Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/mIAmMTR37C8WWSfCX2FQq8nRYMQ.roa
File: mIAmMTR37C8WWSfCX2FQq8nRYMQ.roa (raw, json)
Hash identifier: n9/lCwXvJtICNJkDNvLNX57aWKL7HUUse0bYdsL5vlM=
Subject key identifier: 98:80:26:31:34:77:EC:2F:16:59:27:C2:5F:61:50:AB:C9:D1:60:C4
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/mIAmMTR37C8WWSfCX2FQq8nRYMQ.roa
Signing time: Thu 15 Sep 2022 02:37:16 +0000
ROA not before: Thu 15 Sep 2022 02:37:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 203.217.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=988026313477EC2F165927C25F6150ABC9D160C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:79:16:70:27:d8:3f:cd:dc:ae:f3:b8:52:
71:14:00:54:8e:99:cd:eb:b6:21:97:02:44:50:61:
a5:e5:cb:d9:d9:ba:c9:84:26:07:d3:77:6a:ed:bd:
ff:49:0f:32:47:90:af:47:00:5a:96:f7:26:b7:82:
5d:04:6c:0e:32:86:c1:45:b1:ac:24:c7:45:60:e8:
0e:49:2c:72:e1:50:fd:74:97:c4:c5:1b:47:db:76:
aa:b8:d4:c9:e7:42:7c:3c:fe:ed:8f:5b:6a:7a:06:
e7:e5:71:c2:2e:0a:48:c3:00:74:80:72:e3:36:0c:
ae:98:57:4f:78:67:f6:c7:46:af:fd:6d:9d:68:a1:
81:ad:54:16:19:ad:0c:5f:ec:a7:36:46:da:62:8d:
3e:6a:7e:b3:0f:d1:0c:fd:12:7e:08:bb:cc:8b:42:
01:2f:25:c2:1f:c4:45:9a:a5:65:1b:2d:1d:43:fb:
4c:5b:34:51:f7:b1:c8:31:5a:64:50:5e:97:86:40:
74:98:04:2c:d3:80:f9:f3:c3:0e:35:33:b9:4f:4d:
52:34:38:2c:6b:72:b6:fb:64:b1:4f:7a:e3:fb:ab:
18:d2:fc:72:a2:31:7a:43:02:d1:bd:ba:04:b4:d6:
84:db:0a:75:1e:89:33:b6:ae:eb:27:03:40:dd:70:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:80:26:31:34:77:EC:2F:16:59:27:C2:5F:61:50:AB:C9:D1:60:C4
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/mIAmMTR37C8WWSfCX2FQq8nRYMQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.217.112.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:a0:01:bc:42:f3:fe:89:5a:0c:05:db:d7:89:50:73:fb:9f:
cd:e1:5b:24:8b:44:f5:9e:97:c0:45:d7:fe:9c:e0:74:08:48:
ab:bb:99:b9:53:bf:17:b2:76:ba:20:11:b5:f7:8f:ba:80:35:
cf:88:2d:20:cd:be:da:b7:ec:39:5c:d6:ab:0e:3c:d8:cc:77:
70:86:41:ac:15:dc:fc:99:3d:2a:41:f1:f3:f2:c4:d9:16:bb:
4a:3c:18:8c:a6:1a:82:32:9b:2c:bb:e0:ab:d5:06:18:e4:22:
f1:09:04:e3:a3:fa:4e:a1:54:55:72:77:28:9f:34:4c:46:68:
f6:d1:de:a8:93:59:24:9b:95:44:9b:ee:28:89:ef:fe:df:22:
db:57:ca:6b:bc:1c:a1:7e:c7:7d:0c:25:6a:30:b4:42:fc:2f:
15:b9:32:6e:0a:e5:b8:6d:8a:02:fb:70:06:2b:27:4e:1d:5c:
7d:8b:46:49:3b:03:5f:65:16:3d:7d:1c:77:84:eb:c6:ce:52:
3a:22:b4:78:49:3f:c5:71:d8:29:13:83:06:9e:24:ba:ea:ce:
7c:79:50:aa:c1:cd:9c:e5:7d:11:2e:ac:23:4f:e4:36:1e:5b:
11:74:5e:ac:5d:4d:14:f8:42:0f:09:d6:2c:c6:e1:f8:9e:3c:
b0:cc:aa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:10 2025 by rpki-client