Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/Uv2XoKfSOpW8rmkakwqWaZ6RNRY.roa
File: Uv2XoKfSOpW8rmkakwqWaZ6RNRY.roa (raw, json)
Hash identifier: yw3hgFZo7/aUfoDottD6ci+txgVO7EVrzbAuTWP1JDo=
Subject key identifier: 52:FD:97:A0:A7:D2:3A:95:BC:AE:69:1A:93:0A:96:69:9E:91:35:16
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Uv2XoKfSOpW8rmkakwqWaZ6RNRY.roa
Signing time: Thu 15 Sep 2022 02:37:20 +0000
ROA not before: Thu 15 Sep 2022 02:37:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 113.61.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=52FD97A0A7D23A95BCAE691A930A96699E913516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ac:74:d1:7b:5e:ef:c0:52:76:e3:ac:36:79:
f7:28:3a:17:73:c2:8e:01:ae:fc:ef:3f:70:1b:95:
cb:dd:af:9f:ef:36:30:c6:70:43:c3:2b:f7:ef:4f:
53:15:94:e3:87:8b:a2:ee:1c:30:cd:50:9b:7a:09:
07:79:05:ba:2c:fb:42:e1:fd:20:3b:29:5e:08:87:
ce:f7:b6:ec:1c:e0:ba:73:dc:2f:00:47:af:5f:82:
23:19:4a:5f:83:da:18:71:66:4e:3a:26:07:81:60:
f8:3e:e3:e2:ee:86:d9:46:47:10:8a:68:d8:94:6f:
40:33:b8:36:5d:32:e8:40:98:a2:eb:dc:9e:8b:3f:
78:13:a1:3e:ea:91:53:1a:68:4c:d8:f1:0b:c2:56:
d7:e3:89:e1:2c:3d:df:e9:77:6e:30:7c:a2:9a:13:
45:3b:2f:2c:4f:92:47:a7:14:da:77:bc:62:bb:f8:
8c:52:7c:78:ce:92:2c:4a:19:07:91:f8:c7:35:03:
08:b6:07:a0:b1:eb:b4:4f:73:e6:8e:2a:c9:6d:19:
5b:0f:0b:dc:83:61:40:24:92:4c:b9:44:ae:8d:98:
f5:79:b2:cc:13:12:4b:ac:db:f0:83:05:b9:f1:27:
9c:56:a5:c0:ff:87:76:98:f8:19:8f:fb:eb:f9:cc:
66:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FD:97:A0:A7:D2:3A:95:BC:AE:69:1A:93:0A:96:69:9E:91:35:16
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Uv2XoKfSOpW8rmkakwqWaZ6RNRY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.160.0/20
Signature Algorithm: sha256WithRSAEncryption
41:27:7b:90:39:82:cf:00:6e:41:9d:d6:4e:1f:a4:f3:a0:ca:
50:e1:71:28:86:6e:0b:66:69:5b:e0:d2:e8:6b:64:d6:d9:9c:
7d:57:39:96:12:ae:85:5f:54:3b:4a:e2:8e:f0:d3:4b:87:9f:
ba:79:11:d2:c8:e2:3c:b7:6c:15:e3:f2:77:6c:78:97:57:db:
5b:53:68:15:05:e8:5e:17:e0:d1:c5:0f:d5:ac:17:b0:5b:2b:
21:8f:27:ff:1b:38:28:55:7a:52:44:f0:db:8a:c1:5d:49:e3:
01:0a:07:1e:90:2f:d6:38:94:57:1a:f0:7c:c0:6f:4f:79:7f:
99:0d:92:a9:88:67:13:ad:f7:11:df:38:21:01:9f:88:35:c6:
a5:46:76:0d:77:aa:ca:45:06:2b:1c:1f:57:3a:c0:dc:e1:4b:
99:eb:91:ee:88:0d:27:ff:97:42:a5:1a:2c:52:85:f7:53:fc:
44:48:18:0b:17:7b:c3:1c:77:0a:9d:17:a2:7f:03:e0:02:c1:
e3:62:95:71:05:45:a5:1e:7c:75:20:ac:0c:b0:f8:72:41:85:
01:05:82:3a:a9:89:76:92:e2:f2:c8:60:a7:80:8d:41:35:23:
dd:c2:55:7e:d0:9a:73:6c:6a:00:fb:78:e7:d1:8e:94:15:2f:
76:f3:85:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org