Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/PY9alLeLUdBWbSOPG7JGElhuqdc.roa
File: PY9alLeLUdBWbSOPG7JGElhuqdc.roa (raw, json)
Hash identifier: xODrM7Ucze2S62wzhsVTOqNFnkaqk/5hhyXj7NMkkfk=
Subject key identifier: 3D:8F:5A:94:B7:8B:51:D0:56:6D:23:8F:1B:B2:46:12:58:6E:A9:D7
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/PY9alLeLUdBWbSOPG7JGElhuqdc.roa
Signing time: Thu 15 Sep 2022 02:37:29 +0000
ROA not before: Thu 15 Sep 2022 02:37:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 27.96.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3D8F5A94B78B51D0566D238F1BB24612586EA9D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:d0:1e:e5:19:fb:a1:39:8d:45:f2:26:8b:
96:f5:6f:da:be:e2:23:99:01:6e:de:76:6d:ad:2a:
16:d7:bc:54:b3:0f:bd:f5:30:8e:0e:cc:5e:cb:bc:
5c:78:86:9f:60:27:9a:20:9d:a2:b8:c6:d3:14:76:
04:07:14:02:17:01:8d:a1:e0:3f:b7:83:e2:60:c9:
5e:4d:4a:cb:f9:b2:b9:3d:86:d7:85:01:5c:b0:71:
6a:f1:6d:93:34:8e:0f:b2:51:62:25:4d:14:78:9a:
a3:8b:53:e3:a2:45:2b:ff:79:b4:86:7f:34:d9:33:
e0:c1:58:a2:4b:e7:62:c6:d5:24:9d:c6:f3:6d:b1:
df:fe:36:de:28:d1:99:e9:d2:2d:29:60:91:8e:74:
c2:6f:37:e4:74:a1:cc:5f:03:37:40:07:dc:d2:f6:
72:27:4e:87:c5:16:d7:1f:85:29:f4:dc:6f:09:47:
d3:e8:88:3a:66:c2:4e:a5:00:49:70:e6:4f:52:bc:
4b:aa:cf:d6:d5:98:64:de:17:f7:de:3d:e5:3f:9e:
84:08:47:08:15:38:64:bd:2c:00:5f:9e:20:de:10:
4c:35:ae:ae:ff:f6:d5:76:40:bf:3b:b8:9c:f6:08:
5e:19:aa:87:6d:6c:e1:02:f5:3c:cd:58:0b:be:3a:
be:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8F:5A:94:B7:8B:51:D0:56:6D:23:8F:1B:B2:46:12:58:6E:A9:D7
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/PY9alLeLUdBWbSOPG7JGElhuqdc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.224.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:1d:31:82:9b:6e:eb:11:34:81:d5:bb:9d:a8:88:ac:c8:5c:
97:f7:34:4d:df:33:93:ff:24:b5:fd:07:ef:00:38:22:e3:1a:
1d:95:ce:46:9e:91:87:2d:98:55:f3:a8:d3:e1:0c:a9:25:da:
61:32:12:83:58:d2:b7:41:02:df:f4:c1:f6:ac:4a:0d:74:0a:
e4:9f:08:39:9d:9e:18:8d:a8:db:10:85:59:41:87:92:e1:d4:
51:ec:74:c9:5e:ef:58:e7:00:83:ba:f5:5a:a5:4f:cf:76:ba:
15:de:16:0d:c9:61:3e:92:2c:8a:c8:96:88:62:00:d2:f9:cf:
ea:14:64:1f:8f:d0:e5:56:43:fc:cb:e3:f3:7a:65:ae:38:26:
73:83:bc:ea:47:bc:f8:ae:e2:60:77:e0:c3:29:94:37:a5:49:
9f:ac:2e:b0:52:c6:34:92:bd:bb:1e:03:1c:34:fe:9a:b5:07:
a1:a3:e1:dc:c4:27:89:c0:3f:83:8f:ad:10:cc:62:73:e2:4c:
84:fd:c2:59:4e:df:bb:01:09:94:d8:6c:7e:bd:3c:ef:b8:99:
db:08:15:41:a8:65:19:5b:15:89:41:90:b9:58:50:56:f7:44:
69:d7:d4:85:40:56:2b:bf:20:77:bc:5a:d6:41:4a:f3:e0:0b:
d4:19:c2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org