Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/bWJYZHbCyRitXbOx4DeC7CP-WpI.roa
File: bWJYZHbCyRitXbOx4DeC7CP-WpI.roa (raw, json)
Hash identifier: Jby3NswE/ZFVLPogb8N/NPmHQIj5HPbQ6cpe8rJ7IZ8=
Subject key identifier: 6D:62:58:64:76:C2:C9:18:AD:5D:B3:B1:E0:37:82:EC:23:FE:5A:92
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0956
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/bWJYZHbCyRitXbOx4DeC7CP-WpI.roa
Signing time: Thu 21 Jan 2021 10:03:15 +0000
ROA not before: Thu 21 Jan 2021 10:03:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 119.15.208.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2390 (0x956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Jan 21 10:03:15 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6D62586476C2C918AD5DB3B1E03782EC23FE5A92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:53:c6:b3:6b:66:7d:01:8c:c6:31:ba:b9:
7e:ef:4c:da:8b:27:f5:e1:da:e3:ea:71:65:1c:6c:
e9:2a:6a:85:03:49:c0:d5:81:24:4d:94:5f:c7:7b:
6a:bd:0a:1f:45:85:98:77:53:ed:78:8f:8c:fb:42:
de:c1:ea:b8:9a:62:1e:0d:ab:3b:b4:72:5a:ef:44:
51:29:3b:03:ca:59:1e:7e:44:fa:c4:74:86:30:b1:
3c:f0:94:19:63:84:b5:9f:c1:4d:7f:4a:bd:8a:c1:
ac:65:6b:b8:2f:d5:4d:60:f5:ab:1e:15:d0:f3:21:
ac:2f:c1:cb:ae:80:7f:9c:60:10:84:08:c8:1d:2d:
82:3f:50:78:2f:97:5f:a1:07:bc:ec:42:c5:09:b1:
9e:6f:ff:6c:7c:10:05:2c:dc:f6:b9:74:43:ae:2b:
26:39:b3:25:dd:26:4d:4f:31:12:2e:32:e2:d3:39:
9d:04:e8:5f:92:26:e9:c2:2d:59:7a:62:0b:66:85:
6d:15:02:f5:21:a7:a8:af:09:a7:9b:89:e7:12:58:
cc:9a:da:59:48:34:f9:e7:d7:d4:12:80:1a:a4:b0:
b6:63:69:16:75:3e:97:b2:4c:1b:63:1b:a5:c1:65:
6f:44:d4:f3:51:9f:2e:de:d5:df:9f:aa:b2:b2:d4:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:62:58:64:76:C2:C9:18:AD:5D:B3:B1:E0:37:82:EC:23:FE:5A:92
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/bWJYZHbCyRitXbOx4DeC7CP-WpI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.208.0/21
Signature Algorithm: sha256WithRSAEncryption
56:24:3e:cc:96:e3:35:71:1b:e7:71:11:9a:7d:01:38:03:72:
26:53:f9:ec:43:bb:ab:d4:b6:29:db:e5:c3:01:e9:dd:e3:8e:
85:e6:52:79:89:a6:11:72:8e:3b:ee:5a:b6:65:23:01:11:50:
ca:d3:4b:02:a6:49:e0:ee:7c:13:4b:4f:b0:9b:8e:60:98:14:
3b:ac:75:db:0d:77:df:32:ff:75:0a:83:b5:87:2f:bc:66:56:
cd:7c:39:cd:e3:b4:c8:83:1c:8c:85:1f:eb:a9:0e:13:b9:2c:
49:31:f6:ef:ca:5a:ae:1f:f3:f6:71:85:53:8f:e6:44:ea:bb:
66:3f:c2:d6:4b:57:01:f7:be:06:f0:67:c8:24:4a:55:c2:95:
6a:3b:ba:1f:4d:61:6f:94:42:f9:8e:07:89:a8:32:48:f3:20:
8d:a9:4f:cf:17:05:e6:01:63:1b:23:1a:a1:35:26:53:7f:45:
a3:f4:b2:37:2a:2e:52:ce:6c:3a:21:bc:29:27:04:ef:76:7b:
e1:33:43:51:03:27:e3:0c:5c:7b:82:4c:7e:9c:fa:c4:41:15:
c4:90:c6:76:6d:3d:79:98:ca:6e:ab:87:57:5f:f0:13:05:a4:
9a:6c:03:eb:ae:72:c4:ff:0f:41:90:96:f8:9d:15:d2:48:99:
5f:aa:27:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:29 2025 by rpki-client