Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/WPUObFjdhsT6u8xsqfGam4pxBOY.roa
File: WPUObFjdhsT6u8xsqfGam4pxBOY.roa (raw, json)
Hash identifier: +jnEydaPh/vk/QFII21qFDvFu72YR0yJPMsyr4HAv3s=
Subject key identifier: 58:F5:0E:6C:58:DD:86:C4:FA:BB:CC:6C:A9:F1:9A:9B:8A:71:04:E6
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0997
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WPUObFjdhsT6u8xsqfGam4pxBOY.roa
Signing time: Sun 07 Feb 2021 13:15:21 +0000
ROA not before: Sun 07 Feb 2021 13:15:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38851
IP address blocks: 119.15.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2455 (0x997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 7 13:15:21 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=58F50E6C58DD86C4FABBCC6CA9F19A9B8A7104E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:09:61:09:62:1b:4b:03:d6:cf:9b:a0:46:
d6:ff:7a:e6:64:5b:50:e4:76:98:fd:fd:f9:f3:04:
9b:af:2d:f5:10:fe:db:12:c4:b1:df:b1:92:11:b9:
3d:e0:f1:e3:84:ad:a6:12:0e:9c:a3:b2:61:86:43:
57:9e:fc:23:65:70:e4:73:c2:7c:c2:69:d1:b5:06:
c9:3a:54:d8:89:58:96:81:e5:3e:22:69:48:08:8f:
ff:89:37:34:6c:2d:58:31:8e:d0:c1:05:35:df:01:
e3:bb:f9:d7:54:6d:77:f1:f2:44:77:10:4d:07:80:
8b:3d:c0:7e:04:24:08:2f:f0:80:ad:3b:72:e4:80:
3c:e1:d6:72:18:8e:5a:50:4f:6b:7d:90:df:66:86:
23:7b:e8:2d:22:df:65:d4:a2:81:7d:5d:78:cb:87:
c6:03:34:ec:8f:77:fc:c1:fc:fc:af:27:81:2f:eb:
3c:78:ad:42:5f:db:ee:05:23:5a:b0:47:5a:d4:9c:
77:aa:ad:91:a1:da:4e:7a:d6:15:cf:ab:4a:cc:b5:
5a:30:7e:b4:92:7a:c7:0b:64:b3:07:85:b1:84:a8:
40:de:67:69:f4:09:42:50:8a:bf:3a:86:a8:1e:55:
8b:b6:26:1d:00:1d:60:94:72:4d:c9:07:ad:63:83:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F5:0E:6C:58:DD:86:C4:FA:BB:CC:6C:A9:F1:9A:9B:8A:71:04:E6
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WPUObFjdhsT6u8xsqfGam4pxBOY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.216.0/21
Signature Algorithm: sha256WithRSAEncryption
30:6d:2c:b1:a7:a0:f4:a0:11:38:1f:cb:a6:93:b1:51:55:8b:
d3:bf:f9:3a:00:ec:ff:6c:95:3f:8f:b1:c2:07:6e:48:54:13:
33:9d:29:4d:c1:7f:6d:3b:17:c4:e4:ee:ee:46:34:93:a4:50:
58:20:d7:1c:bf:dc:ae:93:02:ba:bc:8e:bb:68:5f:b9:f4:2f:
8c:eb:0a:ee:37:70:29:66:93:69:78:4c:b5:b6:b1:4a:6a:ac:
77:a5:aa:a9:2b:0c:b0:22:f2:4b:33:2b:7d:10:dc:b1:93:1a:
3c:77:b2:52:2c:f1:3c:c9:56:fe:b8:c5:b6:79:05:9c:a8:3e:
4a:a7:9e:1c:df:4e:4e:88:90:45:b8:56:1c:87:4b:c8:c4:90:
27:1e:82:07:49:f0:6b:ef:4e:30:80:7d:22:80:51:3b:c0:f5:
16:17:9e:2b:7f:33:9d:a3:ea:2e:12:92:b7:4a:d9:bd:be:12:
2a:2b:d7:c6:a3:da:a4:cb:7a:e9:b7:67:9d:6c:97:5f:d6:0d:
3c:80:60:38:2f:af:a2:9f:da:8b:f7:5d:1f:f2:f8:57:2e:e2:
db:ad:64:ba:a7:03:9c:e7:ae:3c:d7:4f:f8:7d:a9:be:5e:1b:
aa:0b:fb:90:3f:cd:ca:00:f4:8e:b2:06:87:0a:09:61:78:05:
4e:19:02:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:43 2025 by rpki-client