Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/s-0KhAs_Qf7DREy2boNX87VEuws.roa
File: s-0KhAs_Qf7DREy2boNX87VEuws.roa (raw, json)
Hash identifier: t5Aosu1W7zDYeen0eQtpPsGos8NsR0qvSXP2fZ6xYNw=
Subject key identifier: B3:ED:0A:84:0B:3F:41:FE:C3:44:4C:B6:6E:83:57:F3:B5:44:BB:0B
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0966
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/s-0KhAs_Qf7DREy2boNX87VEuws.roa
Signing time: Thu 21 Jan 2021 10:19:17 +0000
ROA not before: Thu 21 Jan 2021 10:19:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17809
IP address blocks: 121.254.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2406 (0x966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Jan 21 10:19:17 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B3ED0A840B3F41FEC3444CB66E8357F3B544BB0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6f:98:f7:4a:24:f8:97:55:4f:d5:2f:7e:01:
a5:43:87:9b:9b:12:2c:ca:21:5a:60:46:ab:e7:0e:
8a:93:a6:f0:51:9c:b9:30:11:e9:bf:53:c2:c9:a7:
d1:63:3a:08:6c:74:a3:e3:33:ff:57:f2:88:f0:f5:
9b:19:a6:4c:f6:4a:4b:5b:20:07:5f:67:95:e4:4d:
51:4a:17:b9:4c:f3:c5:46:9b:da:ad:42:39:5e:09:
95:06:ba:15:02:cc:54:a3:b5:8c:f2:89:cf:f3:e4:
b8:e1:67:a7:43:dd:a4:cd:16:21:3a:ed:48:35:53:
f0:b6:f8:a0:99:56:e2:b6:2c:bd:07:67:9b:0b:dd:
02:12:f7:14:d0:ef:07:7b:6d:dc:6e:1a:cb:57:0c:
33:85:58:8e:36:6f:36:66:fa:b2:c5:4c:a7:44:53:
6b:3d:a6:b4:3c:c2:31:e6:da:a1:f8:86:ca:2e:70:
18:2b:4a:da:c1:ee:e9:8b:e2:8d:e9:60:74:10:7b:
7a:0e:de:1f:24:a1:20:e6:52:4c:c2:48:cc:70:a7:
b7:90:c3:6b:9d:f2:48:ed:5c:f7:c9:07:3b:26:b0:
e2:ce:03:72:c0:88:48:23:04:1d:f6:93:b5:ab:5c:
5a:99:f5:6c:c7:40:bc:74:ef:a6:67:c2:97:42:76:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:ED:0A:84:0B:3F:41:FE:C3:44:4C:B6:6E:83:57:F3:B5:44:BB:0B
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/s-0KhAs_Qf7DREy2boNX87VEuws.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.64.0/18
Signature Algorithm: sha256WithRSAEncryption
31:98:dd:97:2b:16:7f:f8:e0:ae:80:6d:a1:3f:c7:f5:50:27:
47:fa:81:15:b9:8a:a3:7c:a4:4e:fa:c7:78:06:1c:86:6a:c5:
0d:d4:15:02:29:10:09:68:2a:50:35:da:c5:3a:aa:f4:0f:f0:
2e:9b:3f:53:8e:61:2a:e6:c3:e3:de:f0:5c:16:c4:5f:06:d6:
c8:d0:a4:66:9a:30:db:bb:6e:93:94:46:a6:7d:06:70:d0:d7:
40:56:83:b1:c6:0f:94:34:84:75:19:1c:9d:b2:38:e4:be:d1:
64:7f:f4:20:ba:db:73:35:e0:0b:63:2c:b6:f6:b8:b0:3b:1c:
d9:8d:8e:ec:4a:b5:eb:a6:2e:80:a6:46:ea:e8:80:94:05:69:
27:c6:3b:7a:34:8e:5e:c2:fa:72:d9:c3:49:e5:62:42:0d:9d:
df:c5:0d:b2:c2:68:27:6a:a8:64:dd:81:2f:c9:c9:b7:8e:53:
40:f9:4f:de:a2:80:54:c5:a2:be:d5:0f:96:0b:0f:d3:0a:6f:
0c:a0:a5:07:61:c7:4e:ec:ec:53:90:a3:eb:85:b8:59:91:01:
83:d9:a1:6b:c5:47:94:98:15:4b:95:7b:c8:06:5b:c5:88:4b:
2c:fd:c3:f4:cc:30:99:f6:53:8a:e1:4d:af:e8:59:6c:42:1f:
77:eb:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org