Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/yeKuBJY-M8-GifXFrQ0zMzx5X-c.roa
File: yeKuBJY-M8-GifXFrQ0zMzx5X-c.roa (raw, json)
Hash identifier: Z8n1I0Phud0MBQQ6a2tjGgTt+lOxi67Q7QPBwzU/Bqs=
Subject key identifier: C9:E2:AE:04:96:3E:33:CF:86:89:F5:C5:AD:0D:33:33:3C:79:5F:E7
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0B08
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/yeKuBJY-M8-GifXFrQ0zMzx5X-c.roa
Signing time: Thu 16 Dec 2021 06:40:57 +0000
ROA not before: Thu 16 Dec 2021 06:40:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17809
IP address blocks: 182.155.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2824 (0xb08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Dec 16 06:40:57 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C9E2AE04963E33CF8689F5C5AD0D33333C795FE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:a0:b4:47:3f:1c:eb:66:08:11:e0:ea:49:
88:35:53:14:17:b2:77:c4:35:ca:24:9e:8b:f1:a4:
ac:95:dd:bf:a5:f0:ab:8f:50:a4:56:37:2b:1a:c6:
35:b8:7f:1f:75:51:f3:33:de:48:c0:33:7c:73:51:
da:56:cb:68:72:23:d6:05:19:94:e2:c5:0f:ca:b0:
79:87:86:e6:f6:2e:b0:98:f1:9d:dc:76:b8:50:ac:
62:f8:b2:3e:c8:6d:d6:fd:6e:27:a6:f0:95:b3:f9:
fb:28:65:e7:0a:4f:60:13:b6:ce:9e:e6:88:0b:b0:
81:e5:2e:b0:44:74:a6:29:71:36:85:d6:94:64:eb:
a0:68:1f:ae:56:99:90:f7:fc:4b:41:68:19:9b:57:
28:3f:60:64:0a:14:16:a8:36:6c:3e:9c:34:33:6e:
2f:94:38:92:84:ea:97:bc:46:3c:05:cc:a1:26:5c:
92:1a:4e:82:d5:2c:65:17:68:63:43:15:7a:2a:e7:
bb:a0:5a:78:43:ba:f4:4d:77:77:54:b1:54:81:92:
86:3c:73:ee:24:fa:c8:58:72:df:f5:0d:83:67:56:
6a:c7:c9:f7:2c:d9:7e:fb:71:30:60:d0:b9:e6:ca:
99:f2:88:9c:18:d1:97:d4:48:2f:cf:8b:1b:21:99:
95:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E2:AE:04:96:3E:33:CF:86:89:F5:C5:AD:0D:33:33:3C:79:5F:E7
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/yeKuBJY-M8-GifXFrQ0zMzx5X-c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.0.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:83:fc:67:d9:20:a3:13:16:57:63:57:03:8d:ae:bf:73:e9:
74:81:7b:56:c3:8a:d2:d2:94:8a:f4:e3:1e:1a:2b:4c:8f:68:
62:b9:a7:0d:00:8c:f0:07:11:33:fd:9e:eb:69:eb:4c:9c:f1:
55:d6:56:83:78:93:1b:f1:40:72:06:4a:22:fc:c7:ad:b3:5d:
97:86:53:f0:93:95:b1:9d:41:97:42:0b:11:c6:95:2d:39:39:
89:01:62:c8:8f:ba:25:4c:ce:97:ae:ff:29:3a:e0:f8:20:27:
eb:cf:93:71:90:7f:e8:55:b7:44:a6:27:d7:72:3d:36:56:6a:
49:91:e9:b8:6f:c0:c7:08:b8:93:ec:5f:f6:57:fb:6a:98:f3:
ce:fb:04:22:d9:d9:8a:ba:6d:9c:c8:ca:39:6d:c4:d1:da:56:
0c:91:46:34:07:dd:16:0c:d1:8a:00:ac:3a:8f:fe:ad:b6:de:
b6:ef:7c:16:52:c1:e3:42:45:58:3c:1e:7b:03:1f:83:0e:16:
3f:5a:83:6f:33:a8:10:8c:d6:cc:0e:c5:40:fc:ea:cf:32:5d:
c4:18:d1:fb:24:12:fe:d2:87:56:47:07:de:d3:51:dd:6e:ec:
0b:d2:af:34:ce:85:45:db:75:64:ff:93:70:7b:2b:02:b3:d8:
e5:29:8c:87
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCwgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMTEyMTYw
NjQwNTdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEM5RTJBRTA0OTYzRTMz
Q0Y4Njg5RjVDNUFEMEQzMzMzM0M3OTVGRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCb9aC0Rz8c62YIEeDqSYg1UxQXsnfENcoknovxpKyV3b+l8KuP
UKRWNysaxjW4fx91UfMz3kjAM3xzUdpWy2hyI9YFGZTixQ/KsHmHhub2LrCY8Z3c
drhQrGL4sj7Ibdb9biem8JWz+fsoZecKT2ATts6e5ogLsIHlLrBEdKYpcTaF1pRk
66BoH65WmZD3/EtBaBmbVyg/YGQKFBaoNmw+nDQzbi+UOJKE6pe8RjwFzKEmXJIa
ToLVLGUXaGNDFXoq57ugWnhDuvRNd3dUsVSBkoY8c+4k+shYct/1DYNnVmrHyfcs
2X77cTBg0LnmypnyiJwY0ZfUSC/PixshmZWFAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUyeKuBJY+M8+GifXFrQ0zMzx5X+cwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgveWVLdUJKWS1NOC1HaWZYRnJRMHpN
eng1WC1jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbabADAN
BgkqhkiG9w0BAQsFAAOCAQEAqoP8Z9kgoxMWV2NXA42uv3PpdIF7VsOK0tKUivTj
HhorTI9oYrmnDQCM8AcRM/2e62nrTJzxVdZWg3iTG/FAcgZKIvzHrbNdl4ZT8JOV
sZ1Bl0ILEcaVLTk5iQFiyI+6JUzOl67/KTrg+CAn68+TcZB/6FW3RKYn13I9NlZq
SZHpuG/Axwi4k+xf9lf7apjzzvsEItnZirptnMjKOW3E0dpWDJFGNAfdFgzRigCs
Oo/+rbbetu98FlLB40JFWDweewMfgw4WP1qDbzOoEIzWzA7FQPzqzzJdxBjR+yQS
/tKHVkcH3tNR3W7sC9KvNM6FRdt1ZP+TcHsrArPY5SmMhw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:35 2024 by rpki-client on console-fra.rpki-client.org