Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/y46J-Kt5UDb_BGfGH5A0e0Os7-w.roa
File: y46J-Kt5UDb_BGfGH5A0e0Os7-w.roa (raw, json)
Hash identifier: PVfTweAv51Ysr0/i6qAWiytgEfNQsLjn75yLRfnfNHQ=
Subject key identifier: CB:8E:89:F8:AB:79:50:36:FF:04:67:C6:1F:90:34:7B:43:AC:EF:EC
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0D2C
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/y46J-Kt5UDb_BGfGH5A0e0Os7-w.roa
Signing time: Wed 26 Apr 2023 10:31:38 +0000
ROA not before: Wed 26 Apr 2023 10:31:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 113.61.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3372 (0xd2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Apr 26 10:31:38 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CB8E89F8AB795036FF0467C61F90347B43ACEFEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:58:ba:8f:34:73:44:80:cf:7a:86:71:63:
23:5f:c3:83:0b:63:dd:06:b8:59:8d:a3:1b:05:9d:
42:4e:ee:e5:7c:f9:b8:a5:a1:de:ae:ae:30:4b:31:
38:d3:57:0b:25:40:b8:1d:80:61:34:4b:0c:94:70:
3d:d8:ab:67:20:2a:86:14:f0:bc:5a:f3:11:ae:07:
39:4b:aa:20:14:cc:cf:03:ad:04:34:f4:9e:75:df:
72:d2:b1:3a:5a:d0:1c:41:32:72:92:22:dc:de:f2:
91:f7:64:2e:d0:6b:46:cc:52:9a:76:ee:0e:27:ce:
97:92:da:0f:15:e4:0e:11:81:ec:18:6e:65:4f:ab:
0e:a3:19:3d:49:a9:38:26:9c:da:cd:0c:8f:bc:ff:
60:1d:39:8a:47:39:5c:75:a1:59:11:8c:75:f1:06:
32:a7:09:58:2e:c5:bd:5a:fb:8b:3c:ef:8a:5a:35:
e0:c3:54:e5:c8:d5:f8:e9:f6:5f:77:16:59:fb:fe:
c4:dd:67:44:67:01:e7:94:72:64:16:1f:a7:db:ad:
cc:ad:ec:0c:c3:59:c3:bc:c4:d3:99:bd:97:10:2b:
fb:ed:4b:c7:10:c2:22:dc:20:69:9d:2f:28:dd:32:
68:3b:2f:cc:75:1e:ab:bf:0e:fe:0e:1a:13:39:e8:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8E:89:F8:AB:79:50:36:FF:04:67:C6:1F:90:34:7B:43:AC:EF:EC
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/y46J-Kt5UDb_BGfGH5A0e0Os7-w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8b:a0:73:c3:3a:f2:5e:4e:c0:01:84:98:1c:0b:b3:52:df:ed:
11:e7:45:f5:cf:ae:bb:bf:fb:bf:b6:16:4f:54:e7:df:a8:bb:
a0:c4:de:d3:77:af:7b:9f:e1:ec:63:c5:35:07:33:c7:73:b8:
ee:21:6f:18:95:1e:b3:cb:52:b1:49:25:09:7c:71:0c:58:b1:
23:a0:75:e5:11:62:91:28:4e:bb:e4:29:46:a5:a7:f8:30:2f:
7a:ce:75:56:a3:70:f3:8d:bc:a1:91:98:f0:55:01:f7:1e:6f:
31:46:90:dc:bb:57:7b:39:5c:03:ea:ef:c0:d9:11:b5:11:00:
3a:88:2a:3b:4f:ac:b7:76:8e:85:10:a1:13:4b:ae:14:f2:42:
c7:45:0e:1f:97:6c:ea:94:a5:88:6f:d2:44:c9:6c:88:56:95:
80:39:bc:17:c2:d1:28:60:8c:8b:13:0d:fa:41:c6:6c:55:5a:
97:20:a3:23:01:ef:5e:e5:0c:c8:a4:68:17:f3:39:3b:55:76:
ff:0a:66:c9:c0:2b:5c:84:8c:93:83:62:74:a9:f7:23:f9:aa:
73:31:a6:4e:70:82:89:f3:af:af:0b:11:d7:e4:79:b4:02:e4:
9c:cd:b7:bd:18:b2:dc:f2:59:cf:b5:e7:4c:78:5d:20:11:e3:
b4:f7:fd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org