Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/YOXxo_caLyAdstI_Tq317O6_t90.roa
File: YOXxo_caLyAdstI_Tq317O6_t90.roa (raw, json)
Hash identifier: HrVTHCuGngwfZBtcZxVSnnEzn/DgRZTyKKA/N8S9Bws=
Subject key identifier: 60:E5:F1:A3:F7:1A:2F:20:1D:B2:D2:3F:4E:AD:F5:EC:EE:BF:B7:DD
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0C29
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/YOXxo_caLyAdstI_Tq317O6_t90.roa
Signing time: Mon 07 Nov 2022 06:12:39 +0000
ROA not before: Mon 07 Nov 2022 06:12:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 119.15.200.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3113 (0xc29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Nov 7 06:12:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=60E5F1A3F71A2F201DB2D23F4EADF5ECEEBFB7DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1f:78:14:d0:55:b4:70:98:f9:dd:0b:bd:36:
5d:1b:53:14:ae:2b:c1:c2:58:b8:0e:ec:83:31:88:
a6:e1:26:f0:d4:45:05:87:fa:9a:07:35:15:e6:99:
76:66:e4:97:9b:6b:7f:04:3d:64:67:7e:a6:89:c9:
79:a8:29:a8:2b:f2:b2:79:3f:55:c8:e6:e9:a4:03:
ac:32:7c:1c:c9:ef:50:ba:79:1d:ab:5f:c2:2e:8a:
5a:98:dc:3f:ec:e3:92:79:fd:ef:02:b1:f0:6a:8e:
a0:a7:12:7b:57:f1:44:70:6d:c4:29:ad:ae:05:d8:
b0:0e:c6:16:45:1a:c0:e7:03:cb:23:2c:17:e2:f4:
f7:60:71:f2:00:a9:1e:23:9b:02:63:b3:0a:48:9b:
75:bd:e3:94:24:1b:b1:4f:2d:88:6d:62:b1:e1:b3:
23:d2:01:e7:53:31:ae:00:e7:8e:15:42:b1:f7:4a:
02:08:e0:25:f9:d6:a8:e7:a5:45:2d:06:06:6a:45:
6e:a8:f2:e7:a4:fd:20:15:9c:65:9e:2f:ef:7a:2d:
9f:04:d4:fe:48:91:fd:63:3d:3b:a6:1d:7b:a6:d6:
68:1e:0c:05:33:cc:74:10:0a:71:61:e7:38:e1:28:
34:fc:13:11:1d:ac:39:f2:b7:ca:4c:2c:3b:2c:35:
1f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E5:F1:A3:F7:1A:2F:20:1D:B2:D2:3F:4E:AD:F5:EC:EE:BF:B7:DD
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/YOXxo_caLyAdstI_Tq317O6_t90.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.200.0/21
Signature Algorithm: sha256WithRSAEncryption
09:28:d4:ae:01:7c:8e:4c:0d:f6:9b:cf:f4:93:68:af:ad:53:
06:25:a4:7a:b4:51:ad:d7:08:81:7b:7d:c5:db:b5:f7:59:91:
d5:4b:86:ef:27:6a:ab:d5:f3:32:e0:04:82:52:90:de:d6:1c:
61:e0:66:f4:20:35:e1:3d:fb:0e:37:df:38:63:b1:58:0a:d3:
ef:1c:23:4e:18:97:67:e4:61:4f:cf:46:0b:6d:1d:01:53:64:
72:25:fc:6f:6a:c8:32:cc:a4:30:7b:bd:68:10:b7:a9:46:12:
20:8c:c6:ef:02:fe:32:81:b1:61:94:9e:e2:be:44:ff:7b:dc:
28:8c:12:89:c5:7b:ca:bd:b0:a9:f4:44:19:81:45:02:30:db:
ee:b6:d2:62:3e:cb:6f:f4:12:72:5a:d1:53:8e:cf:c3:ca:2a:
21:7e:9d:06:46:03:2c:01:0a:35:72:9e:ba:6e:99:d9:a6:23:
a9:f2:7c:ba:f6:57:1f:07:4b:84:f7:9b:1e:f6:8b:80:d0:1e:
9e:7b:44:ec:e3:fd:14:59:58:b2:bd:de:71:f5:6b:f1:db:47:
b7:3f:ef:65:d5:b9:53:db:0f:2d:e4:8b:82:97:e6:82:f8:88:
0d:f4:54:45:09:41:b2:9d:e0:91:a9:06:43:e0:dc:96:76:60:
28:1b:97:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org