Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/fyQ74AQHbrOaZslZMdbeivegxTQ.roa
File: fyQ74AQHbrOaZslZMdbeivegxTQ.roa (raw, json)
Hash identifier: 0UDpfM7ZocwRuCpvNLdOO6e+16X06fj84q0nqR2CbQc=
Subject key identifier: 7F:24:3B:E0:04:07:6E:B3:9A:66:C9:59:31:D6:DE:8A:F7:A0:C5:34
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 09A1
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/fyQ74AQHbrOaZslZMdbeivegxTQ.roa
Signing time: Sun 07 Feb 2021 13:15:30 +0000
ROA not before: Sun 07 Feb 2021 13:15:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17809
IP address blocks: 121.254.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2465 (0x9a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 7 13:15:30 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7F243BE004076EB39A66C95931D6DE8AF7A0C534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:1f:bb:f3:0e:82:31:f5:3d:33:f8:f6:ad:
60:db:0d:b4:29:dc:74:04:0b:2a:48:23:69:4b:41:
64:f9:3b:68:03:c3:a4:03:51:c3:1c:54:12:9f:b3:
ca:42:8d:c5:b6:91:89:c5:0f:71:71:01:5e:d5:1d:
20:09:af:c9:96:e8:5e:5e:f5:df:e4:b5:17:18:a4:
a8:48:3a:94:5c:2b:cb:8f:6f:79:87:b5:71:4a:4b:
39:b0:dc:b4:e5:4a:49:f7:06:c3:45:bc:48:d8:ab:
a6:39:36:ab:e9:15:23:a3:ca:64:ef:df:bb:7c:32:
55:19:d9:df:f6:f7:5d:90:2b:66:2f:21:ff:b4:78:
eb:1f:eb:0d:46:e8:d4:9e:3f:78:1c:75:70:a3:6d:
ca:55:b4:60:ef:0c:2e:fe:21:4c:5f:df:57:e7:20:
c9:26:84:ea:91:f5:18:b6:31:56:ab:87:be:f1:f3:
51:6d:35:cc:8d:5e:73:c7:c4:f9:0e:69:09:4e:ed:
1c:c1:f5:30:a5:4d:dc:07:48:c4:cd:e8:8a:17:b8:
74:4c:6e:5f:7f:f8:41:b8:6d:7f:e8:c4:46:2b:45:
72:7c:16:7d:09:be:4c:c0:e9:66:f8:15:c8:36:20:
45:0c:49:bb:91:ea:86:52:c1:eb:eb:59:07:4c:c2:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:24:3B:E0:04:07:6E:B3:9A:66:C9:59:31:D6:DE:8A:F7:A0:C5:34
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/fyQ74AQHbrOaZslZMdbeivegxTQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.64.0/18
Signature Algorithm: sha256WithRSAEncryption
17:9b:b0:a2:b3:45:7b:ed:d7:27:68:e0:6e:a4:71:89:cf:2f:
a8:bd:c6:97:11:6c:08:4f:22:99:46:a8:e5:ff:6c:56:60:2e:
5f:5c:f8:8b:f0:27:cc:5a:a3:43:fb:5d:3f:ca:a0:ae:6b:46:
dc:93:d6:7f:e7:99:43:8b:a8:76:c1:f7:79:29:04:64:da:8d:
b1:57:54:fb:31:89:bb:94:91:52:6f:48:3b:d0:03:21:08:87:
6c:28:ec:2a:4c:e0:11:b6:56:ab:98:03:85:37:59:77:3c:c3:
9a:b4:21:bc:5a:f7:48:80:3b:01:8f:7f:6f:4a:30:f9:ea:8a:
9c:d0:1e:56:d7:ae:a5:42:a7:54:47:38:8d:8a:1f:e1:bd:b9:
13:11:4f:73:a2:76:1a:44:8d:89:c5:b8:16:2a:01:54:bd:14:
75:c1:3f:98:61:f3:02:38:a6:5a:df:d3:71:0a:e5:f8:95:28:
8e:4f:77:55:7d:e8:f2:bb:c5:8b:a7:c2:be:74:dc:01:29:f8:
c5:b8:a2:7e:89:c8:e3:c7:ae:56:56:70:82:fd:df:5a:d3:88:
1e:32:74:7d:b0:86:83:83:a5:c4:3e:61:e9:75:f2:72:31:fc:
12:4e:46:f7:88:76:27:c9:72:2d:e4:c2:dc:b1:f3:a4:9d:83:
01:d9:4d:85
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMTAyMDcx
MzE1MzBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDdGMjQzQkUwMDQwNzZF
QjM5QTY2Qzk1OTMxRDZERThBRjdBMEM1MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEax+78w6CMfU9M/j2rWDbDbQp3HQECypII2lLQWT5O2gDw6QD
UcMcVBKfs8pCjcW2kYnFD3FxAV7VHSAJr8mW6F5e9d/ktRcYpKhIOpRcK8uPb3mH
tXFKSzmw3LTlSkn3BsNFvEjYq6Y5NqvpFSOjymTv37t8MlUZ2d/2912QK2YvIf+0
eOsf6w1G6NSeP3gcdXCjbcpVtGDvDC7+IUxf31fnIMkmhOqR9Ri2MVarh77x81Ft
NcyNXnPHxPkOaQlO7RzB9TClTdwHSMTN6IoXuHRMbl9/+EG4bX/oxEYrRXJ8Fn0J
vkzA6Wb4Fcg2IEUMSbuR6oZSwevrWQdMwrDNAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUfyQ74AQHbrOaZslZMdbeivegxTQwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvZnlRNzRBUUhick9hWnNsWk1kYmVp
dmVneFRRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnn+QDAN
BgkqhkiG9w0BAQsFAAOCAQEAF5uworNFe+3XJ2jgbqRxic8vqL3GlxFsCE8imUao
5f9sVmAuX1z4i/AnzFqjQ/tdP8qgrmtG3JPWf+eZQ4uodsH3eSkEZNqNsVdU+zGJ
u5SRUm9IO9ADIQiHbCjsKkzgEbZWq5gDhTdZdzzDmrQhvFr3SIA7AY9/b0ow+eqK
nNAeVteupUKnVEc4jYof4b25ExFPc6J2GkSNicW4FioBVL0UdcE/mGHzAjimWt/T
cQrl+JUojk93VX3o8rvFi6fCvnTcASn4xbiifonI48euVlZwgv3fWtOIHjJ0fbCG
g4OlxD5h6XXycjH8Ek5G94h2J8lyLeTC3LHzpJ2DAdlNhQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org