Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/UuBpBc-KAlW09aKhjL3rfa4Xkcc.roa
File: UuBpBc-KAlW09aKhjL3rfa4Xkcc.roa (raw, json)
Hash identifier: K6GQJ6f/PdptLYjSzcBFyonR50IXd3St18WaQ0uKfLU=
Subject key identifier: 52:E0:69:05:CF:8A:02:55:B4:F5:A2:A1:8C:BD:EB:7D:AE:17:91:C7
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/UuBpBc-KAlW09aKhjL3rfa4Xkcc.roa
Signing time: Thu 15 Sep 2022 02:37:18 +0000
ROA not before: Thu 15 Sep 2022 02:37:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 182.155.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=52E06905CF8A0255B4F5A2A18CBDEB7DAE1791C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:31:da:85:8f:09:a6:8f:b2:da:fd:98:fa:fd:
7d:0c:c8:4a:da:0e:8e:1a:94:07:3e:c3:6a:2e:f5:
d5:ab:be:3c:a8:cc:e4:90:aa:11:c6:77:f6:bf:ee:
59:1a:0c:00:25:7c:e8:81:71:b1:0d:66:bc:06:99:
3e:ab:8e:00:66:8d:ae:d3:fb:e8:04:45:74:4d:1c:
d9:2d:a1:5f:86:46:91:a0:4f:52:da:38:b0:db:17:
e2:bd:75:10:41:b8:31:3b:97:85:59:a3:d4:58:27:
31:51:91:0f:fa:4c:8e:a6:c8:51:e5:5e:64:69:1b:
0b:de:ec:e3:f5:04:93:98:e4:d3:d6:cb:85:c4:fb:
02:ac:b5:d3:83:1f:8c:96:9c:b2:bd:ea:7f:ce:8a:
a4:42:33:70:ba:6a:26:61:15:92:af:75:fa:64:73:
7f:34:46:9f:54:67:47:de:c0:89:59:db:c1:47:81:
a8:c0:54:79:6a:60:94:06:91:a0:c0:9c:f6:80:ff:
10:3e:f6:bd:5c:55:38:e1:cb:d7:0f:b4:74:5b:4d:
8c:21:d4:76:30:ed:fb:15:12:51:69:5e:8f:07:55:
0a:4b:92:34:5c:d3:21:27:c3:1a:4e:dc:31:c7:ba:
c2:2f:e7:29:07:2a:c1:33:53:55:a3:73:9f:c2:a5:
7e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E0:69:05:CF:8A:02:55:B4:F5:A2:A1:8C:BD:EB:7D:AE:17:91:C7
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/UuBpBc-KAlW09aKhjL3rfa4Xkcc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a1:de:49:65:bd:39:12:99:3b:48:7a:8f:c7:43:df:dc:8c:0b:
a1:3c:d6:a9:c2:e1:ae:01:23:94:5b:0a:aa:6d:d4:e9:2e:c6:
4d:cd:dd:f6:02:fd:7c:64:87:5d:7c:f4:4c:e1:01:53:f3:a6:
fa:8c:60:95:bc:9e:b6:b1:47:c2:3d:81:65:80:c9:d9:bc:5a:
83:7f:fe:dc:77:40:b7:3c:6f:06:b6:85:4f:a9:2d:43:65:a1:
4c:b2:db:28:18:ac:5c:1c:50:2d:e2:f1:77:b3:62:af:6b:76:
ca:25:84:e8:32:16:61:bb:99:b0:0c:e9:00:ab:16:dc:4b:50:
fe:f8:cf:2c:7d:ac:d0:85:7f:43:5b:5e:ef:d6:ea:ea:11:6e:
25:80:f3:fe:0b:d4:aa:61:48:41:a5:21:27:19:9a:b3:b9:41:
d9:96:b4:63:69:a9:d4:9a:fc:12:ed:98:ad:05:ad:30:b1:50:
f7:45:3c:94:15:e4:94:dc:5c:2c:bf:13:1f:e2:e3:ef:c8:e4:
3e:5f:e6:1b:3b:c7:8f:11:87:0b:41:c5:d2:ed:35:56:f4:52:
5b:4e:22:80:40:d9:50:75:32:21:68:dd:41:8e:25:04:fc:6b:
83:da:e1:92:04:24:46:25:63:17:0b:11:d3:ab:56:bb:3f:25:
c4:e7:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org