Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/eQGt7yZACyaM3Obgp4qRD-GaNko.roa
File: eQGt7yZACyaM3Obgp4qRD-GaNko.roa (raw, json)
Hash identifier: l3v8nL4SoFgvk0u6T9c4SVZAsn3G7YFdwuZUh//rbJ8=
Subject key identifier: 79:01:AD:EF:26:40:0B:26:8C:DC:E6:E0:A7:8A:91:0F:E1:9A:36:4A
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D33
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/eQGt7yZACyaM3Obgp4qRD-GaNko.roa
Signing time: Wed 26 Apr 2023 10:31:39 +0000
ROA not before: Wed 26 Apr 2023 10:31:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 182.155.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3379 (0xd33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:39 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7901ADEF26400B268CDCE6E0A78A910FE19A364A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:50:ad:22:b7:5f:8c:8b:78:16:c5:c1:70:
e3:c2:bd:c3:66:f9:7a:24:aa:da:48:5a:17:3c:ff:
7f:fc:d3:ec:08:0c:db:6d:96:d5:00:a3:00:9d:cc:
5d:0c:da:88:68:1f:9b:85:0f:9b:a5:50:3c:b3:b6:
b9:3e:41:18:dc:ef:b7:e5:6a:44:8e:d6:29:96:3d:
07:be:3e:90:76:6c:df:f1:df:16:f7:49:e9:71:2b:
b2:e5:66:56:03:0c:06:ed:f5:c9:c0:90:23:43:1f:
b5:a7:98:c9:54:95:ad:cc:71:5c:1e:87:ed:e5:80:
b1:bc:b3:ae:3a:af:28:5f:bf:ad:a8:db:75:1b:0b:
30:42:40:f9:08:82:53:a9:55:74:f5:64:9a:fc:d9:
cf:71:83:13:e3:3f:4b:4a:28:6f:e6:df:32:ac:f8:
d5:4d:c2:8f:f4:73:cb:02:dd:9c:b5:c9:41:e0:97:
97:b5:6d:79:05:64:5a:a7:c7:97:b5:c2:0c:08:a2:
50:89:d4:2f:85:0b:79:43:8d:a7:94:04:bd:23:dd:
8c:1f:0d:a5:09:c8:5c:5a:df:5c:ec:aa:20:34:4a:
6f:36:88:0f:91:43:e0:ed:25:b2:07:ea:0c:96:c8:
e3:cf:88:72:37:bb:4c:76:98:26:37:d5:e2:73:db:
1a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:01:AD:EF:26:40:0B:26:8C:DC:E6:E0:A7:8A:91:0F:E1:9A:36:4A
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/eQGt7yZACyaM3Obgp4qRD-GaNko.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.64.0/18
Signature Algorithm: sha256WithRSAEncryption
44:03:49:cd:ee:bf:33:8d:b2:13:3c:fa:38:67:91:09:cb:53:
48:97:39:ac:11:e4:5f:aa:d9:11:7f:a3:f7:94:53:45:33:0c:
40:b2:6f:ef:9d:df:fd:c6:ab:a4:ff:69:61:19:3d:7f:2d:c4:
4c:f4:0e:33:3c:4f:13:a3:20:10:e2:4a:47:04:97:61:00:c7:
0f:9f:bc:b9:7b:1d:73:e1:e7:3e:45:d0:ba:84:67:c4:6c:b3:
b5:bf:21:bc:bd:f7:d8:d0:2a:52:44:b3:3e:74:83:af:af:f0:
31:5c:39:aa:3f:75:8f:24:25:c5:c8:cd:3c:6c:6b:27:88:25:
9e:97:3a:e2:ab:46:4e:58:72:09:98:ac:9e:62:5a:51:4a:c1:
c8:b3:6c:07:ae:e4:43:72:46:0a:de:83:d2:61:75:67:1e:ab:
c4:fa:36:f1:e6:66:f0:e5:ad:9b:a3:fd:0b:fb:79:e4:16:a7:
63:4c:6b:70:c8:83:c2:8d:60:ac:76:36:ae:1a:c8:ca:34:1b:
03:86:70:da:44:af:7c:67:be:5f:7a:e3:ab:c7:20:a5:d1:29:
f7:c5:3d:70:29:98:94:e0:3a:b1:bd:b1:d0:ee:1a:41:1a:b9:
d4:90:a6:57:b9:a8:bf:1c:dc:f3:f0:13:d7:d2:77:2f:f5:09:
50:1f:d0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org