Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/tzUmFqfozURV9jQze0yp5bxMFJk.roa
File: tzUmFqfozURV9jQze0yp5bxMFJk.roa (raw, json)
Hash identifier: U2cKyoS+lFrzeUUcv1kxrU9ak6dT96MdlPxQOiMJllQ=
Subject key identifier: B7:35:26:16:A7:E8:CD:44:55:F6:34:33:7B:4C:A9:E5:BC:4C:14:99
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/tzUmFqfozURV9jQze0yp5bxMFJk.roa
Signing time: Thu 15 Sep 2022 02:37:26 +0000
ROA not before: Thu 15 Sep 2022 02:37:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 203.222.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B7352616A7E8CD4455F634337B4CA9E5BC4C1499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:36:1e:40:97:53:5e:7e:88:62:bc:7f:ef:
2a:92:48:71:f5:73:2d:ca:7c:5e:1b:6d:3e:4a:ee:
e4:71:95:9b:96:8e:ae:78:88:a1:a6:dc:71:0c:46:
de:dc:e0:e4:cd:7e:bc:79:c6:89:df:04:53:2d:34:
83:6e:b4:f7:78:49:d4:cf:2d:72:b7:3d:d4:1e:2f:
1a:2a:c6:b1:0f:fc:b1:0a:f0:ff:72:a9:d8:e6:df:
aa:85:7a:59:c7:ad:0a:6a:d5:0d:df:12:e6:b6:89:
c4:ca:f6:41:18:19:1d:9d:48:19:48:53:bb:32:95:
88:2b:e4:89:58:df:bf:51:67:7f:4b:85:c5:8e:c8:
89:36:4e:e3:b3:2e:c4:47:dc:12:ca:11:6d:92:30:
39:30:3f:cc:37:df:37:7c:67:2a:3f:b9:55:03:ec:
1c:b6:6f:02:09:de:be:67:d8:7b:11:6e:19:92:dc:
25:86:eb:bf:d6:65:31:29:a3:f0:42:ed:01:b4:30:
a7:a8:a2:31:45:a1:e3:6f:9c:1c:b8:cc:26:31:b6:
16:4f:f8:d2:47:af:4e:05:55:77:93:84:c4:62:37:
11:de:22:63:93:bd:5a:ac:ce:f3:11:a9:7a:ca:6a:
cf:e2:34:f7:77:2b:13:73:58:7c:9f:1d:c4:6c:f6:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:35:26:16:A7:E8:CD:44:55:F6:34:33:7B:4C:A9:E5:BC:4C:14:99
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/tzUmFqfozURV9jQze0yp5bxMFJk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.0.0/21
Signature Algorithm: sha256WithRSAEncryption
50:26:49:71:19:86:11:7c:23:1e:6b:2d:5e:b8:dd:26:1b:bf:
05:97:7c:e7:ec:43:f4:5b:8a:54:5b:7b:b6:6d:25:7d:51:46:
eb:66:44:06:23:a6:11:5e:5a:12:9a:15:f5:b3:80:44:85:4c:
7c:87:2d:ac:ba:60:89:4b:cb:44:8b:79:1a:0e:1d:c5:be:e2:
95:80:13:b7:0a:1d:37:ba:ce:c1:00:6f:b7:58:e3:26:81:e4:
a2:59:78:a8:57:31:62:ec:80:3d:e7:f3:ee:ab:bf:a3:14:8f:
99:21:96:d5:a7:15:bc:31:b7:13:a3:ee:53:12:79:51:2e:65:
85:67:ab:2c:33:05:6c:17:3c:0c:a2:b9:4c:10:bf:19:21:53:
0f:32:d5:fb:76:df:4f:a1:b5:c0:3c:94:b0:42:a0:1b:66:d6:
e2:79:38:b1:cb:7a:2a:fd:77:6f:f4:03:b5:66:ba:b1:2e:cd:
9f:30:e3:67:df:9f:cb:0e:f1:45:f0:34:f5:b6:86:cf:c6:1c:
4d:3c:15:96:ec:92:55:5f:1a:41:a9:d5:4f:ae:14:75:b4:44:
fc:71:a6:51:0e:a4:24:14:a3:d1:b3:63:2f:d9:92:93:57:6a:
e7:f1:2b:cd:d0:10:1e:7a:00:3f:b0:d4:f9:bd:1f:dd:b8:5a:
33:e5:e5:f5
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMjA5MTUw
MjM3MjZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI3MzUyNjE2QTdFOENE
NDQ1NUY2MzQzMzdCNENBOUU1QkM0QzE0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMazYeQJdTXn6IYrx/7yqSSHH1cy3KfF4bbT5K7uRxlZuWjq54
iKGm3HEMRt7c4OTNfrx5xonfBFMtNINutPd4SdTPLXK3PdQeLxoqxrEP/LEK8P9y
qdjm36qFelnHrQpq1Q3fEua2icTK9kEYGR2dSBlIU7sylYgr5IlY379RZ39LhcWO
yIk2TuOzLsRH3BLKEW2SMDkwP8w33zd8Zyo/uVUD7By2bwIJ3r5n2HsRbhmS3CWG
67/WZTEpo/BC7QG0MKeoojFFoeNvnBy4zCYxthZP+NJHr04FVXeThMRiNxHeImOT
vVqszvMRqXrKas/iNPd3KxNzWHyfHcRs9mg3AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUtzUmFqfozURV9jQze0yp5bxMFJkwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvdHpVbUZxZm96VVJWOWpRemUweXA1
YnhNRkprLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8veADAN
BgkqhkiG9w0BAQsFAAOCAQEAUCZJcRmGEXwjHmstXrjdJhu/BZd85+xD9FuKVFt7
tm0lfVFG62ZEBiOmEV5aEpoV9bOARIVMfIctrLpgiUvLRIt5Gg4dxb7ilYATtwod
N7rOwQBvt1jjJoHkoll4qFcxYuyAPefz7qu/oxSPmSGW1acVvDG3E6PuUxJ5US5l
hWerLDMFbBc8DKK5TBC/GSFTDzLV+3bfT6G1wDyUsEKgG2bW4nk4sct6Kv13b/QD
tWa6sS7NnzDjZ9+fyw7xRfA09baGz8YcTTwVluySVV8aQanVT64UdbRE/HGmUQ6k
JBSj0bNjL9mSk1dq5/ErzdAQHnoAP7DU+b0f3bhaM+Xl9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org