Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4euB40rZN14_1GeivGi-2vDAjhQ.roa
File: 4euB40rZN14_1GeivGi-2vDAjhQ.roa (raw, json)
Hash identifier: SzGsrPto1SlaNxIOfyRCWKgrmDLlOPNOm764K6k6UgM=
Subject key identifier: E1:EB:81:E3:4A:D9:37:5E:3F:D4:67:A2:BC:68:BE:DA:F0:C0:8E:14
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F4B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4euB40rZN14_1GeivGi-2vDAjhQ.roa
Signing time: Sun 07 Feb 2021 12:33:35 +0000
ROA not before: Sun 07 Feb 2021 12:33:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 122.100.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3915 (0xf4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:35 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E1EB81E34AD9375E3FD467A2BC68BEDAF0C08E14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:a6:2a:d5:f4:6d:a3:74:49:b9:a6:e4:51:
2f:34:6d:1d:e3:dc:ac:7c:32:1b:22:59:d4:f2:63:
51:73:be:84:dd:9d:25:45:22:9b:14:18:5c:6f:72:
ba:78:11:d2:b4:39:55:5d:52:70:0e:5e:41:b0:20:
55:52:cc:c9:86:f0:22:b6:c7:02:2e:6f:07:5a:f0:
c0:ba:ec:f5:cb:c5:8d:a7:1f:bf:f7:35:eb:da:d6:
1e:5e:99:a4:30:6b:e3:e2:19:01:c6:ff:b0:2f:c1:
d5:96:4c:40:61:c2:c7:3f:3f:a9:f4:21:9a:12:ae:
e3:33:33:37:df:29:3e:8a:7c:67:3a:69:48:11:08:
96:14:3e:6b:07:8a:45:bf:00:42:e0:a1:f5:fc:29:
66:af:2c:f0:7f:35:0f:80:9d:cc:32:c8:f2:c8:52:
ec:09:ba:78:ee:2d:03:70:76:f5:77:1b:fa:fe:07:
44:4f:bf:c8:57:dc:30:9f:e8:72:91:e5:89:1b:10:
a9:bd:0c:6a:78:cc:19:ea:38:0e:8b:46:a0:a6:73:
9a:97:23:c2:36:26:b5:50:fe:70:be:ed:8b:02:52:
e4:db:77:20:b0:c1:5a:4a:aa:8b:af:66:d5:ba:93:
02:43:28:fc:fc:27:f3:6f:79:24:03:50:81:ef:fa:
3a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EB:81:E3:4A:D9:37:5E:3F:D4:67:A2:BC:68:BE:DA:F0:C0:8E:14
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4euB40rZN14_1GeivGi-2vDAjhQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.64.0/21
Signature Algorithm: sha256WithRSAEncryption
11:de:69:89:10:c1:e0:79:54:2b:a9:a1:13:61:25:29:16:f9:
7b:c8:52:9b:93:2f:89:39:9c:12:c2:a1:11:4b:34:6d:7f:0c:
98:9b:b7:67:2d:fe:1b:db:b1:c3:4a:ea:d7:8c:ab:72:0a:83:
82:6f:f0:a7:f0:13:6c:f6:2b:9f:13:2d:33:ed:00:7d:e0:67:
b2:f8:cc:98:c5:6e:11:74:64:6e:8a:e4:6a:74:07:e8:e6:50:
19:d4:d3:df:ca:32:46:ad:ab:14:f4:c5:b1:cf:d7:55:16:48:
3c:6a:bd:61:79:4a:98:d5:0f:c4:d3:f9:cb:50:e7:00:c7:37:
60:f0:1c:20:36:2f:b2:29:d5:7a:04:c1:f9:b7:3e:f0:fb:84:
c0:b2:72:47:01:a0:b3:a8:e9:97:5b:c6:fa:27:e0:ea:8e:50:
be:ff:08:ba:9e:28:a0:41:40:91:37:6f:83:51:a1:36:34:af:
ba:69:e2:50:31:5c:19:4a:aa:d5:7c:36:34:72:51:99:5d:23:
bd:ea:50:13:09:03:f0:eb:ed:1a:f6:e0:f1:5a:f0:0f:48:2e:
a7:dd:04:09:47:64:f1:f8:7f:31:28:b6:88:1e:9a:97:90:7a:
f6:be:e4:94:fb:6a:63:81:a2:99:6c:2c:8d:67:25:e5:42:a4:
30:3d:ee:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org