Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/Mk83AWQwIC4WV9X03686nNMRFaM.roa
File: Mk83AWQwIC4WV9X03686nNMRFaM.roa (raw, json)
Hash identifier: 1xIZvFbyR7YN7mR12hZxSrwLNDSaz5Yx+N8iGC+0Lps=
Subject key identifier: 32:4F:37:01:64:30:20:2E:16:57:D5:F4:DF:AF:3A:9C:D3:11:15:A3
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Mk83AWQwIC4WV9X03686nNMRFaM.roa
Signing time: Thu 15 Sep 2022 02:37:28 +0000
ROA not before: Thu 15 Sep 2022 02:37:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 113.61.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=324F37016430202E1657D5F4DFAF3A9CD31115A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:2a:4d:d5:43:b9:04:c1:f9:71:f4:ee:69:
1e:1a:ba:61:83:fa:c5:de:39:04:14:fc:bb:50:9e:
ff:bf:f7:bc:c1:1a:4d:26:c4:c5:33:ba:2b:d9:c8:
cf:72:a8:7a:aa:6d:0a:72:3f:9f:26:ba:89:91:41:
57:82:cf:b3:36:9c:82:88:c8:9b:81:ac:11:4b:7b:
ca:10:95:ee:94:e3:6c:2e:53:89:9a:85:5e:7f:3a:
b9:a9:b8:02:0c:0b:85:e3:67:5e:62:6e:95:b0:6b:
32:09:31:35:a1:48:a3:90:51:d4:01:2f:16:9d:1b:
6c:14:80:11:43:a8:67:d8:42:40:07:27:15:3f:1c:
e7:fb:5e:71:1f:07:6d:e9:76:8d:0d:7e:f2:56:57:
18:3a:b6:91:61:71:78:6f:37:d8:ff:8c:e6:88:c2:
60:d7:ee:9b:fc:54:e9:e1:77:7b:62:c7:cf:c9:cb:
16:d5:f7:26:36:cc:ec:a3:02:60:74:08:29:12:7b:
e6:fe:73:9f:33:48:be:59:30:89:1a:6d:03:2c:cf:
06:b9:05:5e:0d:97:1e:63:7a:33:e3:40:72:2e:26:
fe:1f:f8:cd:0b:ed:7b:51:55:ab:cc:fa:e9:81:2b:
e9:6b:ec:20:8f:4e:9f:ef:e3:26:43:80:4a:1c:77:
7a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4F:37:01:64:30:20:2E:16:57:D5:F4:DF:AF:3A:9C:D3:11:15:A3
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Mk83AWQwIC4WV9X03686nNMRFaM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.144.0/20
Signature Algorithm: sha256WithRSAEncryption
2c:44:2d:22:fe:35:9c:a7:7f:69:4d:fe:1e:c3:39:a2:b6:d8:
a4:67:e4:69:55:0f:e9:64:f6:1c:c8:ca:3d:4b:a1:66:75:fd:
8d:8b:c1:8b:9d:ff:b5:61:a0:ad:de:7d:fa:32:ca:d8:d5:26:
c3:9c:6f:79:69:94:f2:46:90:e0:9d:79:fd:a6:78:8d:5e:fa:
e2:d8:61:b9:8f:37:71:b2:42:30:30:0b:35:3c:a5:cb:54:69:
73:2e:84:7b:07:40:a7:f5:ae:60:c2:61:84:6c:7b:aa:c9:74:
eb:37:0c:e9:9a:0e:ad:43:d3:c8:fe:6b:1b:77:ff:fa:23:7c:
e2:10:74:5b:3b:f5:3e:99:95:25:b6:ba:62:91:2f:51:b8:5b:
7e:8d:b1:97:dc:3a:b1:ab:bd:4f:e2:4c:05:6d:e2:cd:8c:8c:
96:03:4f:e2:bb:48:9a:14:00:3c:5e:e7:14:be:f8:33:6d:49:
01:a0:1a:d6:99:80:40:f5:b0:3a:7e:f3:d3:88:33:c5:d4:45:
03:16:d6:9d:a1:f3:dd:ea:e4:4b:dd:de:7f:57:c8:df:65:b3:
ac:92:2e:a1:4a:43:7c:32:75:57:00:e1:5b:b5:3f:46:c4:be:
92:eb:cc:94:dd:41:d5:2b:0e:5f:c7:92:22:5d:5d:16:10:f1:
0d:a5:3d:84
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMjA5MTUw
MjM3MjhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDMyNEYzNzAxNjQzMDIw
MkUxNjU3RDVGNERGQUYzQTlDRDMxMTE1QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvNSpN1UO5BMH5cfTuaR4aumGD+sXeOQQU/LtQnv+/97zBGk0m
xMUzuivZyM9yqHqqbQpyP58muomRQVeCz7M2nIKIyJuBrBFLe8oQle6U42wuU4ma
hV5/OrmpuAIMC4XjZ15ibpWwazIJMTWhSKOQUdQBLxadG2wUgBFDqGfYQkAHJxU/
HOf7XnEfB23pdo0NfvJWVxg6tpFhcXhvN9j/jOaIwmDX7pv8VOnhd3tix8/JyxbV
9yY2zOyjAmB0CCkSe+b+c58zSL5ZMIkabQMszwa5BV4Nlx5jejPjQHIuJv4f+M0L
7XtRVavM+umBK+lr7CCPTp/v4yZDgEocd3rfAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUMk83AWQwIC4WV9X03686nNMRFaMwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvTWs4M0FXUXdJQzRXVjlYMDM2ODZu
Tk1SRmFNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHE9kDAN
BgkqhkiG9w0BAQsFAAOCAQEALEQtIv41nKd/aU3+HsM5orbYpGfkaVUP6WT2HMjK
PUuhZnX9jYvBi53/tWGgrd59+jLK2NUmw5xveWmU8kaQ4J15/aZ4jV764thhuY83
cbJCMDALNTyly1Rpcy6EewdAp/WuYMJhhGx7qsl06zcM6ZoOrUPTyP5rG3f/+iN8
4hB0Wzv1PpmVJba6YpEvUbhbfo2xl9w6sau9T+JMBW3izYyMlgNP4rtImhQAPF7n
FL74M21JAaAa1pmAQPWwOn7z04gzxdRFAxbWnaHz3erkS93ef1fI32WzrJIuoUpD
fDJ1VwDhW7U/RsS+kuvMlN1B1SsOX8eSIl1dFhDxDaU9hA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org