Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/qnkti123BWhI2RZYxs8wV7_TZhQ.roa
File: qnkti123BWhI2RZYxs8wV7_TZhQ.roa (raw, json)
Hash identifier: VJPuyeixOYxSWq37oq8qmJmXCp/YiQRM4dHarsK9C2Y=
Subject key identifier: AA:79:2D:8B:5D:B7:05:68:48:D9:16:58:C6:CF:30:57:BF:D3:66:14
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D0C
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/qnkti123BWhI2RZYxs8wV7_TZhQ.roa
Signing time: Wed 26 Apr 2023 10:31:29 +0000
ROA not before: Wed 26 Apr 2023 10:31:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 119.15.216.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3340 (0xd0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:29 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AA792D8B5DB7056848D91658C6CF3057BFD36614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:fc:1f:87:63:78:f2:b7:c8:97:98:22:04:
7c:61:ed:c0:ec:c2:5e:5d:5d:99:f9:3a:a2:2f:3f:
6f:d6:4f:b5:ff:93:12:09:47:2c:ac:30:fd:6b:b7:
06:c1:02:3c:be:71:93:32:86:96:ec:b1:4e:7e:11:
67:06:da:ac:74:91:ce:88:a9:20:5f:a3:60:2c:8e:
3c:d9:b8:b8:a9:a3:63:dc:e7:15:dd:c5:d9:81:46:
61:e4:bf:22:16:3d:dc:01:0f:dd:e1:37:2a:d3:0e:
23:16:02:ff:55:a0:f1:9b:a8:2f:55:63:ff:ed:e3:
33:12:e0:2a:31:7b:fd:9b:6b:d7:8d:0b:ed:8d:87:
61:95:df:d9:2e:29:e8:ee:e7:21:bc:f5:cc:68:4d:
83:cb:a3:c8:8f:08:8f:0b:44:cb:58:20:b9:c9:fb:
dd:b4:36:3f:3e:bc:4c:60:20:5a:51:8d:e8:d4:89:
a6:42:47:2b:3b:ff:21:c2:57:8b:a9:24:5e:a1:33:
05:7d:b6:7b:65:8e:2f:4b:e7:d1:eb:21:67:28:69:
26:5b:de:21:37:20:8b:81:a8:3e:62:01:ff:be:97:
0c:f5:8d:e5:b5:6c:1f:f2:7a:1a:2f:b0:a3:7c:f1:
9b:3a:a0:b2:81:0a:41:a2:4f:6d:c2:00:fc:8c:14:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:79:2D:8B:5D:B7:05:68:48:D9:16:58:C6:CF:30:57:BF:D3:66:14
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/qnkti123BWhI2RZYxs8wV7_TZhQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.216.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:78:bc:ae:83:e7:f6:61:ae:a1:7f:94:58:f8:e1:64:76:47:
83:18:a8:b3:12:28:2e:af:90:95:63:03:f9:a9:7c:59:4c:77:
1b:63:5a:9e:67:2b:56:6a:d3:ce:65:d0:b7:65:c5:3c:0f:4d:
f1:37:2d:7a:9f:68:f3:77:69:41:a3:b6:81:65:af:89:11:6d:
58:d6:8f:93:36:19:b8:92:ab:36:72:a3:c1:f2:4e:f3:64:a5:
c0:1f:c7:0f:b7:2d:ec:98:2c:5d:c1:d9:96:17:92:1a:7f:d7:
99:82:5f:f7:7b:d7:e2:76:e7:d2:55:24:4d:c2:66:39:71:b7:
17:b8:1d:ec:5a:73:b7:0a:35:44:cc:d6:08:fc:e8:06:06:f1:
ff:f5:1a:fe:5b:30:fa:05:1d:25:a0:d3:d4:43:63:df:34:f6:
03:e2:2b:86:09:c2:5a:9e:2e:0f:ed:80:f7:92:de:4f:05:fe:
b4:aa:4f:8a:8e:7d:87:25:cb:80:ce:d7:71:29:64:27:f8:6e:
d1:25:96:c3:4f:bd:6a:0a:36:9e:0f:f1:eb:cd:36:0f:90:98:
12:42:a1:65:83:9b:20:ca:d4:dd:e3:fe:4c:d4:ac:30:d1:21:
49:5e:53:18:ea:5c:66:6b:4b:8a:2d:3e:19:9b:f3:3e:ac:25:
1f:fb:d1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org