Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/x93lqKO5u8iRPpM87mbxaH1vszA.roa
File: x93lqKO5u8iRPpM87mbxaH1vszA.roa (raw, json)
Hash identifier: 61K3b5eofkl/oCIATPSssX9UmCBRRtyscvKnKrWSelU=
Subject key identifier: C7:DD:E5:A8:A3:B9:BB:C8:91:3E:93:3C:EE:66:F1:68:7D:6F:B3:30
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0B34
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/x93lqKO5u8iRPpM87mbxaH1vszA.roa
Signing time: Thu 16 Dec 2021 06:54:54 +0000
ROA not before: Thu 16 Dec 2021 06:54:54 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17809
IP address blocks: 210.209.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2868 (0xb34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 16 06:54:54 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C7DDE5A8A3B9BBC8913E933CEE66F1687D6FB330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cb:f4:5f:3f:c2:8d:fe:71:20:d7:89:0d:5a:
c7:5a:61:c5:03:2a:7c:7e:49:52:6b:fe:05:11:38:
c7:08:0e:22:4b:af:d5:ca:d9:78:5a:22:0f:f7:07:
e1:df:d0:30:bd:6b:1e:df:84:77:93:37:89:d7:59:
75:6e:fd:b1:28:c5:23:fe:d5:99:6e:06:6c:3b:cf:
02:01:70:e9:49:30:41:f5:4e:d1:68:9b:0e:5a:67:
5e:08:55:b2:92:47:c7:6f:fd:a1:b0:36:75:52:87:
4c:c0:75:c6:d0:14:1f:f8:5e:a1:47:df:79:b3:13:
f7:1a:67:aa:b0:1b:9f:28:32:94:df:b6:8c:c6:9e:
3a:f2:87:fb:88:56:39:ff:01:d6:37:1a:e2:05:cd:
70:f3:44:67:3b:98:78:bb:7d:c1:11:dc:8a:7f:35:
aa:0a:1b:b0:52:82:09:86:e3:61:37:ff:1a:13:69:
a5:c5:4b:3f:9f:1c:9f:b9:ec:a5:75:5b:ee:df:7a:
68:95:9c:04:e0:89:9f:63:0f:b1:19:52:ec:9b:8b:
11:4b:a9:37:11:05:e0:c1:5c:89:dc:56:3e:af:9a:
b9:20:32:40:a9:ca:49:de:67:9b:c9:a2:46:92:95:
50:c5:09:f9:48:7b:c5:5d:d7:71:af:92:ca:92:ef:
ff:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DD:E5:A8:A3:B9:BB:C8:91:3E:93:3C:EE:66:F1:68:7D:6F:B3:30
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/x93lqKO5u8iRPpM87mbxaH1vszA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.209.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:ad:21:be:db:fd:45:3c:22:e9:aa:de:77:36:18:7a:05:86:
4f:45:98:b0:58:65:f6:e8:3a:0f:08:8d:9f:6e:7d:f3:1b:a1:
0b:00:b1:f8:ce:20:05:0f:b8:33:5e:67:12:35:9c:78:9e:33:
95:0d:b6:3f:3f:f6:5a:f2:d6:1a:34:6e:2e:77:07:45:ff:cb:
61:10:cc:dc:94:a5:1b:14:d6:d1:b2:4b:7f:29:6e:d8:fc:de:
d8:92:08:07:59:7e:d0:3e:33:a2:86:2a:e6:d1:c5:5d:56:87:
36:21:f0:27:8f:01:90:dc:67:93:fa:4d:28:a4:1b:2f:1f:fb:
a9:2c:38:31:48:cb:18:f3:c8:a5:7a:60:3f:d1:07:33:7c:a0:
6a:a5:92:25:58:70:bb:8b:02:c1:09:81:16:ee:9c:47:ac:c0:
96:47:a5:cc:44:57:03:6a:5c:71:07:97:ff:9d:4c:8d:19:24:
37:d2:69:02:a3:41:a4:96:1d:35:79:02:37:fc:e0:b2:42:f8:
0f:c4:6b:a5:49:b9:6a:a8:36:62:8a:dc:66:4b:ef:1f:95:0f:
dd:0a:96:80:46:ce:f3:1c:7c:b9:3c:74:b6:9d:94:b0:8f:d4:
29:95:10:08:0b:ab:19:e2:c1:2b:1c:bf:63:e5:1a:6b:2c:de:
d7:fc:28:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org