Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/exVzxe_KbmZCRSxY9hPpiwy_7ks.roa
File: exVzxe_KbmZCRSxY9hPpiwy_7ks.roa (raw, json)
Hash identifier: Ufz7ERvP5lo7gtlTXd617ctjZiQaR1TEvaJRuc9YDGA=
Subject key identifier: 7B:15:73:C5:EF:CA:6E:66:42:45:2C:58:F6:13:E9:8B:0C:BF:EE:4B
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D28
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/exVzxe_KbmZCRSxY9hPpiwy_7ks.roa
Signing time: Wed 26 Apr 2023 10:31:36 +0000
ROA not before: Wed 26 Apr 2023 10:31:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 113.61.128.0/17 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3368 (0xd28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:36 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7B1573C5EFCA6E6642452C58F613E98B0CBFEE4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:25:6c:e8:d6:97:32:aa:9f:84:3d:a7:64:
a5:ba:53:e7:ca:58:0b:2c:30:16:6a:98:c8:6b:30:
6c:18:5f:26:57:ea:5c:a8:96:36:b6:4b:59:9e:3b:
8b:cc:69:62:d6:36:dd:af:7c:24:4c:c9:cf:81:85:
a0:a8:c6:00:69:23:5d:62:75:14:03:f2:25:01:12:
00:cb:35:f0:af:cc:05:96:b2:98:79:29:58:cb:36:
bd:9d:1f:c8:19:96:f6:cd:d3:b9:84:3f:ba:6c:85:
03:f4:70:25:b9:cf:14:68:ad:68:54:0a:6a:e5:cb:
77:4c:98:30:37:d9:78:92:35:4d:fe:36:4c:7c:1a:
f2:ab:a1:08:56:37:5a:4d:26:b9:d7:64:cd:11:a9:
36:bd:e4:22:bf:f2:73:a1:3f:07:3a:5e:a5:20:ed:
4f:d8:01:e0:08:f2:f2:9d:d9:a1:48:31:52:0a:88:
75:d5:03:2b:a5:21:e6:00:36:46:8d:f1:be:66:b8:
8d:44:c7:b4:2a:cf:c4:68:1f:38:2d:bd:3e:5b:42:
3d:e5:04:cc:55:34:92:f1:95:41:29:1d:40:1a:ce:
9d:86:7b:64:a7:ed:47:4b:51:cb:59:b1:28:7f:68:
05:fb:96:34:47:09:f6:76:96:60:21:f0:62:55:51:
21:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:15:73:C5:EF:CA:6E:66:42:45:2C:58:F6:13:E9:8B:0C:BF:EE:4B
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/exVzxe_KbmZCRSxY9hPpiwy_7ks.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b2:a8:2a:2e:c6:ad:bd:a4:e1:35:3b:3b:b8:dd:d2:fd:4c:62:
b6:3b:8e:91:26:7e:27:3e:ac:54:2c:36:bb:34:3e:0f:76:b9:
b3:be:2c:24:c8:88:a0:dd:41:e0:68:9e:f1:f5:fe:df:7a:ef:
84:45:d8:d3:2b:24:17:c1:89:1a:01:a2:6d:97:36:74:be:28:
a1:f5:39:1b:4d:cc:bd:42:f0:aa:2c:10:1d:c6:33:f9:42:4d:
3c:97:07:d4:60:b6:3e:86:c7:d8:9d:68:47:eb:a9:a6:2c:f9:
cd:c7:dc:bd:de:de:ad:55:00:1d:ce:75:f4:ad:ef:d2:5a:3e:
0e:ae:1c:59:97:83:f1:9c:33:86:35:51:9a:20:85:5e:e5:7b:
63:d0:a6:df:4d:43:9c:2f:a4:2f:88:28:1c:78:17:1e:8e:b3:
8f:5b:cf:33:a1:69:32:18:32:a6:9a:ca:07:1e:a5:6b:4e:de:
5e:37:fa:3f:90:6d:b9:df:51:7a:90:55:9d:2a:60:06:4b:9a:
1b:ad:d8:f3:99:9f:43:11:ed:27:cf:23:56:09:de:65:70:d5:
8e:6a:47:e2:2d:95:4b:5e:f7:d8:d9:e1:59:7a:d5:ea:96:d7:
7d:b3:49:6e:2d:c1:f3:40:56:23:be:8a:0a:6e:92:45:1c:61:
95:74:0e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:27 2025 by rpki-client