Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/mWl1RRH5vlg7HsOWlzvt36Rg_3w.roa
File: mWl1RRH5vlg7HsOWlzvt36Rg_3w.roa (raw, json)
Hash identifier: qpbGYZSaQcpaXEBHR3cn+5Bh6jvsTczPdIu2hz5q9XU=
Subject key identifier: 99:69:75:45:11:F9:BE:58:3B:1E:C3:96:97:3B:ED:DF:A4:60:FF:7C
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0914
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/mWl1RRH5vlg7HsOWlzvt36Rg_3w.roa
Signing time: Tue 24 Nov 2020 03:26:58 +0000
ROA not before: Tue 24 Nov 2020 03:26:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 119.15.208.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324 (0x914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Nov 24 03:26:58 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9969754511F9BE583B1EC396973BEDDFA460FF7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:35:98:a5:17:84:1a:a2:76:e9:c4:32:0f:25:
c3:28:14:67:63:65:70:cd:79:8f:30:e3:0d:3a:ae:
91:25:99:5f:e5:f7:24:ab:64:46:51:e2:21:72:37:
7a:e9:c3:f5:b3:01:46:2d:fe:90:a2:fa:9a:fb:d2:
43:5c:f3:c6:eb:ce:6c:8d:32:e1:23:e7:a7:f4:bd:
a7:80:bf:1e:b1:fb:a3:f6:a8:a0:b4:a1:12:af:1d:
0d:f2:9e:5c:8a:13:35:1c:29:a7:81:eb:c2:8f:9c:
54:0a:6c:08:9e:a2:c2:08:a6:24:c7:df:9d:1b:ab:
87:02:a4:9f:78:b5:de:14:02:8e:ff:88:5a:cc:9b:
d2:8a:cf:af:4f:db:cb:c5:95:25:49:2f:b1:d5:d2:
88:be:48:1f:5d:49:b0:19:e1:f8:86:f4:cd:04:26:
8d:5b:3b:53:48:90:7a:f1:ed:af:ac:d6:6a:9b:38:
56:f2:60:59:51:ab:bf:fb:8a:a5:31:96:80:94:03:
7e:5b:a5:08:cd:22:71:41:f9:57:77:34:01:86:d3:
f5:2e:4c:28:0e:a9:80:ab:94:90:85:f6:64:cb:26:
2c:4c:6a:81:e9:7b:fb:4c:f7:7c:dd:c5:4f:f9:15:
0c:16:50:83:c6:db:d5:3a:cb:0a:cb:00:a1:f2:8f:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:69:75:45:11:F9:BE:58:3B:1E:C3:96:97:3B:ED:DF:A4:60:FF:7C
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/mWl1RRH5vlg7HsOWlzvt36Rg_3w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.208.0/21
Signature Algorithm: sha256WithRSAEncryption
43:03:5b:00:7e:ed:45:2c:c8:3e:d3:7f:cd:46:9b:41:cc:f8:
aa:4b:d3:ca:c5:33:49:84:55:97:af:9c:6a:9b:37:4c:62:31:
bf:91:06:6b:0c:28:02:b5:3e:fc:6f:de:7d:61:c6:f3:c9:2a:
e3:3b:82:0a:e0:a5:4f:72:23:48:91:d8:4f:bb:fb:13:f0:ab:
8c:cb:a1:29:f7:5b:87:fe:3b:73:ae:78:15:7f:9e:da:1b:69:
d2:ef:24:a5:94:48:36:33:cd:8d:f5:55:e7:3e:bf:e0:c5:02:
ca:43:b2:4f:cf:81:e4:cc:5d:9e:63:87:4a:11:2e:d6:37:55:
66:94:64:e6:a3:cc:ab:0a:91:84:8e:f5:1d:b9:c1:de:78:f0:
67:2d:78:b0:ab:02:cb:09:b5:a4:49:20:da:25:ac:d9:7f:b8:
e0:cc:89:2d:32:c3:f9:44:87:1f:4c:5e:3d:94:4b:f3:10:6a:
d0:90:f1:1b:3a:a4:ff:cf:a8:5a:24:af:fa:21:48:72:d9:62:
22:0e:9c:1f:55:72:99:84:e0:d6:03:ff:ec:14:8c:c1:b6:8c:
46:db:b3:f0:f2:dd:8b:c9:8b:3e:70:d2:8a:56:31:1a:69:47:
51:5a:60:65:0c:b8:e4:92:77:71:08:78:15:4d:09:2d:d6:b5:
5f:de:cf:7b
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCRQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMDExMjQw
MzI2NThaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDk5Njk3NTQ1MTFGOUJF
NTgzQjFFQzM5Njk3M0JFRERGQTQ2MEZGN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD1NZilF4QaonbpxDIPJcMoFGdjZXDNeY8w4w06rpElmV/l9ySr
ZEZR4iFyN3rpw/WzAUYt/pCi+pr70kNc88brzmyNMuEj56f0vaeAvx6x+6P2qKC0
oRKvHQ3ynlyKEzUcKaeB68KPnFQKbAieosIIpiTH350bq4cCpJ94td4UAo7/iFrM
m9KKz69P28vFlSVJL7HV0oi+SB9dSbAZ4fiG9M0EJo1bO1NIkHrx7a+s1mqbOFby
YFlRq7/7iqUxloCUA35bpQjNInFB+Vd3NAGG0/UuTCgOqYCrlJCF9mTLJixMaoHp
e/tM93zdxU/5FQwWUIPG29U6ywrLAKHyj3uBAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUmWl1RRH5vlg7HsOWlzvt36Rg/3wwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvbVdsMVJSSDV2bGc3SHNPV2x6dnQz
NlJnXzN3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3cP0DAN
BgkqhkiG9w0BAQsFAAOCAQEAQwNbAH7tRSzIPtN/zUabQcz4qkvTysUzSYRVl6+c
aps3TGIxv5EGawwoArU+/G/efWHG88kq4zuCCuClT3IjSJHYT7v7E/CrjMuhKfdb
h/47c654FX+e2htp0u8kpZRINjPNjfVV5z6/4MUCykOyT8+B5MxdnmOHShEu1jdV
ZpRk5qPMqwqRhI71HbnB3njwZy14sKsCywm1pEkg2iWs2X+44MyJLTLD+USHH0xe
PZRL8xBq0JDxGzqk/8+oWiSv+iFIctliIg6cH1VymYTg1gP/7BSMwbaMRtuz8PLd
i8mLPnDSilYxGmlHUVpgZQy45JJ3cQh4FU0JLda1X97Pew==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org