Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/68XpQtHmK2d1brF15JSb2_tzsXY.roa
File: 68XpQtHmK2d1brF15JSb2_tzsXY.roa (raw, json)
Hash identifier: 5VF73UGTSfZVKLaPgC8rCUCaLsnf+09GcyKdJ8Dcirg=
Subject key identifier: EB:C5:E9:42:D1:E6:2B:67:75:6E:B1:75:E4:94:9B:DB:FB:73:B1:76
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1942
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/68XpQtHmK2d1brF15JSb2_tzsXY.roa
Signing time: Sat 22 Oct 2022 06:06:17 +0000
ROA not before: Sat 22 Oct 2022 06:06:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 123.0.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6466 (0x1942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EBC5E942D1E62B67756EB175E4949BDBFB73B176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:b0:1c:e7:97:47:51:69:39:cd:12:be:08:
cd:b8:20:0f:ce:a9:76:fe:14:4a:13:f7:85:d6:64:
ea:1f:dc:e0:8f:f5:0a:b1:68:7e:97:94:cc:4c:73:
f6:b2:26:93:03:db:c0:12:75:f9:63:df:89:1a:12:
c9:1f:31:a8:b1:38:1c:a0:eb:93:e8:2b:ca:b7:dd:
27:59:93:08:85:c6:ac:43:d3:0b:02:00:34:d8:a0:
8b:64:b6:be:74:32:79:1b:c2:35:6e:53:09:56:f5:
32:f6:e0:35:9e:8a:37:ee:ac:9f:9c:d1:3d:02:0d:
20:1a:7f:74:97:38:d9:14:5c:b9:57:cc:30:8a:2e:
6c:b8:bb:76:61:33:5b:02:01:01:46:64:41:aa:8a:
a8:64:63:4a:4c:cd:96:36:ed:8f:aa:79:99:19:21:
03:3a:00:9d:57:7c:d6:de:52:b9:ba:3d:f4:38:18:
b8:eb:d0:33:70:9a:0b:35:c2:dc:b4:ea:b1:17:63:
c9:e4:c8:3a:dc:a1:27:9f:db:6c:aa:49:94:8a:7c:
11:9a:42:59:31:58:c3:15:d7:76:c5:f7:0b:63:71:
75:3a:f6:14:05:0b:02:55:c5:c3:39:c7:5d:d6:46:
3e:16:f6:b6:99:6b:69:b3:f4:50:e4:c7:43:0b:3a:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C5:E9:42:D1:E6:2B:67:75:6E:B1:75:E4:94:9B:DB:FB:73:B1:76
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/68XpQtHmK2d1brF15JSb2_tzsXY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.44.0/22
Signature Algorithm: sha256WithRSAEncryption
56:51:80:a3:ad:b9:4a:ed:6e:42:5d:f6:0f:fe:36:c7:22:b7:
21:85:71:63:fa:9f:87:8c:0b:d7:0a:2d:1d:5c:72:4e:29:28:
8f:fd:27:1e:8a:59:1a:2c:33:55:2a:2a:62:7c:bb:6d:65:28:
1f:8f:a3:39:40:14:dd:48:1c:05:be:2a:6f:32:2c:ee:19:bd:
92:5c:8d:09:d9:52:fe:d2:3f:06:09:9f:d2:cf:b3:06:f2:d0:
f1:14:5c:c9:b9:23:57:d8:92:28:39:59:85:78:12:38:ec:cd:
f5:2c:b8:69:4b:2b:db:92:c1:ed:6c:e8:94:74:a6:f6:1f:44:
f6:fc:4f:9b:83:1b:35:f4:24:7d:5c:3c:19:32:3f:80:3e:89:
6b:f4:e7:7c:75:b0:30:b0:1f:bf:4f:29:27:67:53:cb:45:e9:
40:28:32:48:88:eb:e2:0b:50:bd:51:e8:5f:0a:96:e9:58:5a:
fd:2b:8a:9c:c7:a5:3f:ec:77:b4:c7:fc:87:d4:c5:24:24:fc:
1f:ee:a2:7c:5d:94:04:cd:c7:d6:cb:af:d7:84:65:97:16:38:
29:09:fd:58:af:8c:63:24:34:cc:3a:c5:18:3e:c1:01:4c:54:
f1:9c:a4:cf:e7:fe:b7:04:36:8a:b3:e5:8f:76:c8:d1:0b:07:
40:33:b2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org