Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/q0wMey_YUu3B_lQDl5XB0cGanKg.roa
File: q0wMey_YUu3B_lQDl5XB0cGanKg.roa (raw, json)
Hash identifier: ZOspylA4IWS7juJ+ilLakkubhVaMqbj8f5Hpj1Asamg=
Subject key identifier: AB:4C:0C:7B:2F:D8:52:ED:C1:FE:54:03:97:95:C1:D1:C1:9A:9C:A8
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0993
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/q0wMey_YUu3B_lQDl5XB0cGanKg.roa
Signing time: Sun 07 Feb 2021 13:15:17 +0000
ROA not before: Sun 07 Feb 2021 13:15:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18046
IP address blocks: 119.15.224.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2451 (0x993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 7 13:15:17 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AB4C0C7B2FD852EDC1FE54039795C1D1C19A9CA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:f1:4c:a0:15:fd:d0:fd:39:bd:7f:42:8f:
dc:f8:0f:2e:bb:cd:2f:51:81:a7:54:39:cc:4a:4a:
27:39:ef:2a:a6:33:2e:8b:77:20:88:f9:31:07:18:
e8:9c:27:fb:93:41:e4:ce:02:30:68:1a:79:22:db:
43:22:af:38:8b:51:ce:c6:1e:e7:f8:98:b1:c3:0e:
dd:86:47:64:60:22:54:3d:1b:fd:60:c5:21:2e:80:
0b:5c:23:a0:f1:7e:27:69:9f:45:22:21:2c:da:59:
f0:5f:fd:86:90:fb:03:3d:58:08:b2:a5:97:af:0f:
ab:b8:9c:5a:3e:8d:ac:4b:c8:51:41:1a:42:bb:54:
c1:e8:99:38:20:a3:2b:97:f4:83:fe:79:22:4b:74:
d0:8d:85:21:34:03:37:59:7c:28:00:7b:20:5c:f0:
7f:a4:aa:67:56:66:4f:6e:50:54:9d:15:1b:15:41:
23:96:f8:5d:c6:f6:b9:69:9e:cb:50:3c:da:16:c1:
7c:7f:e2:fb:c9:de:db:c8:65:9a:8f:b7:1f:63:52:
ba:41:f9:3a:28:2c:60:96:e6:93:23:ef:6f:74:85:
b4:5d:94:21:80:63:28:eb:0d:2f:f6:ec:4b:ed:4f:
8c:8b:98:23:95:84:f3:fb:3f:2a:25:c5:c8:e5:5d:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4C:0C:7B:2F:D8:52:ED:C1:FE:54:03:97:95:C1:D1:C1:9A:9C:A8
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/q0wMey_YUu3B_lQDl5XB0cGanKg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.224.0/19
Signature Algorithm: sha256WithRSAEncryption
ae:e5:87:39:6e:86:2d:a4:5e:b1:5d:a1:c1:e4:4b:5d:1b:d6:
b8:fb:42:95:5e:35:27:4e:f3:01:a4:e8:8d:b4:8b:e4:6e:57:
50:6a:f3:3b:9a:d2:5e:6d:0f:0d:21:fb:90:f9:7d:ab:ba:ad:
54:5c:0d:80:fb:2a:f1:79:cd:75:19:bb:55:35:9e:33:3a:13:
8e:fe:d7:48:4f:99:ae:d8:a4:e1:af:6f:6e:48:49:04:22:41:
84:04:82:10:97:12:ac:28:05:59:fd:d8:e2:4c:bb:fa:18:5b:
5b:08:fd:75:fa:97:07:89:d1:97:b6:74:66:bb:c0:0a:99:ea:
c4:7d:79:e7:ba:67:14:d3:f2:e7:de:11:20:98:48:da:8b:ac:
e4:a1:81:6c:1e:09:cc:53:06:63:5f:eb:45:9e:2a:e4:88:f2:
b9:74:9c:3a:82:88:ef:f2:a1:83:d7:d7:fc:d7:8a:7e:9e:06:
b5:d9:a9:6c:0f:18:1f:23:95:d7:47:bb:64:d0:57:d6:23:e5:
30:ce:0b:1b:94:05:74:23:6a:e1:41:cb:f9:f8:c2:7f:af:e3:
0c:1a:dc:6e:90:70:47:0b:aa:19:ac:20:6c:c6:6a:c9:1a:7b:
83:b4:a7:7b:97:85:26:16:0f:3b:e1:dd:9c:26:25:76:79:f1:
f1:a0:ec:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org