Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/nw1be0ZJpvoP4_Fz6C6jsJlJm_I.roa
File: nw1be0ZJpvoP4_Fz6C6jsJlJm_I.roa (raw, json)
Hash identifier: TsmQXUg3N/gNJvuA1XXRk4JHWZj1rTTS4tUbzHWGRRc=
Subject key identifier: 9F:0D:5B:7B:46:49:A6:FA:0F:E3:F1:73:E8:2E:A3:B0:99:49:9B:F2
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E46
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/nw1be0ZJpvoP4_Fz6C6jsJlJm_I.roa
Signing time: Fri 01 Sep 2023 08:49:30 +0000
ROA not before: Fri 01 Sep 2023 08:49:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 203.217.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3654 (0xe46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9F0D5B7B4649A6FA0FE3F173E82EA3B099499BF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:8a:2d:50:54:f2:58:8e:74:a6:bd:00:43:
0f:fb:d2:53:e6:88:de:b4:b6:95:6b:f4:7b:fe:b4:
5a:81:0c:38:27:d6:59:d0:ed:ad:ee:b7:c5:b3:22:
d8:bb:3d:bc:fe:98:51:fe:9d:3b:05:2d:06:c8:4f:
50:b6:b3:c1:37:05:3f:94:ba:0a:fb:16:aa:5e:8d:
d1:c2:6f:d0:a6:e6:5b:bc:5b:ec:ce:88:ee:18:c0:
81:64:f4:75:3a:0a:31:b9:e1:24:0f:6b:9f:7d:9c:
0b:f2:35:19:bd:62:a3:2c:83:87:85:cf:70:84:d2:
45:65:6d:9f:17:36:1a:38:48:c4:17:43:a8:ac:09:
7b:01:e9:d1:e4:41:20:d6:60:8e:c0:cd:30:9c:01:
9f:9b:f5:f8:f7:66:da:7a:cd:4c:ec:48:d1:6d:9b:
29:3e:bc:b5:24:38:5d:f5:72:ed:26:8e:d1:24:f9:
b2:3a:e2:56:ad:44:58:6c:2c:6e:6b:ff:9a:01:e7:
7b:a9:df:7b:40:3c:11:6b:79:0f:19:b0:69:1a:03:
b4:78:b4:83:da:24:de:a8:79:f0:ed:97:6a:be:b6:
4e:21:23:61:bb:6d:36:ab:9c:0c:da:50:a5:dd:8c:
c8:bf:aa:8c:2f:e9:fd:dd:02:b7:42:c1:6a:7e:22:
4d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0D:5B:7B:46:49:A6:FA:0F:E3:F1:73:E8:2E:A3:B0:99:49:9B:F2
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/nw1be0ZJpvoP4_Fz6C6jsJlJm_I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.217.96.0/21
Signature Algorithm: sha256WithRSAEncryption
70:40:86:aa:25:4c:8f:5d:9d:28:78:aa:62:b1:ae:59:6d:39:
ba:92:0e:36:2e:32:fe:5e:92:e0:74:77:cd:cf:15:d0:11:ee:
44:7c:2e:ab:7a:5e:fa:61:61:0b:f6:11:33:3d:3d:7f:0b:60:
72:6c:ac:6d:dc:6e:bc:7e:46:55:ac:1f:ea:0e:f0:1b:1f:ac:
c2:81:d3:d5:0c:0d:04:c1:28:66:be:ec:a4:10:72:60:48:7c:
e0:b9:46:2a:13:09:c0:c7:11:2e:06:d0:1e:3d:77:cf:2b:2a:
a8:57:40:65:89:98:14:80:ff:f3:f8:1f:4c:e9:34:38:c2:1c:
fd:f3:0f:99:53:58:11:5b:32:e7:ed:4e:a7:9d:23:44:72:47:
54:55:f6:43:c0:3d:41:65:3e:88:cb:d5:b4:1a:c1:82:bf:f7:
3e:b7:58:6d:e1:00:da:35:da:ff:31:bd:c0:a1:64:93:13:35:
02:ee:cb:4c:3d:a6:22:32:8b:bb:a0:17:e4:f7:1c:de:96:b7:
c6:45:69:05:a0:b9:fc:a3:fb:3f:4e:bf:9f:dc:86:67:c7:b9:
c8:cf:77:e5:50:69:85:45:68:f6:5b:5b:2b:9a:5c:83:4b:b1:
c8:d0:52:d7:93:cf:f2:7a:06:fa:f9:2d:b0:09:8f:11:7c:5c:
b8:5b:7c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:31 2025 by rpki-client