Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/qH3g_OOqIzja1hGMkH3-QmDuoR8.roa
File: qH3g_OOqIzja1hGMkH3-QmDuoR8.roa (raw, json)
Hash identifier: nND7xX6o8sNIzoD+391iBcoCSVbV8HmUNzQ5Ui2ifIA=
Subject key identifier: A8:7D:E0:FC:E3:AA:23:38:DA:D6:11:8C:90:7D:FE:42:60:EE:A1:1F
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0AFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/qH3g_OOqIzja1hGMkH3-QmDuoR8.roa
Signing time: Thu 16 Dec 2021 06:39:12 +0000
ROA not before: Thu 16 Dec 2021 06:39:12 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17809
IP address blocks: 121.254.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2812 (0xafc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 16 06:39:12 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A87DE0FCE3AA2338DAD6118C907DFE4260EEA11F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:6f:64:56:84:9f:8c:ee:ff:e3:49:79:26:
b5:0a:6c:0b:52:43:84:65:f2:e1:33:e2:11:f5:84:
15:6b:0f:98:3d:99:46:e8:a3:d3:04:cf:e6:b1:d4:
59:bf:67:ad:ec:92:81:64:0c:5f:ab:47:18:b8:72:
07:91:8f:56:59:2b:3a:28:b7:ea:cf:e6:75:67:12:
ac:11:a5:b4:d3:62:8f:42:7a:07:68:e1:4f:81:81:
37:6d:50:0c:21:9f:fc:ce:06:c8:05:64:d9:e2:34:
c0:81:71:8e:92:d3:bc:f1:24:0a:13:b2:4f:83:db:
4e:a6:ef:2d:fb:e2:d3:13:3c:ee:d2:c4:4a:02:9a:
cd:ba:5b:d0:b0:57:0e:7f:b2:ba:47:21:b6:b1:d2:
65:ac:9d:35:88:5c:2e:57:d0:90:b3:53:39:be:71:
c7:cf:c6:06:19:74:18:7e:7a:32:9a:41:4c:e9:e9:
7d:bb:28:ca:90:57:b2:58:cf:80:41:50:37:60:33:
68:bf:38:a1:e8:f5:46:37:ad:47:07:de:76:41:b1:
5f:b6:7d:7d:34:98:56:1f:43:f0:9a:7d:2d:93:53:
de:69:f5:b5:04:a8:1c:50:24:16:83:7f:c1:bf:50:
75:6c:4a:1f:42:8a:e0:00:ce:55:ea:9b:54:05:ea:
f2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7D:E0:FC:E3:AA:23:38:DA:D6:11:8C:90:7D:FE:42:60:EE:A1:1F
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/qH3g_OOqIzja1hGMkH3-QmDuoR8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.80.0/21
Signature Algorithm: sha256WithRSAEncryption
54:4a:a0:e3:64:7b:ca:46:ce:53:f4:3d:6b:13:7b:3c:e5:0a:
fa:89:63:2f:97:d5:d0:f4:67:7c:35:7e:9a:4f:b0:9f:2e:52:
b3:b5:04:f4:f5:33:38:63:79:c4:e7:06:81:7d:e5:47:55:c6:
27:f7:ca:97:12:97:cd:9d:20:eb:33:81:b8:8a:35:94:d4:5b:
40:68:fa:51:1f:c1:0d:fc:3f:62:6a:8b:99:fd:b0:68:93:21:
59:e4:75:90:f6:8c:61:99:e1:8e:44:32:a1:7a:bb:4c:18:62:
d2:80:00:2a:a3:6d:d5:82:b7:3e:cf:2d:25:16:46:3e:49:5a:
38:33:b1:ab:cf:05:eb:a5:6e:d7:4f:66:a3:ea:4e:ef:7f:37:
3e:f4:08:6e:6a:db:3c:00:a6:71:b8:eb:86:0a:9f:6c:f0:6c:
ff:1a:47:a5:d0:31:2b:4a:58:50:2f:68:95:52:9a:c2:31:63:
db:68:25:d1:bf:b6:77:81:3e:fe:db:8d:e6:ac:ae:97:0b:c6:
b6:da:33:4c:28:46:5e:39:85:20:ad:ef:4a:74:2b:e0:be:3f:
eb:c6:9a:5d:0e:50:e0:de:68:04:1f:4d:f5:e4:d8:45:0c:41:
5f:2a:2a:48:8d:06:e8:80:df:e8:a9:eb:2c:23:ee:a9:01:c2:
1f:49:a1:9e
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMTEyMTYw
NjM5MTJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEE4N0RFMEZDRTNBQTIz
MzhEQUQ2MTE4QzkwN0RGRTQyNjBFRUExMUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCinW9kVoSfjO7/40l5JrUKbAtSQ4Rl8uEz4hH1hBVrD5g9mUbo
o9MEz+ax1Fm/Z63skoFkDF+rRxi4cgeRj1ZZKzoot+rP5nVnEqwRpbTTYo9Cegdo
4U+BgTdtUAwhn/zOBsgFZNniNMCBcY6S07zxJAoTsk+D206m7y374tMTPO7SxEoC
ms26W9CwVw5/srpHIbax0mWsnTWIXC5X0JCzUzm+ccfPxgYZdBh+ejKaQUzp6X27
KMqQV7JYz4BBUDdgM2i/OKHo9UY3rUcH3nZBsV+2fX00mFYfQ/CafS2TU95p9bUE
qBxQJBaDf8G/UHVsSh9CiuAAzlXqm1QF6vLvAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUqH3g/OOqIzja1hGMkH3+QmDuoR8wHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvcUgzZ19PT3FJemphMWhHTWtIMy1R
bUR1b1I4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3n+UDAN
BgkqhkiG9w0BAQsFAAOCAQEAVEqg42R7ykbOU/Q9axN7POUK+oljL5fV0PRnfDV+
mk+wny5Ss7UE9PUzOGN5xOcGgX3lR1XGJ/fKlxKXzZ0g6zOBuIo1lNRbQGj6UR/B
Dfw/YmqLmf2waJMhWeR1kPaMYZnhjkQyoXq7TBhi0oAAKqNt1YK3Ps8tJRZGPkla
ODOxq88F66Vu109mo+pO7383PvQIbmrbPACmcbjrhgqfbPBs/xpHpdAxK0pYUC9o
lVKawjFj22gl0b+2d4E+/tuN5qyulwvGttozTChGXjmFIK3vSnQr4L4/68aaXQ5Q
4N5oBB9N9eTYRQxBXyoqSI0G6IDf6KnrLCPuqQHCH0mhng==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:43 2025 by rpki-client