Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/_EzQFOXIlGvdIlb5zY8bzLa3_iU.roa
File: _EzQFOXIlGvdIlb5zY8bzLa3_iU.roa (raw, json)
Hash identifier: ixtldI2kDNE62WfT7bJ3MI87drm4smkSq3XwKiayuNg=
Subject key identifier: FC:4C:D0:14:E5:C8:94:6B:DD:22:56:F9:CD:8F:1B:CC:B6:B7:FE:25
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/_EzQFOXIlGvdIlb5zY8bzLa3_iU.roa
Signing time: Thu 15 Sep 2022 02:37:24 +0000
ROA not before: Thu 15 Sep 2022 02:37:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 113.61.168.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FC4CD014E5C8946BDD2256F9CD8F1BCCB6B7FE25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:77:44:a6:07:38:d0:0b:42:d2:f7:24:f2:
88:04:80:d8:d0:68:b1:87:4c:b7:23:1d:bb:ab:11:
b3:9d:c8:1a:76:a1:30:18:da:94:ad:4b:cd:9b:2d:
e6:e6:ec:b0:99:98:af:58:9e:a0:19:28:6a:b0:da:
ff:44:a8:5d:67:d8:a2:2f:59:54:42:cd:83:3b:b6:
41:b6:af:31:9e:56:77:1c:ad:53:cb:4c:c2:7a:2e:
6f:19:44:e0:b4:61:0f:c5:48:ef:66:bb:90:12:e4:
57:7e:4e:fb:15:f7:09:7f:e5:96:ac:e3:c2:76:8c:
bc:bd:e9:70:1a:e6:87:7b:59:b5:d7:9a:b9:c7:4b:
64:db:5c:52:78:3d:3a:4b:fe:de:59:5f:57:cd:b0:
5e:1b:06:fc:af:9f:96:47:6f:ff:ca:5d:6e:63:1b:
a8:ac:0a:2e:59:69:bf:33:19:13:51:04:c7:54:35:
b0:b7:e2:24:05:f6:9e:ad:b5:03:56:8e:7a:63:7f:
89:52:59:01:c1:d6:38:d0:e1:5a:74:63:47:a7:e7:
5c:b5:63:61:f4:9f:69:ea:d7:aa:ac:89:f2:4d:d4:
1e:ae:b2:1f:c4:ec:18:32:de:ac:aa:81:7e:fe:1e:
11:5e:57:cd:8d:be:60:4d:e9:a2:e6:4e:43:d6:5d:
a9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4C:D0:14:E5:C8:94:6B:DD:22:56:F9:CD:8F:1B:CC:B6:B7:FE:25
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/_EzQFOXIlGvdIlb5zY8bzLa3_iU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.168.0/24
Signature Algorithm: sha256WithRSAEncryption
08:50:35:71:1c:b9:f6:93:97:8f:9c:d3:c6:08:78:b5:ec:9a:
6d:32:7b:d6:a0:29:0f:4b:42:b6:67:e6:3a:1e:50:16:ea:40:
3a:46:72:e7:23:2e:68:c6:1e:74:70:e4:41:e6:12:d9:12:f2:
68:c2:39:6c:b8:91:be:8b:49:d2:05:d7:57:df:e5:b9:c7:69:
31:2b:95:12:f1:e5:ce:50:b3:be:ec:9d:95:05:f2:49:e3:70:
d0:eb:70:52:d5:12:72:84:5d:ba:48:d1:61:2a:2a:b5:45:50:
e1:8f:e9:d6:69:48:d4:7c:d8:fa:6b:54:81:09:7a:8e:dd:e9:
45:05:28:12:b0:33:73:1c:ce:0a:f5:d4:37:a6:ca:54:82:44:
a3:4e:aa:a0:70:0e:49:7a:d2:b5:e3:5b:d5:17:ab:9c:c5:06:
73:b5:f2:f4:55:84:4a:c4:80:e8:b1:da:2d:93:a9:89:d5:3b:
d6:a6:b6:23:71:0c:cb:4d:e4:a4:64:55:1e:df:c3:b2:f7:df:
c5:37:1a:21:6e:c0:65:89:d8:d1:1c:79:95:4e:f3:f8:50:4c:
67:df:ba:da:49:1c:da:41:fc:ab:71:b1:cd:17:7b:23:9c:eb:
68:d4:ad:40:b1:67:39:94:4c:f6:ae:cc:f3:46:e0:f1:d3:60:
ec:eb:67:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org