Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/qXyoWTBVAkTsVw4_k3Mhm31buU8.roa
File: qXyoWTBVAkTsVw4_k3Mhm31buU8.roa (raw, json)
Hash identifier: 6kiEM5P3friKnKFKnrfJAZ7dWnxk8PyuDe8Gd/aLeEw=
Subject key identifier: A9:7C:A8:59:30:55:02:44:EC:57:0E:3F:93:73:21:9B:7D:5B:B9:4F
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0CDE
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/qXyoWTBVAkTsVw4_k3Mhm31buU8.roa
Signing time: Wed 26 Apr 2023 07:16:42 +0000
ROA not before: Wed 26 Apr 2023 07:16:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 27.96.224.0/19 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3294 (0xcde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 07:16:42 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A97CA85930550244EC570E3F9373219B7D5BB94F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:3c:cc:fb:d2:d3:4e:b6:fb:88:92:7b:ba:
1e:57:39:00:d0:1d:cb:91:93:11:6e:a6:e0:a7:bc:
d6:af:49:64:9d:1d:dc:b0:8f:cc:73:a0:a8:c3:1d:
f6:54:26:5c:8f:06:7b:df:2e:42:7f:a7:d4:5e:74:
bc:6b:3b:9b:3f:32:16:71:62:ec:89:26:a4:ab:55:
b7:e4:d4:3d:8b:0d:0a:93:c2:70:99:6b:d6:b1:57:
1e:45:f1:29:8a:20:76:23:d1:c5:9b:d2:4b:44:85:
49:f6:80:7d:b4:2f:99:f9:9b:53:ed:c2:ab:b7:6b:
87:cc:cf:1f:4a:ec:86:e3:c8:3e:9d:72:2c:ef:be:
7a:b2:72:47:ec:a3:47:10:70:35:42:3e:3d:ec:01:
b8:0c:d9:b5:d2:a3:f5:85:b3:fb:02:d7:5a:fb:83:
78:45:7f:32:94:c9:ca:c9:9c:1b:27:44:bb:49:d5:
f9:81:98:60:4f:c8:23:6e:1a:e6:60:cf:c2:5a:e4:
c0:da:7d:b0:41:f1:53:57:64:2e:62:88:99:3f:43:
4a:a8:8f:f5:13:59:aa:16:68:00:fe:64:d1:d1:c8:
95:fb:ad:0a:ec:67:7f:19:56:a2:75:84:7e:fb:fb:
7c:97:e6:85:72:8d:57:71:5b:13:64:c8:e8:5e:8b:
4d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7C:A8:59:30:55:02:44:EC:57:0E:3F:93:73:21:9B:7D:5B:B9:4F
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/qXyoWTBVAkTsVw4_k3Mhm31buU8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.224.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:bb:c2:52:96:36:2f:52:b1:dd:d5:06:6d:be:d1:02:4f:86:
09:7c:1b:43:0c:c5:63:5d:f3:70:20:cc:ab:1e:7e:3c:a4:25:
a0:9c:fc:22:c4:44:b4:42:d5:6b:b5:49:53:6f:5e:22:97:e5:
18:ac:5f:a8:ec:ee:d7:e0:e5:7c:a3:1c:30:3c:32:21:5e:28:
dc:03:9d:b8:c8:cf:09:7a:b2:62:7b:9c:7e:39:4c:e3:c2:92:
06:12:5f:d0:b1:94:ae:a1:66:71:f5:21:1a:6b:5e:92:42:6a:
38:11:d7:10:5d:09:df:b5:74:d9:9e:4c:43:3b:b2:13:a5:57:
3d:d2:17:50:81:8a:44:12:2a:c8:51:0e:18:53:70:9d:78:c0:
43:24:36:30:eb:e4:a4:e4:d3:38:a8:89:00:40:43:60:38:0b:
bd:fe:65:b2:da:49:a9:64:07:70:5b:ed:ca:8b:fa:22:e6:f6:
79:ad:21:15:b5:25:37:42:85:1f:64:8c:f7:88:c0:7f:c1:90:
3c:03:e7:19:d9:83:dc:37:5d:fc:dc:bb:7b:61:c6:fc:ef:17:
ef:9f:6f:6d:fd:01:ee:7f:67:e8:ba:fc:ce:c8:92:62:c0:2d:
f2:2c:27:79:8b:62:2c:70:b0:a7:dd:bc:15:6d:e4:45:c8:f7:
04:c5:5f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:51 2025 by rpki-client