Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/e3JP-_k1XsmbIGuHprpXzcRzIiQ.roa
File: e3JP-_k1XsmbIGuHprpXzcRzIiQ.roa (raw, json)
Hash identifier: R5qG+v22c5/Bqx+iEwyTsHKny9nq4lvAua4sQGWRVjo=
Subject key identifier: 7B:72:4F:FB:F9:35:5E:C9:9B:20:6B:87:A6:BA:57:CD:C4:73:22:24
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 099F
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/e3JP-_k1XsmbIGuHprpXzcRzIiQ.roa
Signing time: Sun 07 Feb 2021 13:15:28 +0000
ROA not before: Sun 07 Feb 2021 13:15:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17809
IP address blocks: 113.61.128.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2463 (0x99f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 7 13:15:28 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7B724FFBF9355EC99B206B87A6BA57CDC4732224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:49:53:3b:d9:1a:bc:99:67:4a:b2:22:02:
40:d8:33:6f:93:08:70:55:90:5d:59:59:11:d2:e7:
0b:c3:01:49:d1:67:e1:66:3c:e8:21:e1:4c:ad:81:
90:4d:5f:9b:c5:a5:9b:a4:fa:df:5b:c0:7d:05:8f:
d8:81:58:9a:87:ad:88:18:8c:33:23:cf:f7:52:9f:
ea:aa:e7:7f:6c:5b:d4:6d:f8:b1:a3:4b:01:e2:f3:
21:73:46:28:73:4d:d5:8e:94:19:93:59:09:0a:ba:
15:ec:23:2a:da:2f:42:a8:4f:27:9f:fc:c4:74:12:
75:a0:84:31:be:86:4c:42:81:b3:a1:c4:4d:ce:e8:
0d:44:00:12:b3:d9:6d:60:29:45:69:8e:13:f7:18:
5b:30:d7:75:f2:ef:80:10:f8:f8:09:f3:30:a2:cf:
cc:00:92:76:ff:6c:b2:0a:3e:19:6f:ed:0d:b3:29:
64:f7:f6:82:fd:3f:a6:6f:c7:f9:e2:75:f0:30:6f:
fd:26:be:7a:57:88:94:8c:9a:4c:07:5a:89:22:13:
62:b6:d5:a3:4e:0b:42:b9:e3:4e:c6:f0:c6:4d:37:
31:16:a8:2c:c7:7d:4a:6d:0c:1c:c2:5d:60:b3:34:
f8:82:cd:b7:e0:cb:fc:7a:09:c1:eb:69:8f:04:31:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:72:4F:FB:F9:35:5E:C9:9B:20:6B:87:A6:BA:57:CD:C4:73:22:24
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/e3JP-_k1XsmbIGuHprpXzcRzIiQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.128.0/17
Signature Algorithm: sha256WithRSAEncryption
12:23:69:93:5d:7e:cb:db:f5:23:f6:cf:1e:f7:f4:53:4b:c9:
5e:b6:c7:18:40:19:03:6e:55:34:bd:f5:c2:41:9c:36:9a:93:
7b:23:e0:fc:e3:95:7c:b2:47:99:ec:ba:62:64:29:bc:91:c8:
bf:83:bf:91:0e:6b:88:63:7f:d6:f1:88:01:3a:54:60:fe:f9:
66:f3:83:2b:03:69:05:6f:50:6e:32:dc:d9:90:df:a5:34:4e:
eb:cd:b2:0e:5a:85:e0:e3:f5:96:3d:ad:d0:ce:ef:17:1b:e9:
d1:d5:e7:fd:03:95:55:2c:e8:94:1f:12:40:ed:23:19:ab:bd:
09:3d:36:a4:8f:4c:0a:1f:0c:a4:71:d6:e6:79:39:5b:bd:f5:
1f:93:89:98:e5:8c:84:62:7c:c2:97:ed:87:73:09:9e:41:cb:
a0:bb:32:58:77:01:fa:19:0b:ff:95:7c:db:dc:f2:82:eb:39:
34:6e:78:8b:cd:88:6e:71:e5:db:02:49:97:63:39:79:8d:56:
e5:81:3d:59:a9:cc:6c:8d:be:3b:55:38:6b:24:65:0e:cd:72:
32:03:af:04:df:52:68:a9:54:b0:3e:61:e8:02:c5:18:4b:4a:
48:6d:43:00:ce:3c:18:54:53:49:e4:54:c3:a5:3e:75:c6:34:
e9:5e:03:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org