Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/bovNzaY6fr17gZwcYekKjz3cXSU.roa
File: bovNzaY6fr17gZwcYekKjz3cXSU.roa (raw, json)
Hash identifier: /BcCVFF2b7jBsYczmd5rqSp8ZYKgJ0++9lS2WmTHS60=
Subject key identifier: 6E:8B:CD:CD:A6:3A:7E:BD:7B:81:9C:1C:61:E9:0A:8F:3D:DC:5D:25
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0904
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/bovNzaY6fr17gZwcYekKjz3cXSU.roa
Signing time: Tue 24 Nov 2020 03:15:39 +0000
ROA not before: Tue 24 Nov 2020 03:15:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17809
IP address blocks: 211.79.112.0/20 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2308 (0x904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Nov 24 03:15:39 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6E8BCDCDA63A7EBD7B819C1C61E90A8F3DDC5D25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:98:62:03:e7:7a:9e:8e:4a:b7:c2:91:0e:
b3:46:d4:f3:41:1c:49:dd:ab:de:89:a5:97:a7:c3:
63:6c:16:2b:82:98:80:87:03:b2:ed:88:e1:4e:fa:
29:93:97:06:d6:9a:bb:1d:e6:f2:6b:44:1d:f3:c3:
62:0c:f3:8b:10:98:14:16:66:aa:8d:41:23:5b:ec:
7b:cb:91:3a:a8:3f:a6:7e:60:79:56:0f:73:fe:e8:
c1:2d:5a:eb:d0:f9:83:16:e2:c3:ce:5e:9a:6b:21:
f5:1f:da:76:db:56:2c:6f:0d:6c:ca:0e:7c:3e:27:
8d:e6:9a:6e:23:09:a6:77:87:c6:96:ac:66:c9:fc:
e5:51:ff:bd:d7:bf:71:db:77:74:80:d9:3b:9f:91:
db:15:e9:90:f6:3d:c0:d2:24:1a:f1:93:e9:db:02:
bf:7a:56:60:0a:ba:17:72:b0:e7:05:1e:3b:e6:43:
14:dc:ea:83:bc:91:e7:fc:c7:f5:aa:78:66:58:92:
fa:66:b6:f3:2c:ea:de:96:72:c1:7c:56:16:40:d9:
2e:e8:78:d6:82:0b:9a:b2:7a:2f:f7:fd:60:37:31:
07:13:3e:af:00:ff:90:77:75:4c:6b:9b:1a:c3:bd:
74:15:47:7a:07:09:77:fb:a5:42:51:98:96:20:49:
96:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8B:CD:CD:A6:3A:7E:BD:7B:81:9C:1C:61:E9:0A:8F:3D:DC:5D:25
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/bovNzaY6fr17gZwcYekKjz3cXSU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.112.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:e2:f7:64:8a:39:e0:c3:70:dc:aa:0f:8d:ef:63:1d:a2:25:
a9:6e:10:dd:df:07:63:ac:45:fd:ba:08:57:79:7f:a2:00:e4:
fb:19:53:7e:b7:ab:84:1b:ea:b3:cb:91:d0:2e:b8:11:19:35:
5c:5a:d3:32:f7:b3:08:81:e7:34:fd:6c:b6:30:41:73:f0:6f:
4f:44:55:33:7f:2b:74:e9:63:20:af:ef:bb:d8:44:90:5e:c9:
43:92:83:4f:15:3b:b4:93:3c:75:5a:27:a1:c0:90:d8:51:71:
e2:50:5a:0c:d9:81:72:3e:87:f0:61:ca:e5:73:d9:c3:42:35:
37:31:26:d1:53:20:05:3e:d2:c6:2f:09:54:34:2a:36:d5:c3:
20:66:2c:27:32:bf:0c:f4:c8:02:ac:04:51:2c:36:a4:fb:e4:
4f:8f:57:b1:4c:88:30:c8:ab:ef:00:9d:5c:7f:1c:22:56:d4:
6b:dd:48:28:eb:0e:84:dc:45:99:fa:ac:ab:c5:24:a0:a0:5c:
15:9b:3d:0a:9f:4c:77:2b:72:0c:33:cb:a4:31:46:cc:76:3c:
ca:af:17:3b:95:7b:a4:19:ef:b6:f2:31:14:26:3a:33:2f:dd:
d9:69:9c:46:68:4e:4b:66:22:2a:16:f5:9a:5c:d5:11:2b:53:
d5:f2:43:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:42 2025 by rpki-client