Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/IqOdgE7etTgLBAYCWKVzQL3oAnY.roa
File: IqOdgE7etTgLBAYCWKVzQL3oAnY.roa (raw, json)
Hash identifier: WHoTuMiV3s3NhXBUrDfQNSLkiy8CzlgcD6NDrUConNY=
Subject key identifier: 22:A3:9D:80:4E:DE:B5:38:0B:04:06:02:58:A5:73:40:BD:E8:02:76
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0CF6
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/IqOdgE7etTgLBAYCWKVzQL3oAnY.roa
Signing time: Wed 26 Apr 2023 10:31:23 +0000
ROA not before: Wed 26 Apr 2023 10:31:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 121.254.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3318 (0xcf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:23 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=22A39D804EDEB5380B04060258A57340BDE80276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:09:61:cc:23:19:0f:7a:7a:85:b1:1d:69:
96:ba:34:b3:c4:c1:91:c0:91:69:80:ef:be:2b:f8:
cd:9b:83:7c:cc:c9:8f:fe:14:fa:67:f7:e7:c6:0a:
ef:ea:5e:5b:d3:40:40:b5:de:17:c4:df:f9:7f:01:
3d:ff:c6:b9:d5:68:b7:9e:a3:d0:39:10:f8:5d:f6:
6d:f9:78:a8:a2:a8:9e:25:da:13:58:1c:86:2f:26:
d0:f7:22:88:be:8d:5f:ce:1e:99:91:95:a5:19:93:
f2:fd:ce:f1:c6:0d:b1:f6:21:f7:4f:9a:7c:5e:6b:
de:ea:f7:8c:a6:b4:d7:45:ab:16:36:9c:bd:8f:1b:
09:61:a6:14:92:2c:2e:f5:60:19:6f:a5:3b:42:33:
b4:fd:e0:3f:23:2f:1a:fb:98:21:c7:d4:88:93:59:
9b:fa:5e:a2:f3:bb:02:cb:38:25:00:bd:b4:98:e6:
88:a1:01:be:e8:5c:fb:54:53:84:99:fe:ac:4c:47:
7f:76:8b:8a:fc:c5:6d:c4:f3:6e:c9:62:17:a7:ce:
35:43:3e:52:fe:3d:49:a4:87:4c:e0:a9:7c:80:65:
7c:85:0e:c7:aa:c7:e0:43:15:23:d0:24:22:dc:b4:
c6:ed:8d:45:e8:fe:6a:a7:54:22:83:cf:2b:28:50:
8e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A3:9D:80:4E:DE:B5:38:0B:04:06:02:58:A5:73:40:BD:E8:02:76
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/IqOdgE7etTgLBAYCWKVzQL3oAnY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.112.0/21
Signature Algorithm: sha256WithRSAEncryption
53:6e:98:37:79:bd:95:43:d7:1b:44:ce:0d:38:f5:b6:76:cd:
46:26:24:8c:5f:b2:7c:ea:84:5a:36:15:58:19:81:7e:28:28:
a0:41:0d:3a:ab:52:63:bb:06:4b:4a:d0:91:86:6e:e6:22:58:
88:d4:f1:b8:c3:87:9f:b3:41:ea:aa:a3:e9:2a:ae:a5:a0:18:
33:b3:96:34:b8:3b:0f:d6:66:2d:e7:26:c8:a0:06:d6:83:be:
4c:bb:6e:72:fd:4b:11:1a:67:fd:2b:56:36:3d:3b:f7:bf:a1:
9d:dc:7b:9c:f8:5d:d3:91:e7:f0:ea:38:6a:d0:6e:e9:3f:4f:
5d:51:42:cd:2c:3f:e5:7d:53:87:4f:dd:a8:2d:11:90:ef:a3:
49:9d:d6:cc:c9:7e:5b:b7:8a:fe:78:9e:13:55:0a:3f:3c:0c:
e7:95:05:53:8d:c7:21:6f:e3:6f:cb:b4:78:16:1d:85:88:fb:
2b:7a:4e:48:9b:55:44:e9:fc:9b:c4:62:c1:6b:9a:56:0a:68:
68:7f:94:eb:0a:ce:99:48:5e:cd:49:69:6f:19:73:01:ee:f9:
76:bf:e6:3b:85:a6:8b:f7:d3:25:3a:7b:c8:d6:0a:fd:78:55:
22:dc:50:f4:36:78:bc:07:8a:d9:af:59:a7:a2:b9:1a:f0:97:
4c:d5:36:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org