Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/I-3kYm6EYR32WJXVWdX5ZXtlrwY.roa
File: I-3kYm6EYR32WJXVWdX5ZXtlrwY.roa (raw, json)
Hash identifier: TBt4o1BHnHy1w7Fm+7Kuc0oKbEq0AcSsE9YYUHFFZcg=
Subject key identifier: 23:ED:E4:62:6E:84:61:1D:F6:58:95:D5:59:D5:F9:65:7B:65:AF:06
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/I-3kYm6EYR32WJXVWdX5ZXtlrwY.roa
Signing time: Thu 15 Sep 2022 02:37:18 +0000
ROA not before: Thu 15 Sep 2022 02:37:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 203.222.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=23EDE4626E84611DF65895D559D5F9657B65AF06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:31:fb:1a:84:80:71:f9:cf:29:60:80:a4:
24:c8:49:d3:b3:d3:b3:8e:ec:e9:d0:b8:0d:9c:42:
42:b0:17:95:f8:2b:06:9e:93:ba:a4:cf:2b:ce:23:
09:78:3a:da:b3:ba:20:69:d3:80:d8:38:32:c6:8f:
07:de:7a:5f:93:c0:d2:06:ce:75:59:3f:2d:5e:bb:
45:4c:e6:93:97:9e:19:75:c3:0c:38:70:9f:2a:44:
4d:f4:a3:49:1c:08:9d:50:30:54:45:ae:0c:f1:0d:
e6:d6:69:20:be:3e:51:32:a3:ce:09:78:0b:64:6e:
ae:c3:50:cb:13:79:08:10:cb:3b:a5:4f:38:91:97:
2d:90:7f:42:ab:6e:eb:3a:51:02:d3:83:da:d6:1f:
77:9b:c1:ba:71:64:b1:b4:60:4b:e3:91:a8:d4:40:
e0:d5:d6:42:83:2b:e4:ec:51:19:e8:38:28:d9:12:
97:42:8f:b6:70:a0:43:e1:61:29:e4:6e:3b:ed:7d:
73:4d:37:55:65:e5:3e:18:bd:50:02:c4:1b:9f:91:
fc:12:e8:17:b6:da:58:00:1d:80:e6:6b:dd:41:70:
69:eb:3c:0a:cd:ee:4b:55:5f:67:85:70:39:78:3b:
72:38:47:cf:41:da:16:96:da:2b:c5:bf:cb:73:9c:
17:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:ED:E4:62:6E:84:61:1D:F6:58:95:D5:59:D5:F9:65:7B:65:AF:06
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/I-3kYm6EYR32WJXVWdX5ZXtlrwY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.20.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:fd:8a:e4:23:66:ee:bb:73:bf:82:07:b1:a7:4c:d2:f3:38:
46:9a:59:d9:9a:3c:98:a0:60:3d:4d:f2:af:88:b2:e2:55:34:
44:99:c0:a3:01:7d:8e:1e:5f:b4:c6:4b:72:7e:eb:aa:37:c4:
14:b5:ce:c8:67:a5:49:c6:f8:c7:9d:bf:2f:3b:23:0e:01:36:
38:25:7e:ea:d0:9c:d5:44:bf:d0:83:1b:a7:cd:63:a7:c5:01:
19:aa:43:c0:33:99:0a:e1:2e:b6:32:d9:6a:18:3d:e5:38:d6:
de:25:b4:d8:de:2b:14:13:a1:fd:ff:ce:fc:8a:2f:6d:42:c7:
b5:b4:e9:de:9f:69:ed:d8:16:d7:cb:f5:85:ca:b4:f0:92:4d:
b9:f9:3b:12:55:c6:36:cc:3d:8d:c4:ed:8a:bd:45:30:5f:06:
4a:70:85:c6:10:9b:3e:47:3a:80:9f:c4:c2:87:4a:a3:f0:e9:
93:11:9e:39:78:31:40:8f:89:5c:49:96:6c:61:5c:12:a2:b2:
2d:ac:2b:63:ba:94:41:d8:08:43:da:db:e5:a6:eb:09:e0:44:
39:db:9b:1f:ab:70:00:3b:fe:c8:87:ac:c3:61:71:5d:cb:a8:
7d:c9:85:bc:c5:f9:94:23:f2:e7:13:1a:c4:a4:2f:71:0d:5f:
91:95:fb:56
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMjA5MTUw
MjM3MThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDIzRURFNDYyNkU4NDYx
MURGNjU4OTVENTU5RDVGOTY1N0I2NUFGMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyKDH7GoSAcfnPKWCApCTISdOz07OO7OnQuA2cQkKwF5X4Kwae
k7qkzyvOIwl4OtqzuiBp04DYODLGjwfeel+TwNIGznVZPy1eu0VM5pOXnhl1www4
cJ8qRE30o0kcCJ1QMFRFrgzxDebWaSC+PlEyo84JeAtkbq7DUMsTeQgQyzulTziR
ly2Qf0Krbus6UQLTg9rWH3ebwbpxZLG0YEvjkajUQODV1kKDK+TsURnoOCjZEpdC
j7ZwoEPhYSnkbjvtfXNNN1Vl5T4YvVACxBufkfwS6Be22lgAHYDma91BcGnrPArN
7ktVX2eFcDl4O3I4R89B2haW2ivFv8tznBePAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUI+3kYm6EYR32WJXVWdX5ZXtlrwYwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvSS0za1ltNkVZUjMyV0pYVldkWDVa
WHRscndZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsveFDAN
BgkqhkiG9w0BAQsFAAOCAQEAf/2K5CNm7rtzv4IHsadM0vM4RppZ2Zo8mKBgPU3y
r4iy4lU0RJnAowF9jh5ftMZLcn7rqjfEFLXOyGelScb4x52/LzsjDgE2OCV+6tCc
1US/0IMbp81jp8UBGapDwDOZCuEutjLZahg95TjW3iW02N4rFBOh/f/O/IovbULH
tbTp3p9p7dgW18v1hcq08JJNufk7ElXGNsw9jcTtir1FMF8GSnCFxhCbPkc6gJ/E
wodKo/DpkxGeOXgxQI+JXEmWbGFcEqKyLawrY7qUQdgIQ9rb5abrCeBEOdubH6tw
ADv+yIesw2FxXcuofcmFvMX5lCPy5xMaxKQvcQ1fkZX7Vg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org