Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/yZ43auM4uAqAvKV3f_Am4Ewz10c.roa
File: yZ43auM4uAqAvKV3f_Am4Ewz10c.roa (raw, json)
Hash identifier: cxHrMEqVfGKG4FfZUTCT7PWajs4EarppP/qT+g2usAQ=
Subject key identifier: C9:9E:37:6A:E3:38:B8:0A:80:BC:A5:77:7F:F0:26:E0:4C:33:D7:47
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0BFC
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/yZ43auM4uAqAvKV3f_Am4Ewz10c.roa
Signing time: Thu 15 Sep 2022 02:37:17 +0000
ROA not before: Thu 15 Sep 2022 02:37:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17809
IP address blocks: 27.96.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 15 02:37:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C99E376AE338B80A80BCA5777FF026E04C33D747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:58:fd:01:4f:15:ff:c5:ae:cb:be:51:f8:c7:
70:f1:df:cb:96:34:e0:1e:39:2e:64:be:e9:96:61:
00:41:05:20:56:7d:a0:f3:34:07:51:9f:9c:0b:35:
fa:cc:7e:2a:77:f7:c7:ec:b3:c4:1d:99:aa:da:cd:
79:7f:88:70:fb:fa:6c:c6:19:10:b8:2e:73:d7:6a:
7b:50:01:70:73:ee:9f:b2:05:80:a7:8b:8f:68:a2:
be:ef:2d:48:ff:2c:2c:93:63:75:be:7e:cf:74:29:
03:c4:c5:f6:68:f6:22:3c:8d:52:78:1a:9d:27:53:
79:d9:3e:61:88:d1:bc:ee:a8:f1:97:13:5d:69:14:
d9:15:cd:3c:5a:da:db:1d:29:d2:a3:3b:5d:9d:e6:
53:90:17:d9:5d:3d:b4:0a:ab:6b:e0:dc:b0:b4:e7:
8f:2a:9a:81:5e:54:71:89:43:8b:f7:20:f8:03:a9:
6a:4b:fd:7f:cc:42:01:57:21:49:cb:91:57:16:5f:
80:f5:8b:b7:22:73:3d:23:b6:33:c7:92:2f:80:80:
03:02:3b:b1:09:be:a5:1d:13:91:0c:75:0f:53:e3:
50:6f:55:b4:fe:56:57:b3:07:ad:a5:48:f1:8e:63:
71:03:b3:20:e9:67:3a:ef:ee:ce:78:8c:f8:56:48:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9E:37:6A:E3:38:B8:0A:80:BC:A5:77:7F:F0:26:E0:4C:33:D7:47
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/yZ43auM4uAqAvKV3f_Am4Ewz10c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.240.0/21
Signature Algorithm: sha256WithRSAEncryption
20:a6:3a:0e:4f:51:62:a8:21:31:ea:f5:ba:04:50:57:d4:e9:
ba:ab:75:3f:5f:3d:2c:13:06:fa:ae:6d:93:8b:e2:81:eb:97:
4b:ca:86:b9:45:ac:e8:03:92:93:b5:fa:1f:9e:73:01:b7:32:
30:d7:10:d9:65:d0:56:4a:da:09:e2:e3:e3:eb:ce:c4:cc:f1:
74:41:03:b6:3e:e6:0b:3e:26:10:f2:88:68:44:99:7c:7f:7e:
30:2d:f0:ba:60:c5:55:cc:e3:5b:60:44:ed:a0:a7:c7:6a:e1:
d3:e1:51:bb:94:10:57:d5:f7:87:d8:c9:26:2d:09:1b:3a:46:
ba:02:43:af:72:51:57:82:52:a9:72:5c:d5:1a:19:30:22:8e:
52:4e:dd:ae:bd:f6:c8:ff:44:c6:c5:1d:fe:8b:cc:eb:28:c6:
44:98:5a:c2:43:18:62:8a:02:a8:22:24:fb:48:06:3f:16:d8:
59:76:ce:7f:db:37:0c:24:a4:99:85:78:28:aa:31:7a:c6:8a:
80:a1:b7:55:66:6b:53:18:2d:da:fe:be:43:4e:71:82:76:57:
9d:11:6e:b7:f4:fc:9e:ef:6f:c9:b1:d7:dc:ca:e1:18:51:2a:
6d:53:48:60:1b:ea:4f:4a:90:07:eb:b7:7f:49:7d:f3:ec:b9:
46:f3:06:d0
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMjA5MTUw
MjM3MTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEM5OUUzNzZBRTMzOEI4
MEE4MEJDQTU3NzdGRjAyNkUwNEMzM0Q3NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHWP0BTxX/xa7LvlH4x3Dx38uWNOAeOS5kvumWYQBBBSBWfaDz
NAdRn5wLNfrMfip398fss8QdmarazXl/iHD7+mzGGRC4LnPXantQAXBz7p+yBYCn
i49oor7vLUj/LCyTY3W+fs90KQPExfZo9iI8jVJ4Gp0nU3nZPmGI0bzuqPGXE11p
FNkVzTxa2tsdKdKjO12d5lOQF9ldPbQKq2vg3LC0548qmoFeVHGJQ4v3IPgDqWpL
/X/MQgFXIUnLkVcWX4D1i7cicz0jtjPHki+AgAMCO7EJvqUdE5EMdQ9T41BvVbT+
VlezB62lSPGOY3EDsyDpZzrv7s54jPhWSFy/AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUyZ43auM4uAqAvKV3f/Am4Ewz10cwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgveVo0M2F1TTR1QXFBdktWM2ZfQW00
RXd6MTBjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAxtg8DAN
BgkqhkiG9w0BAQsFAAOCAQEAIKY6Dk9RYqghMer1ugRQV9Tpuqt1P189LBMG+q5t
k4vigeuXS8qGuUWs6AOSk7X6H55zAbcyMNcQ2WXQVkraCeLj4+vOxMzxdEEDtj7m
Cz4mEPKIaESZfH9+MC3wumDFVczjW2BE7aCnx2rh0+FRu5QQV9X3h9jJJi0JGzpG
ugJDr3JRV4JSqXJc1RoZMCKOUk7drr32yP9ExsUd/ovM6yjGRJhawkMYYooCqCIk
+0gGPxbYWXbOf9s3DCSkmYV4KKoxesaKgKG3VWZrUxgt2v6+Q05xgnZXnRFut/T8
nu9vybHX3MrhGFEqbVNIYBvqT0qQB+u3f0l98+y5RvMG0A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:06 2024 by rpki-client on console-ams.rpki-client.org