Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/dc1315M4gy3T5bi8d2wu-W_kU0M.roa
File: dc1315M4gy3T5bi8d2wu-W_kU0M.roa (raw, json)
Hash identifier: 1aqlfS8fqV6F+HdYLOS0fvpaWne1b62UgxzTVK9wc5A=
Subject key identifier: 75:CD:77:D7:93:38:83:2D:D3:E5:B8:BC:77:6C:2E:F9:6F:E4:53:43
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0CB1
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/dc1315M4gy3T5bi8d2wu-W_kU0M.roa
Signing time: Wed 26 Apr 2023 06:05:12 +0000
ROA not before: Wed 26 Apr 2023 06:05:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 113.61.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3249 (0xcb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 06:05:12 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=75CD77D79338832DD3E5B8BC776C2EF96FE45343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:96:5a:43:ec:3c:0b:bd:b7:b2:6f:5b:b6:44:
0f:a2:a0:e9:5b:39:4b:36:57:81:16:6e:1d:a6:2b:
ba:63:3a:31:24:54:e9:66:14:28:81:3f:e8:65:2b:
05:a6:eb:36:2c:53:45:05:8a:c5:e9:97:4f:92:90:
0c:47:58:35:ab:aa:f9:24:29:01:06:cb:5f:d0:17:
dc:05:41:7d:3d:7b:7d:c6:61:fd:5c:76:2b:14:e2:
e7:c1:08:1a:76:98:3e:1e:9a:a0:08:1f:b8:e3:d6:
5f:aa:8a:c9:16:b4:72:40:a1:d1:2b:b9:85:7b:a0:
c2:9c:3d:a5:15:93:48:a1:2d:29:b6:02:5d:41:93:
cb:9e:12:63:a2:75:01:4b:0e:6d:5f:8e:48:c0:e5:
b6:ed:5d:8d:ca:64:9b:1b:66:85:ef:cf:e4:13:5a:
94:e1:ef:da:0f:37:46:62:0e:11:73:4d:1e:60:a4:
4a:ae:27:3e:00:c8:ad:27:21:3f:cf:ac:78:ce:36:
54:57:e4:a0:6c:d1:17:93:92:f4:1b:c2:77:8a:98:
f3:59:ed:b1:10:35:da:96:5a:37:4d:fe:18:19:21:
c4:97:30:52:bf:4a:e7:a9:60:5a:7b:24:f7:65:1a:
42:28:82:08:c1:17:87:b3:d6:86:3d:79:68:40:63:
b7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:CD:77:D7:93:38:83:2D:D3:E5:B8:BC:77:6C:2E:F9:6F:E4:53:43
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/dc1315M4gy3T5bi8d2wu-W_kU0M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.192.0/18
Signature Algorithm: sha256WithRSAEncryption
aa:80:41:bf:e4:2c:c1:fa:e4:8c:5b:e5:e5:98:66:ca:d4:99:
ba:f2:83:ad:06:51:e6:e9:d0:c8:03:0a:66:ae:6a:9f:82:40:
ae:ee:02:74:68:6c:7b:ef:22:78:d3:b4:52:e2:1e:94:58:38:
9d:95:fa:40:0c:09:0f:4c:a0:27:d8:6e:3b:7f:ff:86:bd:37:
91:53:60:c8:c7:be:6f:31:62:d0:49:aa:4f:95:6c:17:c3:77:
49:29:c4:9e:71:ec:ac:fd:1b:67:4d:b2:84:62:4b:4e:b5:21:
52:d3:07:6c:2a:63:ab:3a:cd:e0:ea:52:44:d8:72:3c:a7:fc:
b9:1b:e1:cc:f9:36:eb:13:c5:7d:18:1e:51:45:23:a4:44:d7:
63:21:fa:77:26:0a:45:82:3c:6c:90:b0:92:aa:e2:6a:f8:f5:
9d:1d:4f:7d:12:99:40:d6:2a:16:a2:ba:3a:54:2a:83:44:b0:
d1:b9:f8:82:e9:17:95:b6:60:aa:0d:e2:64:e9:f1:b8:67:d0:
37:af:e3:3f:b6:08:1c:77:a0:00:47:1d:8d:2e:fb:a6:a8:f0:
e7:5b:e5:12:3b:95:3a:b8:8c:c4:c1:ad:d0:70:53:88:5d:66:
40:ae:35:8a:4f:4b:d8:56:59:3a:60:db:ee:af:c3:15:4d:ba:
98:93:f0:cb
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA0MjYw
NjA1MTJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc1Q0Q3N0Q3OTMzODgz
MkREM0U1QjhCQzc3NkMyRUY5NkZFNDUzNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnllpD7DwLvbeyb1u2RA+ioOlbOUs2V4EWbh2mK7pjOjEkVOlm
FCiBP+hlKwWm6zYsU0UFisXpl0+SkAxHWDWrqvkkKQEGy1/QF9wFQX09e33GYf1c
disU4ufBCBp2mD4emqAIH7jj1l+qiskWtHJAodEruYV7oMKcPaUVk0ihLSm2Al1B
k8ueEmOidQFLDm1fjkjA5bbtXY3KZJsbZoXvz+QTWpTh79oPN0ZiDhFzTR5gpEqu
Jz4AyK0nIT/PrHjONlRX5KBs0ReTkvQbwneKmPNZ7bEQNdqWWjdN/hgZIcSXMFK/
SuepYFp7JPdlGkIoggjBF4ez1oY9eWhAY7d3AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUdc1315M4gy3T5bi8d2wu+W/kU0MwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvZGMxMzE1TTRneTNUNWJpOGQyd3Ut
V19rVTBNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnE9wDAN
BgkqhkiG9w0BAQsFAAOCAQEAqoBBv+QswfrkjFvl5ZhmytSZuvKDrQZR5unQyAMK
Zq5qn4JAru4CdGhse+8ieNO0UuIelFg4nZX6QAwJD0ygJ9huO3//hr03kVNgyMe+
bzFi0EmqT5VsF8N3SSnEnnHsrP0bZ02yhGJLTrUhUtMHbCpjqzrN4OpSRNhyPKf8
uRvhzPk26xPFfRgeUUUjpETXYyH6dyYKRYI8bJCwkqriavj1nR1PfRKZQNYqFqK6
OlQqg0Sw0bn4gukXlbZgqg3iZOnxuGfQN6/jP7YIHHegAEcdjS77pqjw51vlEjuV
OriMxMGt0HBTiF1mQK41ik9L2FZZOmDb7q/DFU26mJPwyw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org