Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/wSK27Hr1Gh3dj_QRvv8KcjvogDM.roa
File: wSK27Hr1Gh3dj_QRvv8KcjvogDM.roa (raw, json)
Hash identifier: iwBgYsno4dtIUASKfoLhpEbkyG5/AOXEhqJgrjgCbUI=
Subject key identifier: C1:22:B6:EC:7A:F5:1A:1D:DD:8F:F4:11:BE:FF:0A:72:3B:E8:80:33
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0CE6
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/wSK27Hr1Gh3dj_QRvv8KcjvogDM.roa
Signing time: Wed 26 Apr 2023 10:31:19 +0000
ROA not before: Wed 26 Apr 2023 10:31:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 27.96.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3302 (0xce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:19 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C122B6EC7AF51A1DDD8FF411BEFF0A723BE88033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:49:5c:73:f2:ee:46:4d:b3:ab:84:6e:cc:
f6:c7:33:5e:b6:ae:c1:94:12:2e:a4:7e:3b:1a:6f:
44:62:6b:6b:71:04:7a:a2:23:84:91:34:d0:f8:2c:
a9:ed:87:e3:9f:e6:08:0c:a6:a6:30:87:6a:57:d6:
32:ce:9d:09:42:ca:c4:9f:6e:94:89:da:5b:1f:e8:
a2:37:9a:ca:ee:ae:df:e8:26:a2:02:31:c7:e3:2f:
12:78:44:54:e1:42:2b:ed:71:62:89:19:21:43:e2:
2f:56:00:ee:46:48:32:23:6c:b5:0c:5a:95:fc:87:
59:3f:1c:68:68:72:78:27:94:dc:79:2c:6f:0a:97:
1f:75:dc:4d:4f:9d:05:0f:fa:2e:24:5b:dd:08:c2:
57:2f:fd:bc:a9:46:af:46:78:fc:6a:2e:25:a1:e3:
29:f7:30:9a:c1:d7:9a:16:2a:37:e7:d8:81:90:10:
e6:1c:ea:ac:3f:5f:ea:15:86:3a:e2:4a:92:1c:91:
af:da:8a:d3:8d:47:36:31:aa:b6:01:5c:74:fc:fc:
22:95:7e:7e:ed:03:98:d4:64:7f:57:05:40:dc:50:
7f:82:64:ad:8b:77:9d:9b:1b:bd:06:0d:8e:09:14:
db:0e:61:9a:77:60:57:1e:cf:5e:e7:8d:39:3f:e8:
29:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:22:B6:EC:7A:F5:1A:1D:DD:8F:F4:11:BE:FF:0A:72:3B:E8:80:33
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/wSK27Hr1Gh3dj_QRvv8KcjvogDM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.244.0/22
Signature Algorithm: sha256WithRSAEncryption
66:fa:87:96:f9:38:45:16:b7:40:f9:80:05:77:5e:82:96:00:
40:8a:fd:90:d3:c7:e4:68:7c:6d:96:d1:a2:9a:e0:3c:d4:13:
08:5c:bf:24:ad:73:6f:14:e2:04:09:a6:ce:6a:f7:22:37:c4:
9f:81:cb:8d:ac:f2:bb:b5:e9:19:46:0a:7e:61:56:b0:c4:29:
1e:40:49:15:d4:16:31:f6:13:54:41:ba:77:e1:ab:c1:98:1a:
f5:16:78:ac:85:c2:09:9e:eb:b8:91:38:d5:86:00:bc:7e:eb:
3f:e3:65:54:c6:b4:4a:61:01:0b:a7:b1:c5:66:68:20:5a:2c:
27:a9:73:bf:1d:68:f3:76:7f:86:39:65:1e:6d:b7:0b:76:83:
f1:71:20:fb:9c:fe:8f:63:73:1d:1c:67:c6:66:c7:d3:6d:7d:
20:47:54:56:3a:65:d3:f5:8c:36:dc:b0:59:46:ae:eb:b7:9f:
14:09:92:5a:54:b6:76:61:52:f0:70:1e:f4:5a:ec:86:33:bf:
40:06:68:f5:ab:f5:d2:ef:fd:0b:d7:3a:e2:dd:db:12:8f:37:
91:2e:53:42:85:78:48:9a:1d:e2:13:25:4c:f1:e6:3e:5e:7f:
b9:d2:ac:5e:c7:54:0d:20:0f:56:a1:cb:aa:24:a2:34:93:f7:
04:b1:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:29 2025 by rpki-client