Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/uOsHphGDe5ThkkQlzZQeLMV2xpA.roa
File: uOsHphGDe5ThkkQlzZQeLMV2xpA.roa (raw, json)
Hash identifier: kULOC5/hPp1WRmEFRR2zboeMin0eggsvuqLxfs066UY=
Subject key identifier: B8:EB:07:A6:11:83:7B:94:E1:92:44:25:CD:94:1E:2C:C5:76:C6:90
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/uOsHphGDe5ThkkQlzZQeLMV2xpA.roa
Signing time: Thu 15 Sep 2022 02:37:31 +0000
ROA not before: Thu 15 Sep 2022 02:37:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 203.222.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B8EB07A611837B94E1924425CD941E2CC576C690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:18:34:a8:70:21:30:2f:8f:40:11:5e:d3:
ed:8c:86:65:52:0b:b6:e8:df:18:ce:a2:3a:a9:f5:
d9:d5:f1:bc:1f:7d:0c:60:ce:62:a5:58:09:1a:9d:
c0:7c:ab:8a:bf:cf:b7:2f:c2:ae:c6:d6:8f:b2:8d:
43:e2:5f:cb:3e:d7:1c:0c:af:11:ab:ae:be:92:9a:
18:86:de:3b:58:5c:ba:4a:90:11:e9:20:85:fc:a9:
fd:92:5c:e3:f6:af:fb:94:2e:d5:9b:44:fb:af:98:
d7:8a:17:5a:be:12:b2:85:41:d7:a0:4a:bf:21:10:
f7:80:e5:69:20:0a:ba:63:d7:13:83:6d:49:e2:51:
99:85:82:e3:59:b9:98:8f:2e:5f:ae:40:46:63:68:
ae:ae:1e:70:33:7e:b0:57:c7:f8:68:75:f1:25:56:
24:88:4b:c6:2b:d5:74:60:85:ab:8f:22:95:d3:89:
66:e9:bd:49:bf:26:49:ca:c6:c8:86:aa:bf:01:1b:
28:53:b4:61:46:db:e0:4a:fb:da:d1:b8:af:67:7a:
84:46:5d:59:48:d6:43:d5:71:20:73:66:00:4d:d5:
5a:a9:a7:54:14:71:63:ea:47:bc:31:89:e5:36:f4:
2a:48:91:ff:05:e6:68:00:40:fe:03:7d:ed:94:9c:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EB:07:A6:11:83:7B:94:E1:92:44:25:CD:94:1E:2C:C5:76:C6:90
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/uOsHphGDe5ThkkQlzZQeLMV2xpA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.24.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:cb:fd:3d:e7:ca:a1:40:10:7d:cc:59:20:6c:28:f4:91:7d:
6b:a7:7f:3d:5c:e8:1c:a4:c6:82:30:d0:dc:e0:f0:8d:41:dc:
2e:f3:44:b4:a8:ac:3a:42:48:07:af:04:5c:55:b4:a7:9a:3c:
f0:ac:a3:8a:26:c9:1f:d1:10:62:84:46:3b:e5:1d:5f:8b:e1:
69:42:82:ab:1a:5c:a1:c1:00:e5:98:74:5a:4b:97:d1:3f:d8:
34:36:72:36:46:40:de:22:56:fb:ed:bf:3a:60:0d:55:86:44:
5f:e1:7c:1d:5c:bb:92:9f:90:f2:d8:5e:9a:86:db:c9:0d:c3:
25:5a:0e:37:35:a7:17:ef:ae:08:60:75:fa:0c:5e:f4:c2:29:
e2:51:97:08:ce:0e:50:b8:05:ae:5a:bc:44:13:42:06:6a:7b:
54:50:2c:cc:19:16:37:14:0a:c9:71:bd:fd:72:38:0d:0e:2f:
a6:60:1f:ed:9e:9d:65:cd:01:11:a5:4a:d7:15:7c:e2:c9:10:
89:59:36:8b:60:15:0c:b0:27:66:62:44:29:04:b5:e7:a9:4f:
ce:a8:6f:bc:8c:c1:38:4b:69:31:76:cb:d8:68:2b:68:24:80:
c2:06:68:54:56:ba:cd:66:01:56:c4:cc:20:54:24:d5:61:83:
cb:80:9c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org