Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/pI-x0TEaOKroVq9ea_Rl-6XvfEA.roa
File: pI-x0TEaOKroVq9ea_Rl-6XvfEA.roa (raw, json)
Hash identifier: gQwlDNkshlaA1g6oxPSnRKPeFbCoXVQm64rxDic/W8I=
Subject key identifier: A4:8F:B1:D1:31:1A:38:AA:E8:56:AF:5E:6B:F4:65:FB:A5:EF:7C:40
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/pI-x0TEaOKroVq9ea_Rl-6XvfEA.roa
Signing time: Thu 15 Sep 2022 02:37:18 +0000
ROA not before: Thu 15 Sep 2022 02:37:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 121.254.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A48FB1D1311A38AAE856AF5E6BF465FBA5EF7C40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:00:64:7e:00:dd:49:63:69:41:1c:15:9e:
89:db:14:12:a2:2f:70:48:06:dd:49:ff:76:bb:f9:
9f:2c:b2:ae:68:27:50:87:82:56:48:f2:c5:74:50:
39:b6:cf:82:76:a3:01:b2:d8:19:08:dc:d3:84:af:
6d:33:02:50:30:a8:57:69:89:4f:05:71:0d:1c:11:
47:42:52:ab:b1:ba:bd:f7:2d:c6:f6:69:57:83:8a:
5d:64:f1:7c:2c:ba:f9:8b:cd:f9:ec:27:a5:8c:81:
58:64:a7:48:ed:41:07:08:98:cc:e3:82:cc:18:91:
e0:c1:47:79:fa:45:ee:7c:f7:3e:38:76:6b:c8:59:
4b:cc:75:6d:8c:9b:68:7c:6d:78:2c:bb:01:c0:d8:
d9:ad:6d:df:90:f3:a6:89:f9:30:ad:b3:6e:0f:e3:
69:8b:1d:77:67:b6:f6:b9:9f:bb:b3:3c:c9:a9:b4:
af:7c:83:13:da:61:83:c4:83:50:a6:41:a3:44:39:
f4:17:7e:a8:ff:14:12:e3:1c:8b:31:77:0c:dc:98:
b7:38:ed:09:4c:38:a2:93:80:a4:8e:46:6a:75:96:
b5:8d:36:8d:0a:48:84:f1:7a:18:92:2e:6f:d0:09:
ff:ed:de:d3:f8:e8:d6:bd:56:df:6e:27:52:1d:61:
35:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8F:B1:D1:31:1A:38:AA:E8:56:AF:5E:6B:F4:65:FB:A5:EF:7C:40
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/pI-x0TEaOKroVq9ea_Rl-6XvfEA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.80.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:a5:f9:72:3d:b8:5c:86:bb:ed:9d:11:c4:2f:1f:7c:19:d0:
a0:11:d6:16:52:cb:4d:92:02:1b:ad:47:32:c9:7c:64:c7:ba:
e1:67:71:22:7e:dc:08:b2:50:15:34:67:36:c2:6b:26:1b:99:
40:35:c2:2f:0a:87:d2:2e:ea:fb:2c:3b:74:04:cc:85:03:c2:
81:68:7a:18:b7:68:c4:db:46:48:da:2b:7d:f5:db:3d:41:32:
65:8f:ba:dd:c1:a8:63:8b:d6:66:33:3c:b8:81:4c:20:ae:99:
fe:ea:43:2b:6a:36:6d:f4:7d:c3:fb:8a:24:35:41:20:7d:5b:
35:3f:cf:2e:ae:b1:a4:8c:06:87:e2:96:0e:c5:f4:f2:9f:82:
2e:25:22:02:6c:84:83:e7:05:e5:24:b2:9b:66:6a:a7:79:3c:
3d:47:10:fd:fe:36:79:a2:c8:04:77:83:4b:44:ce:e4:c5:d8:
b8:ad:d8:6c:05:a6:72:48:db:1a:88:26:af:57:ab:84:5f:4c:
3b:d5:92:8e:00:2b:5b:4e:bd:b9:8a:43:b1:f3:35:38:19:53:
86:49:dd:e6:84:3e:52:1d:47:19:d6:6e:3d:46:90:60:10:13:
98:c3:5f:5c:87:17:72:4d:eb:79:17:68:68:6e:37:77:90:5f:
2a:68:99:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org