Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZtI2ECLBHd2rt53uBOHzkUuQvIk.roa
File: ZtI2ECLBHd2rt53uBOHzkUuQvIk.roa (raw, json)
Hash identifier: EwJfMDSvA1dBoJaqyKA/7zBHJ/hD227XU5Ej7CFRtto=
Subject key identifier: 66:D2:36:10:22:C1:1D:DD:AB:B7:9D:EE:04:E1:F3:91:4B:90:BC:89
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0B0E
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZtI2ECLBHd2rt53uBOHzkUuQvIk.roa
Signing time: Thu 16 Dec 2021 06:43:44 +0000
ROA not before: Thu 16 Dec 2021 06:43:44 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17809
IP address blocks: 182.155.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2830 (0xb0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 16 06:43:44 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=66D2361022C11DDDABB79DEE04E1F3914B90BC89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:b4:d3:c8:48:de:e1:6b:fc:a5:c7:ff:20:
c0:18:10:f3:68:96:7d:56:2a:6e:c0:38:2f:c6:d3:
4d:76:68:79:60:0d:a9:9e:56:83:31:51:cd:e5:1e:
0e:8f:ba:2b:c1:c5:f1:dd:3f:37:76:ab:8d:33:bd:
50:33:91:55:fb:a5:81:0c:02:7d:d8:09:9c:54:2b:
82:02:a1:db:a7:77:21:f9:52:23:98:86:0d:ef:2a:
52:07:80:b3:75:bd:b1:a6:6e:06:a0:12:1f:b3:02:
a8:9c:fd:29:ad:10:dd:08:e1:06:f3:a3:2b:69:a2:
66:51:e4:d6:3b:95:73:91:16:81:86:10:8e:4e:25:
9c:3d:b1:7c:55:df:27:f6:7c:c8:ed:87:c2:14:7e:
37:8e:0b:af:4b:e7:e9:a4:56:f2:53:85:01:02:c2:
49:8b:bf:2a:d6:0e:2a:8d:59:2d:7b:95:22:6d:e0:
08:ce:49:04:2f:2a:05:0f:5d:4b:01:62:99:45:25:
03:29:9d:24:eb:86:d4:74:5d:30:ab:34:5c:94:a4:
ba:07:70:f6:d9:47:9f:59:f9:17:78:87:c5:b6:f5:
5c:29:4b:36:68:1b:54:09:3b:a2:d4:50:51:d1:b8:
93:66:b8:ed:db:66:0d:60:bf:18:9b:6a:9b:b0:06:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D2:36:10:22:C1:1D:DD:AB:B7:9D:EE:04:E1:F3:91:4B:90:BC:89
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZtI2ECLBHd2rt53uBOHzkUuQvIk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.96.0/19
Signature Algorithm: sha256WithRSAEncryption
21:a9:6e:3e:c2:1d:15:40:7a:6f:65:59:d7:ab:55:e4:72:cf:
51:ef:ef:44:8c:6c:55:f0:74:45:90:14:bb:89:f1:7a:a0:80:
9f:32:07:ad:bc:fa:92:fb:e2:e6:54:28:44:41:dd:8f:6c:38:
f1:a1:d8:ec:9f:03:e1:08:76:70:fe:d4:9d:4f:0c:a4:e3:44:
4c:8b:b8:47:91:80:26:4f:76:8b:76:34:41:a4:8e:4f:c0:b5:
a3:13:37:70:a4:f4:35:5b:d7:44:be:71:5f:8f:c7:f6:4a:19:
4c:8c:a8:77:25:ed:69:23:5c:58:3e:17:f9:ac:f2:ca:9d:dd:
bf:29:05:74:05:16:e0:42:ce:bd:2c:3d:0f:ad:a1:dc:e3:4c:
41:56:9e:69:a4:dc:ad:53:8d:e0:c4:bd:b2:31:bf:ea:0f:3b:
a1:5a:aa:c8:6b:d4:d1:95:c7:af:42:20:36:f9:24:ac:31:72:
c6:2a:93:11:9a:12:92:05:ee:c6:c2:c8:36:92:af:6a:f4:83:
07:bb:e0:a9:71:5f:52:6a:9a:ed:56:d8:c5:41:bd:cb:66:7a:
9c:78:76:34:bb:2a:d6:0b:ea:de:96:b1:e3:50:13:b1:78:1b:
8a:ff:0e:30:12:aa:72:cd:05:88:c3:9e:7d:30:16:7a:8f:f0:
21:07:a9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org