7a:43:63:60:d5:06:99:e0:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3B:A1:B2:53:AD:5D:15:44:E4:5D:48:7A:7D:BF:DF:A0:01:CD:63
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/HTuhslOtXRVE5F1Ien2_36ABzWM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.209.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5b:6f:8e:c9:45:5d:76:ee:99:19:2e:44:08:0f:f0:d8:aa:bc:
24:19:32:6d:4b:f8:88:24:c3:ba:4b:75:ee:44:e4:01:48:bd:
64:20:36:a2:5e:b2:64:18:69:6d:7e:70:58:54:89:82:83:fa:
78:22:d6:7a:e6:23:5e:e5:53:b2:e7:88:82:d2:e8:56:7d:54:
17:fd:60:28:d9:23:68:28:cf:bf:87:18:47:de:e4:cc:9d:2a:
3e:a2:80:0b:a7:21:bb:a4:b0:49:9e:4d:05:98:a6:91:42:4e:
12:ea:3d:76:7a:ed:28:b1:25:4c:19:35:b1:98:86:38:0d:b1:
0a:e9:56:39:a2:32:76:24:56:61:b6:a7:40:cf:e4:44:34:80:
08:f0:82:28:72:a9:f5:49:3a:da:0d:40:2e:33:0e:39:ca:74:
41:01:d6:b1:23:f1:fe:c6:a1:1a:72:5b:40:5e:08:74:0b:ec:
83:6d:13:bf:ef:d6:f8:5a:96:2e:26:f7:0a:2a:24:81:61:cb:
f6:55:9a:63:c0:94:8c:72:47:c4:c6:cf:a1:16:a8:3d:37:a9:
f4:8a:ab:2e:55:5f:fc:21:b1:3b:fa:07:61:c4:91:be:37:fb:
87:66:7f:27:14:d5:64:1d:24:6f:3d:b4:b0:d7:fe:e7:a8:a7:
97:b4:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:48 2025 by rpki-client