Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/aKDZ0ppDR_NgU5Xha44t6j9Cdt8.roa
File: aKDZ0ppDR_NgU5Xha44t6j9Cdt8.roa (raw, json)
Hash identifier: p+mmPXkZK6Pe8wo3/b0RUcKDeODTbfYcVjZrCPDZlHQ=
Subject key identifier: 68:A0:D9:D2:9A:43:47:F3:60:53:95:E1:6B:8E:2D:EA:3F:42:76:DF
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D37
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/aKDZ0ppDR_NgU5Xha44t6j9Cdt8.roa
Signing time: Wed 26 Apr 2023 10:31:40 +0000
ROA not before: Wed 26 Apr 2023 10:31:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 182.155.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3383 (0xd37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:40 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=68A0D9D29A4347F3605395E16B8E2DEA3F4276DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:32:25:aa:bc:78:0d:6c:d1:21:78:f2:09:
e7:44:74:1f:48:b7:61:7c:fb:15:41:71:03:b4:26:
30:2b:6b:fc:2d:40:85:8e:0d:74:8d:d5:2c:fd:7a:
73:1d:74:15:54:2c:8b:94:61:78:42:37:8a:49:4b:
f3:df:db:e6:3e:d2:dd:db:ac:83:07:66:16:7f:1c:
95:6b:21:3b:74:37:ca:e4:d6:70:cb:89:57:28:2c:
3a:23:54:ba:e9:a6:86:e8:e1:6e:cd:b0:05:6f:85:
a7:9b:7e:80:23:6b:3a:cf:4f:4e:41:fb:5e:0b:3a:
28:a2:4a:3a:5d:3b:e8:08:05:d4:65:ec:0b:b1:e4:
d1:1d:03:51:89:c1:d3:12:36:5a:55:aa:f5:2e:0b:
61:4f:6f:d1:f7:95:73:5c:ff:1f:75:1b:fa:b6:24:
9f:ac:cb:14:04:57:02:7d:c9:05:04:da:33:d5:92:
61:30:a5:8d:7b:c2:72:73:63:46:f8:97:36:02:e2:
28:dd:fd:81:94:0a:31:53:a7:5a:16:92:fd:2a:cc:
c3:f4:81:76:45:d5:0b:13:e5:a0:bc:da:0c:d0:b1:
e0:9c:f7:ff:72:46:c9:8a:77:48:8e:66:e4:20:e4:
75:00:be:71:f8:b0:5e:e5:4d:48:40:9f:07:35:dc:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A0:D9:D2:9A:43:47:F3:60:53:95:E1:6B:8E:2D:EA:3F:42:76:DF
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/aKDZ0ppDR_NgU5Xha44t6j9Cdt8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.128.0/18
Signature Algorithm: sha256WithRSAEncryption
25:6a:86:41:18:c1:73:3a:c3:56:de:75:44:16:aa:89:0e:d5:
01:3e:65:13:f7:d5:dd:20:fe:0b:23:b4:c5:7c:47:f7:46:41:
f8:c2:34:b0:f5:85:1c:7d:25:80:9a:71:23:28:7e:b6:ad:6f:
dc:13:51:58:f8:08:9d:68:30:94:4d:65:c4:30:71:ff:fb:8a:
fb:3f:1f:5e:55:d8:75:ae:2a:93:e8:74:81:23:1d:a8:52:4c:
6f:47:f3:f7:90:ac:de:c5:03:6b:17:19:7d:57:d9:bf:0f:e0:
5e:0c:42:ff:b7:5b:ff:cf:65:af:94:fc:e5:f3:35:c9:26:96:
c0:e3:37:13:80:b7:fb:aa:0c:d1:46:37:f2:98:98:e2:7f:aa:
72:96:bb:8c:57:72:ed:54:86:8e:d0:bf:f5:08:62:71:e3:6a:
c2:71:31:42:b4:bb:01:0b:bb:dc:c5:c0:43:e2:b9:f4:c5:4c:
68:ed:b8:64:2e:5d:39:10:59:fc:b6:f4:3d:33:1e:00:48:45:
13:9c:85:0b:98:92:21:8e:a2:45:e8:63:17:a0:c8:12:95:6e:
be:f5:52:1c:77:5d:0e:3f:f8:ad:fd:60:21:58:26:f1:30:f8:
aa:75:8b:ed:f9:69:9d:1e:7a:43:8f:54:38:78:88:e1:3c:12:
a6:c1:1a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:47 2025 by rpki-client