Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/JC0zD29xApglibvjA-ppBBB-_8k.roa
File: JC0zD29xApglibvjA-ppBBB-_8k.roa (raw, json)
Hash identifier: F/X+krLhmhlLf+GDZyOTPAT0uDxYV0jsSEjgojqgxOQ=
Subject key identifier: 24:2D:33:0F:6F:71:02:98:25:89:BB:E3:03:EA:69:04:10:7E:FF:C9
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 08E0
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/JC0zD29xApglibvjA-ppBBB-_8k.roa
Signing time: Wed 18 Nov 2020 08:01:44 +0000
ROA not before: Wed 18 Nov 2020 08:01:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 119.15.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2272 (0x8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Nov 18 08:01:44 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=242D330F6F7102982589BBE303EA6904107EFFC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:d1:9a:1d:0c:e2:30:91:6c:37:61:c9:43:
e1:56:b6:89:a1:e9:db:62:8e:5e:e5:19:39:52:b1:
bc:4a:ad:a8:95:5b:bd:86:24:de:f3:21:a1:69:18:
db:77:57:e3:4d:7d:8b:6a:86:99:ac:2e:a0:b7:a1:
23:f0:21:a8:65:3b:b5:7e:3b:90:de:93:25:92:53:
7a:50:37:47:a7:6a:52:92:66:19:8f:f5:11:0d:43:
cf:4c:22:74:75:f9:4c:f9:c5:95:76:05:fe:76:c1:
2a:03:38:ae:58:cd:34:8e:06:70:43:b9:08:21:fc:
6f:14:4a:d6:a5:35:7a:dd:7b:f2:75:d5:fd:07:50:
ba:14:58:3e:00:bf:78:1e:3c:b1:ae:ba:54:93:93:
bc:6a:4e:2a:db:56:c1:5a:52:02:54:5f:e9:9b:27:
4e:aa:3d:0d:44:8a:b1:31:16:84:b7:9e:a7:bb:75:
78:af:23:30:ca:dc:10:fc:b5:98:a6:ba:99:dd:27:
52:ac:1b:98:6f:6b:3f:3b:b6:63:53:1a:bb:cf:b5:
41:2a:f2:73:53:82:5e:34:47:00:b0:80:1d:60:72:
c0:7b:53:ce:9b:b8:41:e7:7f:29:ba:8f:f9:91:ac:
76:c1:42:5b:08:f3:74:18:17:ac:db:e7:17:6b:66:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2D:33:0F:6F:71:02:98:25:89:BB:E3:03:EA:69:04:10:7E:FF:C9
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/JC0zD29xApglibvjA-ppBBB-_8k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.216.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:98:e2:63:21:5a:76:0d:16:9f:4c:16:ad:ea:88:d2:dd:d2:
ed:7a:de:23:e2:af:c1:07:a2:3e:b3:db:8b:ab:e7:24:95:83:
9f:69:7e:4f:1b:9f:15:80:49:38:ba:40:03:28:07:8b:66:57:
99:56:2c:1e:24:ff:f7:88:79:ed:b9:f3:16:b9:b8:50:b1:65:
72:e6:5b:ae:62:d0:69:92:99:35:3c:1a:11:0f:83:6a:ac:b1:
62:a3:eb:99:de:5c:06:74:35:5b:75:53:8d:d3:e2:0a:f2:b9:
1b:5a:97:d2:75:e1:ce:d7:8a:43:ca:2a:24:b0:37:3b:ad:4b:
4c:cf:83:9b:67:28:c0:89:22:e1:d3:92:13:98:a6:05:f6:03:
f9:fe:2a:34:95:63:f1:4a:ae:5c:37:3a:00:d1:4f:a5:ff:04:
fa:fd:0e:3e:eb:18:8f:03:86:1b:c9:c2:8c:4f:d7:fd:83:4e:
e0:ab:e5:8e:cd:6f:48:2e:12:28:7e:06:7c:1e:96:f0:81:67:
da:6c:52:4f:15:67:27:30:5a:49:75:ef:17:bc:87:ea:b8:41:
b9:5b:d3:2f:aa:90:e5:b1:5e:69:83:1e:60:dc:ac:fe:3b:bb:
3d:48:4c:aa:a1:49:f6:c4:7a:4c:6c:57:37:24:c7:97:dc:92:
e3:6f:93:83
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMDExMTgw
ODAxNDRaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDI0MkQzMzBGNkY3MTAy
OTgyNTg5QkJFMzAzRUE2OTA0MTA3RUZGQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCu5NGaHQziMJFsN2HJQ+FWtomh6dtijl7lGTlSsbxKraiVW72G
JN7zIaFpGNt3V+NNfYtqhpmsLqC3oSPwIahlO7V+O5DekyWSU3pQN0enalKSZhmP
9RENQ89MInR1+Uz5xZV2Bf52wSoDOK5YzTSOBnBDuQgh/G8UStalNXrde/J11f0H
ULoUWD4Av3gePLGuulSTk7xqTirbVsFaUgJUX+mbJ06qPQ1EirExFoS3nqe7dXiv
IzDK3BD8tZimupndJ1KsG5hvaz87tmNTGrvPtUEq8nNTgl40RwCwgB1gcsB7U86b
uEHnfym6j/mRrHbBQlsI83QYF6zb5xdrZttJAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUJC0zD29xApglibvjA+ppBBB+/8kwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvSkMwekQyOXhBcGdsaWJ2akEtcHBC
QkItXzhrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3cP2DAN
BgkqhkiG9w0BAQsFAAOCAQEAXpjiYyFadg0Wn0wWreqI0t3S7XreI+KvwQeiPrPb
i6vnJJWDn2l+TxufFYBJOLpAAygHi2ZXmVYsHiT/94h57bnzFrm4ULFlcuZbrmLQ
aZKZNTwaEQ+DaqyxYqPrmd5cBnQ1W3VTjdPiCvK5G1qX0nXhzteKQ8oqJLA3O61L
TM+Dm2cowIki4dOSE5imBfYD+f4qNJVj8UquXDc6ANFPpf8E+v0OPusYjwOGG8nC
jE/X/YNO4Kvljs1vSC4SKH4GfB6W8IFn2mxSTxVnJzBaSXXvF7yH6rhBuVvTL6qQ
5bFeaYMeYNys/ju7PUhMqqFJ9sR6TGxXNyTHl9yS42+Tgw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org