Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/IfkDNApGgLDORZwNwEx1g1fh0L8.roa
File: IfkDNApGgLDORZwNwEx1g1fh0L8.roa (raw, json)
Hash identifier: yNXhayls3MkUXFq3KvMDx6yTmx/ehG5i0tlrmDtG3r0=
Subject key identifier: 21:F9:03:34:0A:46:80:B0:CE:45:9C:0D:C0:4C:75:83:57:E1:D0:BF
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 095A
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/IfkDNApGgLDORZwNwEx1g1fh0L8.roa
Signing time: Thu 21 Jan 2021 10:04:43 +0000
ROA not before: Thu 21 Jan 2021 10:04:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 119.15.200.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2394 (0x95a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Jan 21 10:04:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=21F903340A4680B0CE459C0DC04C758357E1D0BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:c2:54:9c:8a:91:12:a9:71:02:cd:63:68:
e6:98:f7:bb:02:51:3b:03:8b:64:40:a4:58:72:44:
c5:a8:05:f5:28:bc:db:3b:04:db:77:4b:7f:b9:e4:
e8:d1:2f:bd:0a:5d:66:e5:38:ef:f5:c8:83:48:bc:
a8:28:2d:02:0b:96:11:98:f8:bd:d3:cf:ba:3c:c1:
3e:e3:2a:ef:a6:ec:eb:6b:61:51:76:d8:40:e7:75:
47:9f:7a:53:20:24:59:29:ab:58:3a:cb:fa:02:2f:
f8:ab:2e:14:c1:46:54:e0:ce:2c:c1:aa:a5:8e:fd:
29:12:b0:e2:01:fd:54:e5:56:2f:62:72:83:2f:f1:
df:1a:26:94:4c:b6:2d:07:dc:2e:be:14:35:e3:15:
7b:8d:b9:b2:8c:c9:6c:65:09:1f:03:95:ab:73:6b:
bd:29:ba:bf:b4:b1:87:f5:92:8a:cb:6f:07:a3:7d:
3f:ea:bf:6e:46:be:5c:6f:18:1e:86:d7:16:d1:2b:
c0:2d:f5:1f:d0:84:76:a3:10:d2:b3:87:77:9c:b5:
8b:3e:7a:db:a1:4e:f0:02:a1:7b:8f:ca:4e:c3:4d:
ec:eb:6a:7b:c7:5d:58:c2:9d:af:38:23:82:be:70:
65:8a:5f:71:c9:c5:99:3e:cb:21:56:f2:37:34:cc:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F9:03:34:0A:46:80:B0:CE:45:9C:0D:C0:4C:75:83:57:E1:D0:BF
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/IfkDNApGgLDORZwNwEx1g1fh0L8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.200.0/21
Signature Algorithm: sha256WithRSAEncryption
44:80:f6:95:7c:06:73:3c:b3:2a:d8:0b:0a:59:2a:b3:a9:5d:
78:2b:e1:f9:5c:0d:de:1e:b4:8f:f3:86:10:4e:a2:0e:63:40:
a1:7c:e6:6d:0b:7a:bd:37:a7:29:11:d3:5d:73:61:6d:fa:c8:
53:83:e4:f0:37:fd:eb:99:6a:ab:d8:ea:75:f7:c9:03:9a:11:
61:2d:1a:92:ec:ae:14:09:6b:8b:19:55:e7:3b:db:0c:9a:54:
1c:c2:e9:88:60:11:77:3c:60:a1:7d:b1:4f:e2:8f:9b:8b:1c:
9e:59:6c:90:2b:ae:a8:ca:06:3c:d9:3c:1b:99:82:7f:25:77:
7b:4c:9e:75:53:6e:23:dc:70:77:85:29:93:f2:70:2f:ea:24:
94:9f:0e:3e:a0:d3:05:7f:ab:9d:80:22:3c:f2:1f:bd:9b:b7:
56:2e:03:6b:de:08:08:f3:d1:fd:99:d6:8e:de:da:b6:d9:bd:
39:c5:fc:93:1f:fb:50:fe:18:ba:45:1c:5b:a6:72:9d:1b:04:
1a:db:2e:1f:0f:68:a7:e4:68:73:48:88:fc:95:45:15:47:3b:
31:47:8c:61:e3:00:75:35:a0:21:2d:de:74:d7:9d:3b:d0:b2:
d1:32:4a:62:08:07:71:b3:55:1b:3e:9e:a5:92:e3:40:39:a0:
c2:b4:cd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:01 2025 by rpki-client