Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/jB9RpmL3xyCy9LlHcJSgdXSduWY.roa
File: jB9RpmL3xyCy9LlHcJSgdXSduWY.roa (raw, json)
Hash identifier: Onq12TKba4zWF1MaBVtuQar3xFvd+zi+gQI483GW1Eo=
Subject key identifier: 8C:1F:51:A6:62:F7:C7:20:B2:F4:B9:47:70:94:A0:75:74:9D:B9:66
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0991
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/jB9RpmL3xyCy9LlHcJSgdXSduWY.roa
Signing time: Sun 07 Feb 2021 13:15:15 +0000
ROA not before: Sun 07 Feb 2021 13:15:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 119.15.208.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2449 (0x991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 7 13:15:15 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8C1F51A662F7C720B2F4B9477094A075749DB966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:46:79:1b:cf:64:32:41:a4:cf:67:59:02:e1:
ed:f0:46:a3:b5:d0:8a:74:bc:a4:72:af:95:44:e5:
1b:7f:32:90:1a:c1:0e:bb:b8:18:d6:c5:53:1b:17:
89:e6:46:e7:c4:dc:72:57:5e:bf:12:5e:45:6a:6e:
d3:65:43:e9:77:62:8e:97:de:74:6b:42:6e:41:aa:
11:44:cf:25:b1:cd:8a:c0:c1:3d:2d:41:e5:76:71:
4b:a5:13:92:38:2e:9e:54:c7:1f:ab:c2:11:0d:26:
49:0b:d9:a1:23:15:e2:f3:c8:14:a1:19:a4:16:9d:
8f:11:ad:81:86:cb:67:0c:84:5b:61:fc:76:a0:02:
08:cd:29:94:d7:3c:0d:09:45:88:2b:d1:01:b0:07:
d2:11:b0:16:32:d4:5f:1e:d9:52:2c:e1:1b:e1:96:
38:ea:ef:1e:f7:74:2f:6c:74:2e:d8:c6:67:aa:fa:
98:dd:92:39:90:34:34:8b:24:b2:57:2f:bf:46:54:
9b:49:9a:1e:92:67:0f:c3:3a:7a:e5:e9:c1:1e:14:
e1:0e:cb:d5:15:65:01:c5:58:eb:42:fc:ec:99:9f:
8c:e6:35:4b:79:1b:03:9f:42:08:fb:ad:ae:d8:0a:
97:f5:e7:07:56:b8:8c:84:15:7d:df:a5:78:52:2c:
da:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1F:51:A6:62:F7:C7:20:B2:F4:B9:47:70:94:A0:75:74:9D:B9:66
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/jB9RpmL3xyCy9LlHcJSgdXSduWY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.208.0/21
Signature Algorithm: sha256WithRSAEncryption
75:7f:dd:4b:94:24:ba:69:ca:88:33:8b:c7:ad:d8:92:78:98:
64:1e:ca:d7:d0:6c:3c:52:20:d5:20:e5:ca:78:81:75:52:34:
e8:b7:f1:9b:17:9f:45:9f:91:9d:8e:c3:0f:a7:5a:13:d5:e7:
de:31:92:9f:08:32:54:8d:7c:30:aa:c5:5d:a2:be:38:2f:00:
80:af:e8:4c:d7:61:44:1a:2d:1b:6e:0e:de:0d:1b:7a:9f:76:
79:e9:6a:48:b7:6f:dd:a1:47:42:4e:a8:a8:0e:b4:1a:6c:4e:
53:98:cb:35:45:51:be:be:37:89:f5:a3:81:6b:68:92:2a:cf:
fd:bc:69:73:e6:31:bc:8c:e5:78:1b:5d:e8:fa:26:ce:50:7b:
a2:be:85:5a:49:4a:a3:cd:79:fe:69:51:b0:7f:ae:b7:55:99:
12:0f:1e:5a:07:01:09:b5:78:67:13:b1:7b:94:e8:71:06:37:
d1:8d:8f:48:96:01:7f:d9:6c:ad:a1:0d:ca:9b:6b:44:98:a6:
5f:67:bd:56:a2:15:ad:ce:4b:ad:02:b0:8a:9d:b3:5c:58:a9:
85:f0:44:a2:28:d8:51:ce:2d:0d:6d:09:4b:d0:d1:16:d7:e8:
63:90:9b:53:ca:17:ff:6c:d4:95:78:e2:07:01:6f:9f:3d:07:
73:a8:0e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org