Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/iOtkcFdS9g8D2s1m3e8yH-VRUD8.roa
File: iOtkcFdS9g8D2s1m3e8yH-VRUD8.roa (raw, json)
Hash identifier: d7LuWGwZo06SRQCDm/EzigIOe5aVGfjhA7vSO2XFZrc=
Subject key identifier: 88:EB:64:70:57:52:F6:0F:03:DA:CD:66:DD:EF:32:1F:E5:51:50:3F
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 08D2
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/iOtkcFdS9g8D2s1m3e8yH-VRUD8.roa
Signing time: Wed 18 Nov 2020 07:54:51 +0000
ROA not before: Wed 18 Nov 2020 07:54:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17809
IP address blocks: 113.61.128.0/17 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2258 (0x8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Nov 18 07:54:51 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=88EB64705752F60F03DACD66DDEF321FE551503F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2b:b4:b1:eb:72:15:72:8b:b4:fd:2a:03:de:
20:8e:6d:57:84:96:e9:21:69:8c:66:0c:07:36:c0:
f7:0e:62:53:13:fd:ad:99:47:92:52:1c:12:e6:bb:
23:6c:4e:d8:71:ed:db:43:20:c9:e9:19:9d:8d:e1:
74:e9:fa:19:a0:a7:de:10:c5:99:dc:8f:13:0b:1f:
88:22:3b:58:84:50:d7:ea:eb:9e:24:0b:27:16:3a:
7f:4c:ee:23:cf:02:23:73:37:ee:46:a6:75:67:c8:
a8:a8:97:ef:ad:94:7c:a8:fe:79:be:9a:ce:fc:2e:
09:4b:76:bf:f8:af:0f:df:a6:8b:6e:5a:87:ed:e0:
ff:22:49:78:bf:64:9e:c9:62:4e:b1:a4:2c:0b:91:
5f:73:ff:58:b2:fd:a9:c6:8c:d0:d4:8b:40:72:c4:
4c:6a:3d:0e:90:c6:1b:d4:22:bc:5b:e7:e9:62:b7:
25:59:a5:75:7e:10:ee:62:e9:f9:ae:22:9f:1c:39:
a8:22:99:4a:03:16:52:e3:dc:7e:ca:08:c1:af:2b:
8c:2b:6f:a5:42:f4:35:b9:0a:90:d3:36:c5:4c:b8:
58:2c:8e:0c:de:0e:5b:d6:9e:7e:c5:8b:bd:cc:cb:
d8:7c:7a:77:fc:ff:15:5e:b9:f7:92:e2:71:cb:b8:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EB:64:70:57:52:F6:0F:03:DA:CD:66:DD:EF:32:1F:E5:51:50:3F
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/iOtkcFdS9g8D2s1m3e8yH-VRUD8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5f:da:81:22:b7:be:4c:74:25:e5:24:2a:df:41:4a:fe:06:05:
7c:b9:1a:e4:5f:2d:e6:f8:2d:40:0f:e3:7a:d3:ae:af:b6:2d:
51:01:3f:29:63:96:33:cf:4d:05:5a:13:93:5c:92:24:3f:73:
fa:74:d6:09:ed:f9:aa:26:5f:21:d4:b6:79:8c:ab:ba:49:5b:
e3:05:d7:d9:14:7e:66:f8:15:c5:19:f0:78:b1:9c:e0:a9:3c:
86:d9:81:6c:1d:d2:f9:2d:26:cc:03:07:e2:4d:d7:3f:54:e4:
9c:7d:6f:0f:54:10:00:21:3b:2f:14:d4:bf:32:f0:b3:08:6f:
b9:2a:f1:72:11:fb:4b:9c:77:45:cd:85:8d:83:23:e6:65:83:
32:cf:e6:48:29:59:83:da:9a:3e:f6:8e:e2:39:ee:8f:e8:c7:
8a:65:83:e0:c3:d7:fe:a2:3c:86:60:0d:41:89:9b:bf:29:f2:
b5:2a:73:c9:5c:f6:c5:9a:12:6d:8e:8d:42:13:46:67:0e:5b:
86:38:2c:4c:5a:d1:76:51:22:05:2c:b6:75:37:23:98:57:e7:
ae:ea:7d:22:23:a8:04:43:f4:92:ce:f6:7f:4e:18:c5:81:8b:
c4:41:da:80:92:25:9b:2d:b5:cf:1a:aa:50:bb:93:6b:39:02:
77:0f:a5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org