Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/SzzanD_6J4fKxO-y6Mm9BtsXOjM.roa
File: SzzanD_6J4fKxO-y6Mm9BtsXOjM.roa (raw, json)
Hash identifier: F8VtXFGo2vrLGlxXQ8sm5JTdaWMgrYfYZEucMLTJCA0=
Subject key identifier: 4B:3C:DA:9C:3F:FA:27:87:CA:C4:EF:B2:E8:C9:BD:06:DB:17:3A:33
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/SzzanD_6J4fKxO-y6Mm9BtsXOjM.roa
Signing time: Thu 15 Sep 2022 02:37:25 +0000
ROA not before: Thu 15 Sep 2022 02:37:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 210.209.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4B3CDA9C3FFA2787CAC4EFB2E8C9BD06DB173A33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:62:1c:1a:84:3d:41:d2:46:78:36:ac:c4:
e3:32:df:63:b9:ad:7f:bf:d6:b2:71:72:70:5f:6f:
28:97:0e:49:6b:3f:97:ae:a2:f2:35:81:0b:0c:0d:
31:c8:ab:3e:29:2e:de:d7:31:22:09:2b:0f:2a:92:
4f:9b:78:f2:fd:5c:d4:2a:4d:00:90:5c:b9:30:e4:
12:2f:53:9b:58:ce:e2:b2:b0:a0:93:f8:a9:87:b1:
84:43:a9:0e:cf:88:1c:07:d1:4f:a7:0b:fc:f8:bd:
42:85:4c:4c:5b:4f:2d:4d:20:07:8d:51:ea:f3:a4:
89:21:15:c8:d6:02:a8:3a:e5:7e:c2:c0:b5:5c:94:
f9:53:14:da:3a:55:76:df:ae:9c:6b:57:c3:8a:6d:
f1:8a:98:bb:e6:23:d3:fd:44:25:c8:0a:4f:4f:56:
35:e2:de:62:a1:1e:4b:a8:39:ed:0e:c4:af:08:15:
c0:de:62:9c:7e:56:7e:95:9b:39:19:3a:28:92:98:
fe:cd:a3:48:b1:8f:07:d0:85:5c:0b:15:ff:a6:52:
fe:32:24:95:d0:7c:fb:f1:53:fc:cc:1c:93:5c:43:
14:63:e8:b7:0a:e9:80:31:6a:90:57:49:65:65:d6:
47:d8:c1:88:05:cb:2a:c8:ed:af:da:e2:40:74:de:
0a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3C:DA:9C:3F:FA:27:87:CA:C4:EF:B2:E8:C9:BD:06:DB:17:3A:33
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/SzzanD_6J4fKxO-y6Mm9BtsXOjM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.209.128.0/19
Signature Algorithm: sha256WithRSAEncryption
39:94:08:a6:d4:27:a0:ca:50:1f:10:a1:17:91:70:9a:a1:73:
b8:76:90:bf:b8:28:b9:28:78:59:f4:52:0e:0e:9c:a5:04:68:
78:73:36:2f:e4:2e:6f:07:ec:de:e9:4b:6e:44:5e:db:1f:64:
34:38:af:e5:bb:b0:19:7e:4a:3b:9d:02:61:fc:da:56:95:e2:
9a:7c:3c:55:a8:7e:d0:ca:8a:88:53:8b:2d:85:76:7e:5e:bc:
ab:46:6b:dd:27:72:bb:97:00:01:9c:9c:71:ba:80:84:9a:8f:
ea:9b:57:28:f4:61:da:3d:32:4c:45:5d:f0:fa:05:5a:f4:a9:
e7:74:5d:53:85:21:0b:0c:a9:56:2b:ff:2a:b8:00:2f:85:27:
20:b8:de:68:e3:0f:44:5a:91:7d:d4:6b:b7:7e:7a:f8:fa:12:
86:9f:9e:10:8b:e8:7f:8c:04:69:40:0b:66:0a:14:f6:44:ba:
73:29:aa:c4:79:3b:09:e1:f1:57:1f:2c:95:0d:4b:1a:c8:21:
3b:fb:f3:56:e5:76:a1:19:9d:95:65:18:4b:b3:b0:fc:e4:c2:
66:e8:bb:45:14:78:0a:55:69:7f:8c:bf:a6:a3:cf:1d:7e:40:
44:1d:cf:e3:45:99:5d:5b:43:0b:ff:e6:ed:73:cb:31:54:85:
e0:24:79:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:17 2025 by rpki-client