Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/Pi_wA3AOxhTbcAfQVwtvgpJW1UA.roa
File: Pi_wA3AOxhTbcAfQVwtvgpJW1UA.roa (raw, json)
Hash identifier: 6NCA8uJDYurGyE3gduC9sKMA0NN8wMeSdIM93RsyWS0=
Subject key identifier: 3E:2F:F0:03:70:0E:C6:14:DB:70:07:D0:57:0B:6F:82:92:56:D5:40
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0912
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Pi_wA3AOxhTbcAfQVwtvgpJW1UA.roa
Signing time: Tue 24 Nov 2020 03:26:39 +0000
ROA not before: Tue 24 Nov 2020 03:26:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 119.15.192.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2322 (0x912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Nov 24 03:26:39 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3E2FF003700EC614DB7007D0570B6F829256D540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:c1:3b:aa:e3:8f:b4:05:15:41:47:3a:bf:
e4:86:de:ca:43:d7:0e:a4:81:27:74:9a:62:22:1a:
ca:0a:f6:64:61:d7:7d:98:cd:2a:af:92:f0:19:4b:
dd:1c:30:48:b3:e8:f3:ac:aa:a3:a4:35:be:85:46:
52:87:23:e6:db:16:cb:1a:b1:79:34:29:ec:99:5c:
b9:0e:c0:dd:70:97:3c:79:c4:df:1a:80:ee:97:c3:
87:5c:7d:c0:d7:2e:0b:57:82:ea:b0:9e:20:1b:58:
16:e4:37:64:20:c9:a4:f5:07:a7:94:0f:a3:ae:b1:
4e:59:19:0f:63:52:77:df:11:bc:c2:23:42:f1:49:
a7:81:91:f1:2f:e9:1c:b5:bd:35:7f:c5:fd:20:60:
d7:00:ec:5d:5e:83:9b:5a:9d:46:fd:be:52:42:d0:
79:ba:ec:2d:bf:e5:6c:d8:52:aa:45:f7:3c:7a:b2:
3a:bc:a3:0c:a4:39:8d:a0:8e:0b:b1:f1:03:df:a3:
70:7f:f7:e3:4f:7f:ec:5d:c0:cc:44:a8:58:03:13:
84:e8:52:36:6a:8a:36:df:ef:16:48:a8:f2:3e:6c:
cb:da:fa:bc:84:39:c0:87:06:20:90:94:ab:65:da:
18:35:8b:f7:7e:e8:e2:38:8d:06:4a:bd:a2:90:d4:
d8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2F:F0:03:70:0E:C6:14:DB:70:07:D0:57:0B:6F:82:92:56:D5:40
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Pi_wA3AOxhTbcAfQVwtvgpJW1UA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.192.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:1e:17:f2:71:81:ce:b7:6c:01:3c:cd:f6:b4:79:1a:5e:b8:
f2:48:93:e9:7d:30:1d:3c:54:9f:8e:9c:44:21:5b:73:58:75:
26:02:06:ad:6f:28:a0:0a:7a:52:9f:d1:ed:4d:ea:01:0d:3f:
16:2a:8a:9c:de:7a:c3:97:b2:4f:50:1d:e0:4e:5b:4c:d3:71:
a7:da:3c:58:2b:15:5a:7f:bf:e6:f0:65:1b:c1:4e:23:95:4c:
58:94:93:92:1e:61:7a:61:38:72:b9:63:4a:5c:d0:db:7b:f4:
7d:9f:3e:09:a2:eb:9b:e9:3a:52:5c:a0:4e:0e:cf:02:70:e6:
f6:b3:ec:3b:ce:17:67:40:23:98:68:a3:8d:72:a8:80:df:74:
69:d3:13:67:96:5e:36:07:72:b8:81:80:28:75:74:6f:55:3f:
fd:69:4d:41:01:7c:af:b9:3a:8c:97:18:5f:89:b9:14:3b:bd:
1c:d3:18:39:74:23:32:90:47:45:63:99:54:49:c2:e0:ea:2c:
76:62:fa:4b:88:a6:d8:59:07:8c:0b:45:40:f0:ca:57:41:b4:
58:da:74:c5:2b:ee:f9:d9:78:89:e7:7e:87:55:d6:21:bb:6c:
56:4f:55:45:53:e3:0a:b5:97:4e:d4:06:84:44:48:4d:c2:23:
0b:71:df:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org