Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3D4LvpFb74_nW_wlGHojsfs3UMg.roa
File: 3D4LvpFb74_nW_wlGHojsfs3UMg.roa (raw, json)
Hash identifier: WwnSGcv+91vPad95oJ8fxF7zyE2NZtt0Xz/9OIx9O6Q=
Subject key identifier: DC:3E:0B:BE:91:5B:EF:8F:E7:5B:FC:25:18:7A:23:B1:FB:37:50:C8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F57
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3D4LvpFb74_nW_wlGHojsfs3UMg.roa
Signing time: Sun 07 Feb 2021 12:33:46 +0000
ROA not before: Sun 07 Feb 2021 12:33:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 122.100.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3927 (0xf57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:46 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DC3E0BBE915BEF8FE75BFC25187A23B1FB3750C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:c2:45:af:68:59:38:72:5b:66:8f:ab:40:
f0:7e:1b:f9:a9:57:87:ec:a9:94:d3:43:aa:3c:17:
64:d5:e9:31:4a:4e:0e:86:0a:08:89:77:c6:ce:18:
7c:fd:4d:62:6c:68:18:73:28:e2:5e:99:d4:ad:73:
4e:db:4a:d8:a3:f1:f7:15:69:00:ff:6a:df:49:4e:
53:ba:f3:1a:00:88:2e:f9:bd:53:5a:48:bc:31:dc:
5b:d0:d4:82:bf:c2:d9:50:77:1e:ba:6e:42:fa:7d:
01:33:29:c7:03:37:13:78:63:bf:95:53:63:10:a0:
20:88:b0:fb:16:0e:cd:57:87:ce:36:16:19:74:6d:
78:63:f0:63:de:b2:07:fc:2d:65:e2:e4:cb:b6:d2:
3e:5b:5f:53:77:4d:cc:a3:fc:32:5e:04:80:5f:d6:
e7:a1:68:f2:67:29:01:07:41:cf:ca:dc:b7:88:9b:
38:46:f3:b1:9d:70:c1:28:a0:14:54:66:e4:2f:98:
bd:37:a3:d7:ce:df:6b:e2:0c:05:81:57:fd:2d:1c:
23:2b:50:95:1a:56:50:7e:19:99:d7:c9:a0:8f:ab:
69:b4:fe:1d:15:ff:45:1e:6f:15:35:9c:70:ba:8b:
c1:a4:ee:25:a3:60:d0:9e:39:0b:3e:ed:a1:fe:c1:
4e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3E:0B:BE:91:5B:EF:8F:E7:5B:FC:25:18:7A:23:B1:FB:37:50:C8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3D4LvpFb74_nW_wlGHojsfs3UMg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:9f:c5:db:dd:16:23:a1:bb:01:20:4e:db:36:d2:07:27:c8:
2f:62:42:80:28:9c:71:b1:be:9b:f0:73:02:d5:5c:35:3b:ab:
d8:05:30:1e:c0:3f:06:4c:91:e5:6e:b0:af:3b:12:bf:ed:c8:
d0:1f:ce:ff:05:ae:eb:08:3b:a6:bc:0b:2b:91:77:bd:66:c4:
a5:06:bb:86:ac:7d:a4:01:df:43:34:ae:9d:a0:a8:5d:45:77:
08:3b:b9:78:7c:14:ff:cb:2f:cd:e5:63:bd:56:52:3b:06:68:
78:db:a5:84:44:ba:c5:0c:cf:00:90:b4:19:75:64:95:7f:22:
e2:31:b7:2d:52:06:9d:92:35:20:b9:7a:03:0c:7c:cc:af:0b:
a0:ca:67:bb:d4:b3:ed:e4:70:fd:35:05:f9:35:fb:28:01:1e:
81:4c:ef:41:78:13:bd:eb:ad:79:14:be:41:4e:63:f7:86:a1:
c3:67:61:fa:96:78:34:22:9f:15:e8:ce:f6:e7:7f:c8:a4:07:
12:1c:d8:00:30:31:3f:85:d4:64:56:74:9b:cb:03:b2:a3:7e:
be:f0:67:5e:90:35:da:92:b2:25:7a:90:e7:7e:fe:cc:29:a6:
56:a6:a5:0d:df:b4:94:0c:e1:cb:5c:6d:1d:f3:6d:b9:6b:b8:
78:63:28:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org