Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/OSAQEIRYDggYly2LkNn8kC7pLYA.roa
File: OSAQEIRYDggYly2LkNn8kC7pLYA.roa (raw, json)
Hash identifier: VWa2nvdI5TzBow8liBQ4Kw5CY+bK3bF76S5Rn6ongJU=
Subject key identifier: 39:20:10:10:84:58:0E:08:18:97:2D:8B:90:D9:FC:90:2E:E9:2D:80
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/OSAQEIRYDggYly2LkNn8kC7pLYA.roa
Signing time: Thu 15 Sep 2022 02:37:29 +0000
ROA not before: Thu 15 Sep 2022 02:37:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 182.155.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3920101084580E0818972D8B90D9FC902EE92D80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:ad:fe:94:71:27:c5:4a:b3:bf:10:aa:07:
5d:e3:a5:3d:68:79:15:04:9e:fb:ac:a5:25:85:01:
31:35:57:a6:e1:60:5b:c6:33:67:eb:d7:ef:d6:ac:
7e:a5:42:91:a6:6e:e9:36:da:1c:58:1d:c9:3a:3d:
3a:ea:d2:5a:2c:48:c0:c7:fb:3b:f5:3b:ba:55:d8:
24:a6:82:fd:4d:9b:6e:53:9c:8e:92:c1:ff:68:c3:
5d:32:34:ef:6b:13:a4:e2:3e:5f:ca:5d:d1:e5:3e:
56:ce:f4:9f:f3:06:0a:c7:2d:e5:9a:98:dd:2c:28:
49:83:fb:fd:97:ad:da:31:e7:d3:26:8c:18:82:77:
9e:32:0f:a4:83:8f:c5:0b:0c:85:ba:d1:29:fa:92:
62:d9:73:0e:32:50:84:d4:27:c2:b4:8c:97:f2:b4:
be:94:ba:33:99:a8:00:ca:3c:5d:29:70:84:41:b9:
4e:10:b7:c2:7b:a4:ab:89:fb:23:4a:56:51:24:2b:
4c:8e:4b:56:13:56:e7:3d:16:d6:f6:15:5c:33:a8:
8d:ae:6c:a2:f6:1a:ee:29:22:14:b3:45:83:78:df:
d3:07:ca:4a:72:2d:76:0a:40:7a:c9:d0:c8:06:88:
6e:1f:1f:04:30:b2:f4:30:97:17:bc:f2:a4:d8:94:
10:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:20:10:10:84:58:0E:08:18:97:2D:8B:90:D9:FC:90:2E:E9:2D:80
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/OSAQEIRYDggYly2LkNn8kC7pLYA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.64.0/19
Signature Algorithm: sha256WithRSAEncryption
04:13:46:93:25:c0:40:fe:1e:98:8d:0d:2e:23:83:dd:57:7e:
14:e7:26:67:8b:e2:c7:0f:f6:b9:9c:dd:2d:f9:e9:25:ae:ef:
7e:0a:29:54:9c:3b:05:2a:b1:4b:92:31:69:26:f0:af:bc:45:
fd:71:e1:81:51:b6:8c:8f:1f:af:da:e4:75:71:db:e4:c3:81:
3e:15:23:3d:9a:38:cc:49:bf:76:51:2c:cf:96:e6:c5:24:88:
7d:af:b4:da:4a:2e:1f:0e:a9:7c:8d:43:d0:5b:29:cc:05:a7:
1c:91:fc:85:11:2e:80:1c:fd:d1:b6:ef:ca:81:d0:b3:70:9e:
40:6f:50:9b:53:cc:2d:48:a8:e0:c1:a1:18:ce:8d:e2:16:ce:
a0:15:5c:89:0b:e6:5d:e3:10:5f:5e:fb:89:3d:ac:be:5e:20:
67:20:2c:8e:52:1b:81:67:62:9b:9b:15:86:29:dd:89:ed:51:
8b:f7:bb:33:c3:fd:9b:83:44:f2:c4:13:85:9c:be:a1:17:7b:
e8:6a:55:09:97:05:e7:00:dd:d4:2a:d5:8f:17:5e:d0:8a:f4:
09:96:37:44:e2:d4:1b:70:8a:30:ac:0c:a9:6e:92:89:93:9e:
12:ea:9a:ae:3a:9d:c2:db:83:1d:93:af:3f:e8:cf:a2:4f:0d:
c6:65:f1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org