Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/IsP4CEVPHSPC9Ilrnijg78QAO9w.roa
File: IsP4CEVPHSPC9Ilrnijg78QAO9w.roa (raw, json)
Hash identifier: zCmt0yQyPABNQoGN/hRHpowS4EBz8PLQYddUcDWJTSU=
Subject key identifier: 22:C3:F8:08:45:4F:1D:23:C2:F4:89:6B:9E:28:E0:EF:C4:00:3B:DC
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0C23
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/IsP4CEVPHSPC9Ilrnijg78QAO9w.roa
Signing time: Mon 07 Nov 2022 06:10:56 +0000
ROA not before: Mon 07 Nov 2022 06:10:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18046
IP address blocks: 119.15.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3107 (0xc23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Nov 7 06:10:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=22C3F808454F1D23C2F4896B9E28E0EFC4003BDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0a:ec:6c:9d:88:8d:02:be:4e:ab:d9:13:08:
a8:80:c4:20:33:da:92:95:a3:66:e6:cf:fb:32:19:
6f:e9:d4:bb:70:8d:9b:b4:88:d5:75:f3:82:69:e4:
ec:d9:5b:79:46:d4:0b:46:e6:03:92:b9:c0:47:af:
44:04:13:77:2d:3b:e0:96:b8:e8:20:0d:58:4c:32:
27:49:51:d8:17:85:3f:25:ef:40:f3:2f:36:10:1a:
f0:8f:5c:eb:5f:78:3b:16:e5:e2:4d:0e:3a:8c:b9:
17:5d:c5:b2:53:5b:f0:76:b0:32:9c:95:40:fa:28:
b8:cc:5a:89:8c:49:38:5c:f3:61:cf:7d:39:31:08:
f8:a2:25:ae:56:d9:d6:85:c9:09:fa:51:a3:93:34:
d4:71:84:fa:11:35:aa:a5:33:4a:8c:98:2f:47:bb:
be:85:26:9c:a8:05:47:5a:de:e8:fc:28:2c:74:f5:
68:96:a5:5c:15:44:0e:40:ef:fc:07:6b:9a:15:96:
a5:f9:f5:15:77:f3:b7:33:ef:76:7f:ad:1d:e4:c4:
e6:9c:d2:2e:ee:f2:3e:04:c0:1f:65:cb:41:87:aa:
dc:96:f5:b2:19:e3:90:33:5b:b9:36:ae:70:29:d0:
f9:b3:46:65:c5:c9:71:33:d2:6f:b2:c7:5a:f1:ba:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C3:F8:08:45:4F:1D:23:C2:F4:89:6B:9E:28:E0:EF:C4:00:3B:DC
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/IsP4CEVPHSPC9Ilrnijg78QAO9w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.192.0/21
Signature Algorithm: sha256WithRSAEncryption
85:4d:c0:af:01:c7:b3:ac:f8:3e:d8:ac:39:00:15:e3:4d:b8:
46:b1:8e:0a:20:73:1a:ac:69:52:8c:33:94:b5:fe:03:2b:58:
ad:ac:60:39:05:88:47:0d:77:d3:ba:63:45:4a:af:e3:6e:52:
4f:d8:84:fc:0d:93:24:86:4b:d3:95:d1:13:09:6e:5c:94:8e:
37:d5:77:b2:31:03:c6:b4:3c:5d:73:8d:01:21:0b:26:fc:32:
1e:b7:7f:23:b2:b2:af:e3:b3:57:ef:c5:3a:a0:20:82:2e:68:
df:d8:26:53:95:90:38:f8:74:51:c6:ee:cd:f1:45:f8:bb:37:
e1:fa:3b:41:4e:a8:70:52:ec:f7:8c:4f:0a:ca:18:b7:c7:13:
d2:ed:df:c9:0f:8c:f1:01:76:a9:ad:38:05:3b:a0:e5:50:0c:
31:84:78:b0:68:20:23:60:6a:d9:b0:f3:c8:f7:62:b0:9e:7d:
54:b1:0d:00:6a:0a:31:42:2d:7d:6c:7c:e9:6b:5b:75:65:c4:
1f:80:c0:ba:9d:4f:93:e3:c7:7f:26:e2:ba:e2:37:2e:eb:f6:
b0:ca:e4:25:be:17:f3:6d:4e:de:17:a3:1b:39:75:ba:d3:27:
e9:a0:8d:a8:56:be:b4:b5:c6:02:5d:9a:dd:22:46:d9:1e:d5:
ed:ea:c5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org