Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/sKkDWCT2YQBrvAqbol9eHfTneVo.roa
File: sKkDWCT2YQBrvAqbol9eHfTneVo.roa (raw, json)
Hash identifier: St5BEY478c1WuxniJyMVMKlYaOTOXVS3+liN5QgcayQ=
Subject key identifier: B0:A9:03:58:24:F6:61:00:6B:BC:0A:9B:A2:5F:5E:1D:F4:E7:79:5A
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/sKkDWCT2YQBrvAqbol9eHfTneVo.roa
Signing time: Thu 15 Sep 2022 02:37:20 +0000
ROA not before: Thu 15 Sep 2022 02:37:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 111.67.48.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B0A9035824F661006BBC0A9BA25F5E1DF4E7795A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:e2:f0:77:a4:65:6d:f1:fb:e9:cf:2e:ea:
0e:d5:89:38:d7:de:ee:54:4d:03:31:ae:88:38:87:
82:05:39:b6:5b:cd:3f:ca:38:f5:03:f1:e0:7d:06:
b6:a7:f4:8d:12:1a:2f:01:6c:bb:60:d1:54:7a:fc:
ab:5a:c9:c0:03:53:dc:1c:d3:be:e9:6c:29:6b:24:
2c:69:2d:b4:aa:7b:57:51:9a:d8:a8:a0:fe:4a:ab:
8d:6a:98:0f:08:9a:7e:fe:f9:42:8a:2c:8c:1d:85:
56:3c:41:a0:cc:c9:57:af:7e:8c:ad:17:22:56:da:
7c:f3:8c:e2:ef:26:bf:1e:f5:97:b4:82:bb:28:b2:
e0:ca:5c:fd:31:dc:eb:9e:a3:b6:83:ae:d4:28:b4:
64:73:9d:a6:2b:7b:d8:87:79:fa:58:56:da:ba:3d:
7c:35:3a:07:3c:d3:f4:57:34:fe:b6:f8:84:50:5e:
f4:d0:59:d9:6e:60:1b:09:aa:31:80:3b:e8:7c:3c:
74:42:06:27:06:7e:f5:de:15:df:4d:03:cb:82:ce:
75:65:32:59:cf:3d:0a:2e:4b:b2:93:5a:f8:1e:59:
f4:6f:80:16:b1:58:36:29:d0:ba:56:11:a5:b6:c5:
3f:40:7e:94:9f:da:aa:b8:13:56:c8:d8:f3:3f:7e:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A9:03:58:24:F6:61:00:6B:BC:0A:9B:A2:5F:5E:1D:F4:E7:79:5A
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/sKkDWCT2YQBrvAqbol9eHfTneVo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.67.48.0/20
Signature Algorithm: sha256WithRSAEncryption
05:29:b9:b9:51:83:d0:81:82:e0:e4:27:96:9d:93:ff:d5:4d:
98:e0:3c:86:98:6b:12:58:e9:b7:1d:5e:15:dd:27:dc:1d:26:
ff:c4:8b:3c:d8:2c:f6:d0:16:10:52:02:af:a7:f5:48:63:96:
fd:33:53:60:c1:89:19:a4:5b:a6:7d:8f:e2:12:82:7f:cb:2e:
5a:67:c2:67:f7:83:45:06:86:f5:41:ca:3b:c9:99:9b:9a:9a:
21:0f:e1:9c:68:3b:e1:b5:3f:56:50:58:b1:f5:f6:44:dc:24:
75:4a:19:c5:76:63:8a:c8:21:06:20:a9:0e:ce:a9:3b:86:e9:
48:ea:26:3f:9b:be:ec:60:4b:d8:4d:88:68:1b:0f:fa:19:df:
c3:58:5d:3f:3b:35:3d:73:85:96:84:df:39:8f:20:82:30:60:
d2:f7:a4:77:71:0c:3c:25:72:9a:68:87:f7:e1:0e:b0:bc:34:
57:cc:6e:32:d0:db:e2:69:4a:c5:27:a1:e9:e1:45:0a:4d:db:
c4:3a:e8:c6:76:d1:d7:5b:13:64:15:4a:e7:60:3c:86:e1:73:
1a:06:b0:a8:5f:00:dc:a9:77:4d:a7:9b:53:4c:93:6b:d3:9c:
c3:97:9e:df:00:54:61:2c:c1:e8:72:29:4f:55:aa:d0:37:51:
d5:95:d4:54
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMjA5MTUw
MjM3MjBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEIwQTkwMzU4MjRGNjYx
MDA2QkJDMEE5QkEyNUY1RTFERjRFNzc5NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHo+Lwd6RlbfH76c8u6g7ViTjX3u5UTQMxrog4h4IFObZbzT/K
OPUD8eB9Bran9I0SGi8BbLtg0VR6/KtaycADU9wc077pbClrJCxpLbSqe1dRmtio
oP5Kq41qmA8Imn7++UKKLIwdhVY8QaDMyVevfoytFyJW2nzzjOLvJr8e9Ze0grso
suDKXP0x3Oueo7aDrtQotGRznaYre9iHefpYVtq6PXw1Ogc80/RXNP62+IRQXvTQ
WdluYBsJqjGAO+h8PHRCBicGfvXeFd9NA8uCznVlMlnPPQouS7KTWvgeWfRvgBax
WDYp0LpWEaW2xT9AfpSf2qq4E1bI2PM/fnfxAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUsKkDWCT2YQBrvAqbol9eHfTneVowHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvc0trRFdDVDJZUUJydkFxYm9sOWVI
ZlRuZVZvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBG9DMDAN
BgkqhkiG9w0BAQsFAAOCAQEABSm5uVGD0IGC4OQnlp2T/9VNmOA8hphrEljptx1e
Fd0n3B0m/8SLPNgs9tAWEFICr6f1SGOW/TNTYMGJGaRbpn2P4hKCf8suWmfCZ/eD
RQaG9UHKO8mZm5qaIQ/hnGg74bU/VlBYsfX2RNwkdUoZxXZjisghBiCpDs6pO4bp
SOomP5u+7GBL2E2IaBsP+hnfw1hdPzs1PXOFloTfOY8ggjBg0vekd3EMPCVymmiH
9+EOsLw0V8xuMtDb4mlKxSeh6eFFCk3bxDroxnbR11sTZBVK52A8huFzGgawqF8A
3Kl3TaebU0yTa9Ocw5ee3wBUYSzB6HIpT1Wq0DdR1ZXUVA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org