Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/d50ZqqSPNMGz0XcvPMGC4amgRrM.roa
File: d50ZqqSPNMGz0XcvPMGC4amgRrM.roa (raw, json)
Hash identifier: 0vT4YH78yCKosjjjMYnlP6Gxd+GmlOVi86B06Rixx0k=
Subject key identifier: 77:9D:19:AA:A4:8F:34:C1:B3:D1:77:2F:3C:C1:82:E1:A9:A0:46:B3
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0ADE
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/d50ZqqSPNMGz0XcvPMGC4amgRrM.roa
Signing time: Thu 16 Dec 2021 06:32:26 +0000
ROA not before: Thu 16 Dec 2021 06:32:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17809
IP address blocks: 113.61.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2782 (0xade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 16 06:32:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=779D19AAA48F34C1B3D1772F3CC182E1A9A046B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:d5:6f:01:f6:5d:dc:0f:17:5f:d3:43:34:
28:dd:9a:59:1d:53:9e:68:c5:32:35:ae:db:99:ce:
e9:b4:1c:5a:f0:71:99:d0:9d:9a:27:1c:d4:74:cd:
49:a5:48:fd:0e:15:4b:4f:dd:9a:3b:e2:09:65:24:
06:b8:e7:a3:42:52:c7:08:c5:e4:3e:27:a0:53:a5:
18:7f:3a:ff:87:e6:5b:85:2e:99:2e:13:bf:4d:97:
de:ed:32:bf:7d:56:17:d2:63:05:55:f7:d8:cf:ca:
d5:a9:8e:5c:7c:37:b7:59:c7:5d:24:7e:51:31:54:
7f:b8:ab:b4:06:ef:bf:a4:98:7e:31:14:13:b2:71:
19:3b:7e:cd:c7:26:dd:5e:eb:09:64:46:5b:0e:a3:
de:5f:69:ed:69:21:f5:8b:c2:9e:49:71:3b:f9:a8:
76:39:30:3f:cf:1f:b5:ed:19:e4:de:82:95:d2:92:
94:39:38:c0:0f:92:31:01:1a:f2:ee:42:80:e5:1e:
1d:51:be:dc:bc:b4:78:44:da:aa:69:b0:f2:88:12:
4d:85:73:08:34:70:98:db:20:fb:2b:5a:eb:b8:aa:
55:77:94:35:38:0d:20:61:71:dc:2b:13:18:da:75:
f0:0f:dd:46:ad:5a:6d:a6:92:37:80:bf:eb:fb:0c:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9D:19:AA:A4:8F:34:C1:B3:D1:77:2F:3C:C1:82:E1:A9:A0:46:B3
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/d50ZqqSPNMGz0XcvPMGC4amgRrM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.128.0/19
Signature Algorithm: sha256WithRSAEncryption
21:83:40:fa:75:5e:4e:4a:8a:53:99:17:58:55:79:47:13:fa:
16:f0:e4:03:97:32:32:b4:d7:32:4f:cb:a9:22:41:9f:41:4c:
cd:fd:d1:64:ed:e5:f1:ac:50:0d:89:45:fc:f5:43:86:cf:42:
0b:24:9f:67:34:08:b0:5f:14:34:1b:6e:3c:01:de:6a:69:bf:
9e:58:af:43:b5:38:32:07:20:aa:0f:62:43:ad:4e:fb:90:d6:
d0:ee:95:17:f3:0d:3d:bd:47:98:bf:ee:10:7a:b6:6b:0d:57:
73:94:bd:ea:6d:5d:47:90:f9:4d:6b:40:e2:01:1f:95:81:6d:
1f:9d:74:33:c0:b2:46:3d:3f:ac:3a:ad:b1:38:04:df:32:ce:
5b:95:80:b4:5e:33:95:a0:48:d7:80:53:6b:c8:71:26:0c:7d:
2c:b7:4f:db:70:34:83:c5:e2:ce:0a:10:c9:17:1a:ce:2e:3b:
32:64:ec:a2:45:c5:b7:8e:ca:e4:1d:b5:3a:11:be:cc:19:20:
a6:b0:c9:a1:1d:18:c9:4e:03:ae:aa:8b:89:b4:63:01:c0:ac:
f2:25:61:97:ea:96:a6:e3:d3:da:84:cd:4a:4a:a1:87:42:d9:
ca:70:fc:5a:79:da:75:d7:52:84:6d:bd:15:7f:67:c0:71:ba:
1e:05:38:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org