Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/pYnkunGzeLG-KesGugsN4Ujj_J8.roa
File: pYnkunGzeLG-KesGugsN4Ujj_J8.roa (raw, json)
Hash identifier: lLnMAU4G0U+utp64oY/zEOeHpR7NYO2kkXMvQN3HLow=
Subject key identifier: A5:89:E4:BA:71:B3:78:B1:BE:29:EB:06:BA:0B:0D:E1:48:E3:FC:9F
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/pYnkunGzeLG-KesGugsN4Ujj_J8.roa
Signing time: Thu 15 Sep 2022 02:37:29 +0000
ROA not before: Thu 15 Sep 2022 02:37:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 2401:ab00::/32 maxlen: 96
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A589E4BA71B378B1BE29EB06BA0B0DE148E3FC9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a3:50:e2:08:ea:24:9e:fd:b2:1e:61:02:eb:
4c:89:2a:32:31:ec:85:71:91:60:3d:e5:76:73:f0:
67:56:38:67:37:dc:6c:b0:c9:fc:50:b2:57:25:b5:
ec:e1:02:05:a2:6c:df:6d:56:d0:f8:7e:4f:ce:3a:
a8:02:88:d5:1f:c7:be:a4:cf:e0:d7:b6:3c:46:e3:
1b:b8:ae:86:19:1e:f4:ec:cd:f9:a3:ac:10:1c:eb:
10:57:16:08:e3:d6:37:f5:df:bb:f5:b7:ad:cd:de:
e9:c7:65:91:0d:e3:e4:10:3a:5b:7b:12:16:21:a2:
67:9d:40:18:c8:95:16:ce:6a:73:0f:f0:76:15:dc:
9c:f2:5f:fd:db:5b:a2:7a:4d:2a:bf:40:39:42:f5:
0e:44:74:89:48:5d:06:db:2d:47:e6:51:3c:86:fa:
00:15:29:59:14:50:99:74:86:f4:a7:21:1e:1f:16:
cb:f0:28:3e:bd:4c:28:1c:91:9f:1a:8d:8c:72:9b:
ab:be:ce:5f:ec:54:a8:8d:45:a3:19:0e:f3:1b:1f:
ab:98:ee:6e:4e:70:87:40:e5:29:0b:35:38:2c:75:
7c:ae:ca:5c:63:0e:32:be:4e:33:53:6f:2b:ee:54:
c7:e2:de:58:2c:21:10:b4:33:a0:14:96:2a:85:c8:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:89:E4:BA:71:B3:78:B1:BE:29:EB:06:BA:0B:0D:E1:48:E3:FC:9F
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/pYnkunGzeLG-KesGugsN4Ujj_J8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:ab00::/32
Signature Algorithm: sha256WithRSAEncryption
a7:38:d1:74:75:b1:58:34:bd:47:40:f9:76:2f:40:29:85:24:
64:1d:7f:ca:b8:49:ef:84:a1:7a:74:4d:36:84:ae:00:3c:d8:
50:fc:3b:21:54:e6:4b:a6:93:15:8a:50:52:13:d7:3c:2a:fa:
19:8c:fe:e3:ee:11:90:6e:f7:55:25:e7:53:67:9a:09:a1:92:
9b:a3:e0:b0:66:41:b1:6b:6f:51:2f:aa:46:de:71:2e:67:f9:
41:1b:16:a6:8e:d4:d8:48:08:a3:0d:15:99:a3:4d:68:54:2d:
b9:cb:c6:b5:a6:04:53:ae:3b:8c:b0:59:3a:ba:c6:ba:24:08:
11:0e:60:ec:4c:b0:4a:01:63:7c:3e:20:e9:38:9c:d0:4c:65:
c4:77:27:91:f6:96:dd:28:e5:2a:4a:9a:e9:b7:48:38:0e:07:
e2:c8:95:15:1d:b7:df:88:6d:58:2c:ef:7f:81:6c:1a:0b:5d:
bd:0b:90:15:df:af:70:77:41:6b:5f:0e:0a:08:94:dc:a9:19:
e8:15:bf:2f:81:15:7b:15:c0:21:07:b8:c9:7b:93:d2:08:f4:
be:3e:df:90:8c:e4:f2:18:40:bc:40:9d:c9:c5:6d:d7:d4:b9:
78:39:15:1b:fd:b0:b0:d5:d8:cc:95:0a:42:c1:f8:39:3b:cd:
69:be:fb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org