Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/MuJzpSi4G_K89zR8Zba-xsbw1W4.roa
File: MuJzpSi4G_K89zR8Zba-xsbw1W4.roa (raw, json)
Hash identifier: HMqL8g4RLWfv8xYHhjWc7blNYCaXO8XvGPbLavEzJGg=
Subject key identifier: 32:E2:73:A5:28:B8:1B:F2:BC:F7:34:7C:65:B6:BE:C6:C6:F0:D5:6E
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E22
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/MuJzpSi4G_K89zR8Zba-xsbw1W4.roa
Signing time: Fri 01 Sep 2023 08:49:19 +0000
ROA not before: Fri 01 Sep 2023 08:49:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 27.96.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3618 (0xe22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=32E273A528B81BF2BCF7347C65B6BEC6C6F0D56E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:76:7c:22:f9:8a:81:75:30:32:1b:85:c2:
27:8b:07:b4:fd:4b:c1:d7:e3:4b:af:13:6c:ca:cd:
26:ca:74:ec:30:69:7a:98:09:8b:7d:50:8c:0d:2e:
e3:58:fc:ae:1d:0b:75:6c:92:bb:bd:9f:15:76:62:
7c:e2:b6:4b:69:a4:16:1c:d5:b2:e1:cf:d3:10:30:
b3:59:bd:38:2a:7a:f9:89:67:79:65:89:d9:ab:af:
88:59:f2:1a:1f:28:25:f5:02:a5:43:68:80:8b:f4:
d6:d4:57:cf:be:35:ed:74:71:46:2f:08:34:e7:dc:
4b:23:a3:52:27:0d:77:38:c3:35:3e:29:d6:a6:f1:
97:2b:8d:6d:e2:4c:f1:2f:4a:3d:e9:23:5b:91:99:
62:60:97:2e:07:1f:d9:71:b0:80:05:2b:2c:9a:d2:
ca:e0:ef:64:0f:6d:37:ce:28:30:c3:1f:d5:69:ef:
87:9f:7c:fe:c9:08:5f:15:9b:dd:52:e4:3a:f0:ee:
46:8a:f1:73:32:e4:46:24:6d:75:8b:13:aa:78:1d:
d9:a3:b7:34:b0:8b:9d:f3:03:6c:31:b8:7e:4c:12:
76:98:af:bb:b0:1b:db:c1:73:b7:cc:e7:e5:e6:2f:
22:46:7d:99:aa:59:2e:06:3f:f0:00:a5:d3:ff:e8:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E2:73:A5:28:B8:1B:F2:BC:F7:34:7C:65:B6:BE:C6:C6:F0:D5:6E
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/MuJzpSi4G_K89zR8Zba-xsbw1W4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.224.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:4a:cc:8a:11:1c:3d:f6:78:21:99:3d:64:ca:f5:51:ad:00:
93:ca:e6:6d:e1:61:4f:83:8c:99:f3:ad:d2:a2:63:e1:03:ce:
95:d6:b4:6b:aa:07:8a:2e:9e:c0:e9:3b:12:31:7b:f1:74:00:
36:8f:2f:4c:6a:d7:0a:ab:01:9f:9c:56:b7:16:14:ad:97:16:
a9:d7:9c:12:84:47:05:87:bf:ca:1e:ed:7f:9f:34:e5:f3:67:
46:58:9a:34:38:2c:5b:21:31:85:3c:d9:05:71:0c:7c:57:b0:
ae:f6:e7:25:b2:41:01:29:4f:85:cb:14:e5:b8:82:c6:9b:69:
0a:be:6b:94:1a:3e:68:cb:9d:66:70:bd:e9:77:1f:9b:dc:64:
9a:41:df:88:e1:55:b1:c0:60:86:61:ad:90:f2:df:9d:6c:f5:
b0:8f:17:27:59:a6:42:11:d0:0a:49:23:09:ef:b1:39:0c:43:
61:cb:78:7a:bd:fe:ac:e8:48:a4:cb:be:aa:74:a0:a3:98:7b:
73:33:ed:2c:be:19:0d:8a:5d:b6:a5:01:24:4a:09:77:90:44:
d7:3d:ab:b6:a1:ce:8c:fa:a2:5f:f7:de:05:cc:58:06:06:8f:
7d:90:25:8c:ad:81:63:8c:fd:b6:d0:7f:f7:fe:78:d2:fd:47:
0b:94:4d:ea
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw
ODQ5MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMyRTI3M0E1MjhCODFC
RjJCQ0Y3MzQ3QzY1QjZCRUM2QzZGMEQ1NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCltXZ8IvmKgXUwMhuFwieLB7T9S8HX40uvE2zKzSbKdOwwaXqY
CYt9UIwNLuNY/K4dC3Vskru9nxV2YnzitktppBYc1bLhz9MQMLNZvTgqevmJZ3ll
idmrr4hZ8hofKCX1AqVDaICL9NbUV8++Ne10cUYvCDTn3Esjo1InDXc4wzU+Kdam
8ZcrjW3iTPEvSj3pI1uRmWJgly4HH9lxsIAFKyya0srg72QPbTfOKDDDH9Vp74ef
fP7JCF8Vm91S5Drw7kaK8XMy5EYkbXWLE6p4HdmjtzSwi53zA2wxuH5MEnaYr7uw
G9vBc7fM5+XmLyJGfZmqWS4GP/AApdP/6H7pAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUMuJzpSi4G/K89zR8Zba+xsbw1W4wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvTXVKenBTaTRHX0s4OXpSOFpiYS14
c2J3MVc0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAxtg4DAN
BgkqhkiG9w0BAQsFAAOCAQEATErMihEcPfZ4IZk9ZMr1Ua0Ak8rmbeFhT4OMmfOt
0qJj4QPOlda0a6oHii6ewOk7EjF78XQANo8vTGrXCqsBn5xWtxYUrZcWqdecEoRH
BYe/yh7tf5805fNnRliaNDgsWyExhTzZBXEMfFewrvbnJbJBASlPhcsU5biCxptp
Cr5rlBo+aMudZnC96Xcfm9xkmkHfiOFVscBghmGtkPLfnWz1sI8XJ1mmQhHQCkkj
Ce+xOQxDYct4er3+rOhIpMu+qnSgo5h7czPtLL4ZDYpdtqUBJEoJd5BE1z2rtqHO
jPqiX/feBcxYBgaPfZAljK2BY4z9ttB/9/540v1HC5RN6g==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:31 2025 by rpki-client