Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/RtY0jwc7QqRq-M__l4WD5zEzK4Y.roa
File: RtY0jwc7QqRq-M__l4WD5zEzK4Y.roa (raw, json)
Hash identifier: L/vgqHJeQUqzdpaRcIi7XTUhMI53FIwQO4d/K/1VRMk=
Subject key identifier: 46:D6:34:8F:07:3B:42:A4:6A:F8:CF:FF:97:85:83:E7:31:33:2B:86
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0B24
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/RtY0jwc7QqRq-M__l4WD5zEzK4Y.roa
Signing time: Thu 16 Dec 2021 06:50:58 +0000
ROA not before: Thu 16 Dec 2021 06:50:58 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17809
IP address blocks: 203.222.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2852 (0xb24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 16 06:50:58 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=46D6348F073B42A46AF8CFFF978583E731332B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:b1:89:2c:71:7e:43:b4:46:9f:8b:c1:c9:
ec:8c:95:81:91:82:80:bb:56:af:58:6a:8d:28:97:
27:43:30:5f:5a:4e:c0:c4:f7:5e:2f:fd:ef:76:8f:
61:c8:80:38:c8:4e:26:40:d9:c2:5e:7c:3f:47:a3:
79:f9:b8:47:0d:e7:fb:a2:7d:25:9b:cb:90:68:8e:
7d:f3:95:3b:db:ac:9f:a0:2d:98:f5:56:7e:20:27:
9e:82:56:cb:9e:64:e5:99:96:e7:cd:5e:91:35:f7:
57:29:5c:c0:9e:23:1a:4b:23:d0:06:63:fe:4e:14:
17:d9:80:ac:8f:cf:d9:b3:5e:f3:ce:25:de:1a:50:
41:89:e7:df:95:e8:01:0b:d4:19:62:c3:20:20:66:
b8:aa:e3:9b:0c:cf:b7:17:bf:9e:5d:d9:92:b9:3a:
95:53:16:ae:30:0f:ab:77:2a:08:81:44:52:a6:40:
f2:9a:66:7b:39:fe:7c:79:be:37:6a:db:ee:64:33:
a6:89:48:04:e2:35:a8:02:6f:38:8c:12:55:d4:db:
05:b4:a2:eb:21:0a:f4:9c:2f:f1:e1:f1:81:ae:db:
e1:30:b7:ce:c6:d3:71:53:9a:bc:e5:d9:78:6c:66:
a4:86:d3:f0:c4:3c:dc:79:5a:1f:a8:25:ba:f0:d1:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D6:34:8F:07:3B:42:A4:6A:F8:CF:FF:97:85:83:E7:31:33:2B:86
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/RtY0jwc7QqRq-M__l4WD5zEzK4Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.8.0/21
Signature Algorithm: sha256WithRSAEncryption
86:10:b0:1f:8a:30:50:fd:05:e1:aa:4a:56:67:1e:85:d8:37:
ce:97:3e:a0:7b:e2:d4:c1:1f:79:34:34:27:c8:4c:b4:0d:d4:
b9:03:9b:a1:68:56:1a:1a:83:ab:8f:2d:71:9c:22:b1:59:4d:
36:ca:4e:a6:80:1f:de:85:a2:ef:77:0e:59:eb:c1:c5:48:e9:
6a:8e:1a:65:86:cf:92:a4:e1:3a:94:d6:95:1a:82:a8:71:44:
fc:a3:f1:b1:79:df:ca:2a:f6:ad:71:79:ff:df:ba:26:46:8f:
ea:f6:99:f5:05:aa:2c:bb:c9:24:f5:67:dc:71:08:3f:ef:ab:
be:7d:e4:14:3d:57:f3:d9:42:b0:0a:22:34:8d:f5:bf:90:ab:
fa:3a:f5:24:64:26:48:d5:bc:be:b7:3c:48:28:a1:1a:cb:91:
39:94:42:79:39:7a:af:0e:e8:9c:d8:2d:19:77:4e:1f:8b:7e:
bd:57:3e:f1:3a:98:27:29:8b:f0:5e:a7:00:78:00:a4:50:0d:
11:0b:e0:09:ca:a2:70:e9:de:21:07:e5:a1:15:76:8b:20:aa:
f6:ce:26:f0:6d:87:3c:70:48:28:0c:ad:d1:ba:2e:e5:a4:d5:
b8:79:c3:24:05:ff:54:65:a8:47:94:4f:c8:c0:41:07:e8:d6:
24:f7:18:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:53 2025 by rpki-client