Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/RwIV_8qMdLFbKadD4PCPpf92194.roa
File: RwIV_8qMdLFbKadD4PCPpf92194.roa (raw, json)
Hash identifier: gVc8s+0msXAE0r5+jH6cYs3HsxFW2p2o4OMZZKMdr4Y=
Subject key identifier: 47:02:15:FF:CA:8C:74:B1:5B:29:A7:43:E0:F0:8F:A5:FF:76:D7:DE
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E77
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/RwIV_8qMdLFbKadD4PCPpf92194.roa
Signing time: Tue 05 Sep 2023 02:03:39 +0000
ROA not before: Tue 05 Sep 2023 02:03:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 113.61.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3703 (0xe77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 5 02:03:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=470215FFCA8C74B15B29A743E0F08FA5FF76D7DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e3:7a:9a:24:2d:c2:0b:60:2b:5f:ba:a5:e5:
4c:c6:4d:e7:f4:0b:b5:4f:c4:1d:28:35:79:c3:32:
43:34:d7:12:d9:ae:ee:88:12:27:06:32:35:3d:02:
b9:1d:7f:67:d6:ce:ef:d6:23:41:e3:6b:69:0d:63:
14:03:65:20:2d:65:ac:d1:bb:5b:d0:59:72:f6:fe:
ee:b4:ea:7c:ca:f1:72:3b:8c:27:26:b5:69:ef:2c:
2f:6c:e0:30:e0:8c:0f:9c:0d:7d:39:45:28:dd:4a:
bc:a2:e5:f1:a8:d8:6c:0e:13:3b:14:d4:b6:4c:45:
ea:f0:3b:d6:65:eb:c6:27:9c:e6:2b:b6:b3:4d:78:
fd:a0:9e:cf:dc:1f:df:60:b7:75:e9:8b:a8:1a:50:
9e:72:9e:ac:b9:1d:c0:5d:81:6f:48:a9:e2:85:7e:
b8:d9:40:0b:a2:b5:81:d7:4e:7a:0a:0b:fb:34:f2:
80:a2:93:43:40:96:6d:85:cb:5f:fa:3e:24:ed:4e:
9e:2f:7c:5a:df:9e:58:e8:60:30:25:5c:dd:1b:2d:
5b:67:a6:14:0f:49:dd:45:e1:e4:45:6d:80:1b:5d:
b8:38:e5:a0:7f:a6:d3:50:45:97:16:0f:6b:40:d3:
fb:86:c8:57:a1:3d:67:f2:31:e0:4d:73:6d:97:53:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:02:15:FF:CA:8C:74:B1:5B:29:A7:43:E0:F0:8F:A5:FF:76:D7:DE
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/RwIV_8qMdLFbKadD4PCPpf92194.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.170.0/24
Signature Algorithm: sha256WithRSAEncryption
86:0d:03:6d:68:87:66:70:a8:09:93:62:c1:3c:cb:da:69:d5:
b8:de:6d:76:f3:9c:0c:14:2a:2f:f8:25:ce:23:a3:14:d3:b6:
c7:22:95:44:4f:e6:6a:ed:fa:ef:18:25:cd:8e:b0:1d:cc:c9:
74:08:0e:6d:9c:19:ee:ea:07:6f:62:30:99:11:8f:a0:ed:89:
ef:f1:a5:f1:e5:9f:04:f7:76:fa:70:15:9e:72:e1:87:07:a4:
7a:5c:b2:92:36:fa:28:b9:ff:9d:18:af:11:85:a2:34:a5:ae:
3c:6d:5c:ce:54:a3:2f:32:70:1d:f5:0a:94:7b:22:a0:c2:ca:
45:c1:3d:94:d2:de:89:36:80:4e:f8:85:c4:f7:26:a4:34:39:
f5:5e:27:1a:2a:d0:7b:6d:7b:7e:b9:74:ea:3d:6d:18:70:c4:
1c:22:e7:8f:b0:86:65:da:f6:79:e6:33:8f:0c:ee:0a:53:62:
aa:87:0e:fc:f4:bf:57:14:94:af:a7:06:33:3f:ac:98:44:9f:
d8:90:33:fe:39:02:91:2b:09:d4:51:5a:63:f4:88:e5:ae:36:
21:56:63:79:a8:2c:4a:3c:c6:05:27:d6:28:ad:c1:7a:ef:7a:
17:c3:37:ed:48:70:ce:f9:ef:32:77:11:8e:d0:b5:83:d9:b7:
e4:4f:ff:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:17 2025 by rpki-client