Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/tvloE4VGVXLR4_nrcDFCnLR7CVs.roa
File: tvloE4VGVXLR4_nrcDFCnLR7CVs.roa (raw, json)
Hash identifier: MeXXO2O35p5qL2qKjhihAZcxOcNKrVqQ1k5kA4ES+9c=
Subject key identifier: B6:F9:68:13:85:46:55:72:D1:E3:F9:EB:70:31:42:9C:B4:7B:09:5B
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0CF8
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/tvloE4VGVXLR4_nrcDFCnLR7CVs.roa
Signing time: Wed 26 Apr 2023 10:31:24 +0000
ROA not before: Wed 26 Apr 2023 10:31:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 27.96.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3320 (0xcf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:24 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B6F9681385465572D1E3F9EB7031429CB47B095B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:7e:04:0b:27:11:31:3d:74:e7:15:5d:61:
ee:52:65:cf:a7:32:c3:c1:2a:b2:15:0e:14:5a:69:
f8:aa:f5:8f:8b:f8:24:d5:50:98:10:08:97:2d:34:
25:7c:78:c0:cb:f8:d1:13:f7:62:75:85:ac:3c:54:
8f:60:21:6b:3a:c1:93:42:44:29:b0:d3:fe:0d:c7:
e8:97:f0:71:64:29:8a:95:77:41:10:47:fe:b9:cc:
c4:87:d3:27:50:7f:bf:2e:a7:01:e1:08:f8:99:b8:
0e:78:78:20:44:bd:f6:e2:d7:ae:22:46:a6:db:22:
f9:88:78:de:3f:b8:bf:a8:9d:6b:49:31:e3:28:60:
2d:19:2c:b9:b7:b1:99:8d:47:4c:6c:92:9a:1c:fa:
60:ea:f7:e9:4f:4b:af:54:83:6f:b2:4f:73:e0:4e:
a5:3d:b7:73:8c:38:e1:b8:14:91:78:d1:da:f3:6b:
b6:19:06:1f:4a:a8:df:f0:af:6c:4c:bb:5b:75:5e:
d6:a2:d2:a6:86:17:39:d7:d2:91:d3:5f:87:0f:8a:
73:3b:50:47:f7:31:6c:89:50:47:7f:a4:d9:88:cf:
84:5b:89:38:b5:0f:85:c5:c7:47:23:9b:bb:bc:16:
6c:37:e3:62:51:3b:65:9d:55:a4:c5:ac:4e:3b:32:
c7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F9:68:13:85:46:55:72:D1:E3:F9:EB:70:31:42:9C:B4:7B:09:5B
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/tvloE4VGVXLR4_nrcDFCnLR7CVs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.224.0/21
Signature Algorithm: sha256WithRSAEncryption
62:35:c8:ed:9f:39:ae:03:66:73:c3:4e:3b:95:12:fa:1f:67:
14:53:a2:9a:2d:66:ea:c5:ce:c1:cb:ed:29:29:86:e9:34:92:
21:31:b4:db:ec:b4:66:50:77:c7:d8:4e:1f:80:fe:a4:ea:9e:
28:72:22:73:ba:c0:40:40:1e:6b:16:00:7a:21:31:24:8a:2c:
71:52:b1:12:ce:22:28:2a:ad:b4:3a:b6:b2:8c:fe:08:c7:02:
ea:0e:03:8f:a7:dd:ee:42:6f:f9:05:83:3c:9c:af:84:42:3f:
56:25:e1:c8:30:e5:c9:0c:b6:e9:4a:3b:69:af:db:89:d1:f4:
f3:6c:f1:38:72:e0:3e:fd:5a:91:88:a2:d4:fa:e0:03:b7:1c:
e6:f4:d7:48:63:9b:15:ed:67:df:d5:0b:ee:ea:7a:b4:e1:75:
04:80:64:23:5f:26:d1:19:f9:be:f6:fe:60:75:94:43:fb:54:
5d:8a:eb:2f:03:91:21:f7:40:13:cc:9f:87:0f:52:d6:b3:6f:
36:9a:a8:44:55:22:4c:ad:14:a2:54:d3:20:7d:79:09:0a:15:
ca:17:5c:a2:07:f4:a7:d2:64:66:5f:b8:67:50:84:d0:d4:12:
e6:1f:cb:d7:42:e9:9a:09:4a:dd:9e:9d:5b:d8:1a:6f:19:90:
23:43:1b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:34 2025 by rpki-client