Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/VOh1c6JIUIZh60gFUGL-Qo6mwVg.roa
File: VOh1c6JIUIZh60gFUGL-Qo6mwVg.roa (raw, json)
Hash identifier: Vou8i+HFMpg6np0FFutDhewzymyg3o5/0yo12vOTRCc=
Subject key identifier: 54:E8:75:73:A2:48:50:86:61:EB:48:05:50:62:FE:42:8E:A6:C1:58
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0CE7
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/VOh1c6JIUIZh60gFUGL-Qo6mwVg.roa
Signing time: Wed 26 Apr 2023 10:31:19 +0000
ROA not before: Wed 26 Apr 2023 10:31:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 121.254.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3303 (0xce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:19 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=54E87573A248508661EB48055062FE428EA6C158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:5b:02:b3:e7:75:d3:63:9b:f1:77:26:06:
42:73:1d:78:12:af:33:c8:fe:04:ee:d3:b3:c9:85:
c5:7d:a8:de:b8:aa:c8:51:2f:2c:66:77:f2:77:e2:
1a:d6:85:d7:4b:cb:66:d1:d7:51:aa:60:25:08:f9:
a6:6f:44:08:ed:6c:9d:b3:39:67:7e:1f:af:9b:a7:
53:67:e2:ef:fe:b0:ea:29:e6:8a:c7:1e:e7:e3:b6:
7f:8e:d6:dc:28:7f:2a:ec:2a:95:45:20:6e:6a:89:
56:52:e6:81:36:0f:56:63:62:e8:bf:37:d3:58:0c:
98:4c:45:e7:83:c4:94:7f:94:be:90:8b:1b:6a:01:
c6:52:cb:a8:9d:ee:06:73:85:dc:fb:4c:27:b7:74:
f6:ff:d1:7d:62:6d:6c:0d:1d:e0:0e:bb:f9:1e:01:
54:a4:dd:1b:a7:1a:4b:3a:64:6d:35:2e:82:7d:12:
a8:54:ab:73:be:d9:df:99:c4:8b:ef:f6:88:78:3a:
42:16:ff:55:5e:8d:ed:30:b4:eb:02:d1:87:a3:5d:
33:66:bf:a8:97:35:83:09:9a:09:e4:04:b1:e1:be:
98:c5:4a:b5:6b:aa:5a:5f:0b:32:1e:1f:8a:29:f7:
61:ac:9d:4c:dc:ef:3a:6f:17:64:25:eb:bf:74:22:
59:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E8:75:73:A2:48:50:86:61:EB:48:05:50:62:FE:42:8E:A6:C1:58
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/VOh1c6JIUIZh60gFUGL-Qo6mwVg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.96.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:ce:b3:24:4c:69:0c:d6:ae:c3:ef:ad:ec:38:6c:0f:a3:65:
86:37:71:c9:06:f7:60:a2:be:17:c8:ef:2b:4d:79:f8:d8:9e:
3b:51:2e:e8:53:7b:a2:86:e3:db:a5:ce:4a:76:f2:c9:d4:85:
95:f5:3b:ee:92:aa:6e:96:2f:3b:5c:10:de:7a:00:75:7e:fa:
75:11:27:a3:52:e8:b0:ff:25:e0:85:e4:09:47:a1:24:27:d2:
2c:7d:d0:67:e0:ea:0c:b2:ad:91:82:60:46:8d:31:e2:95:92:
f1:68:d4:e5:54:98:af:59:45:de:a9:c3:bf:c2:99:03:9f:e8:
24:67:58:b6:5f:c8:22:38:6d:46:4a:cb:eb:f9:5e:9a:b1:8a:
be:c5:67:cb:14:1c:ea:2c:d2:61:2c:bb:c5:0b:ba:5f:e1:89:
31:ef:33:db:d2:da:67:7c:f4:80:2d:c9:74:29:35:7b:6f:55:
72:aa:4d:9f:2c:c9:d0:30:6b:c5:7b:c2:9f:8b:f0:92:cb:44:
c1:6f:ba:8d:ac:80:99:31:72:ea:f5:4e:89:7e:df:d1:e5:bf:
09:53:90:58:d9:dc:5e:23:19:97:5b:76:b7:89:24:76:e6:0c:
40:89:49:2d:71:f5:3f:99:9d:bd:9c:66:1c:c4:5d:ca:0a:fd:
c8:7d:23:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org