Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/94KsxMRGNeXH55NXzyBE07EEr7U.roa
File: 94KsxMRGNeXH55NXzyBE07EEr7U.roa (raw, json)
Hash identifier: Goaut5oiz/MWwKJKnBXYq4IJZ/62RedHvw2RQC3sGIU=
Subject key identifier: F7:82:AC:C4:C4:46:35:E5:C7:E7:93:57:CF:20:44:D3:B1:04:AF:B5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F69
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/94KsxMRGNeXH55NXzyBE07EEr7U.roa
Signing time: Sun 07 Feb 2021 12:34:03 +0000
ROA not before: Sun 07 Feb 2021 12:34:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 122.254.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3945 (0xf69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:34:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F782ACC4C44635E5C7E79357CF2044D3B104AFB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:0d:4a:84:5d:25:72:50:8e:57:36:7e:a0:
e5:5e:d8:c7:8c:3d:6a:23:15:ed:37:76:57:07:7a:
18:2c:c4:90:9f:cf:60:b6:09:b6:57:01:7f:a2:fc:
a0:55:b1:fe:93:e7:39:63:86:df:65:05:bb:32:4e:
24:cc:4c:1d:8a:fa:05:cd:73:fd:9a:f6:5a:0b:02:
f3:1c:e9:75:2f:2a:7c:e6:46:f1:ef:24:5f:e6:fa:
3e:74:ec:b5:4b:5c:73:5d:a1:50:b2:47:31:a3:ce:
e6:bf:43:d5:d4:28:a6:4f:64:ba:b4:5e:8a:a6:cd:
f2:e6:0f:a2:49:9a:53:82:5b:63:d4:71:d3:03:ef:
57:c1:a3:63:7c:7d:c2:a1:e2:83:67:c4:8f:b4:07:
e1:a6:df:48:e3:a3:45:c0:b3:e9:78:e6:f3:64:4a:
6f:d8:f5:2e:1a:20:55:29:b8:58:98:6f:67:f3:55:
c8:ca:2e:99:b7:79:9f:5c:6a:2a:79:80:91:09:ff:
a4:5a:ca:5b:62:64:fe:da:bd:18:4e:a3:54:4f:10:
b2:85:57:98:c0:1d:d5:3d:03:83:ab:8f:f3:19:04:
49:c6:1b:a4:9f:64:a6:ba:64:61:a3:21:89:f0:3b:
88:bf:30:33:b8:30:3c:61:32:0f:21:d0:f2:0a:41:
c6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:82:AC:C4:C4:46:35:E5:C7:E7:93:57:CF:20:44:D3:B1:04:AF:B5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/94KsxMRGNeXH55NXzyBE07EEr7U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.56.0/21
Signature Algorithm: sha256WithRSAEncryption
74:a9:5f:f3:c5:12:5a:51:0f:de:85:7a:12:36:44:64:7e:1a:
01:e9:48:b5:0f:96:e0:da:a5:f8:b3:cc:61:76:2b:a5:aa:8c:
78:7b:4b:83:cc:be:10:15:63:ba:9b:ec:f9:a2:44:f2:0b:c0:
1e:7c:5d:fa:d6:0f:31:ca:7d:ee:94:d7:e4:ff:e1:2e:3e:5c:
21:db:23:86:a4:0f:70:77:3a:b2:87:7d:dd:39:73:18:17:c6:
75:3e:50:ff:2c:61:f0:65:18:a6:44:87:6d:9f:ce:14:da:b4:
1d:e8:74:9c:a5:76:f9:ac:6d:e9:53:65:75:fc:f1:79:bc:93:
16:24:d1:fb:b4:13:f4:f9:36:78:f6:4d:1d:a2:26:db:9c:7e:
eb:b0:40:66:4b:77:49:97:28:bb:a3:cd:4e:6e:28:6d:c6:97:
9e:f8:a5:53:fd:8a:89:ad:50:e8:05:5c:45:ea:52:84:0e:ee:
a6:46:57:aa:e2:27:cc:48:6d:fb:c2:b2:7b:4d:9d:cd:7c:da:
f7:0e:48:45:8a:04:4a:51:1d:26:a7:00:89:15:4b:b4:6d:87:
50:eb:19:38:2d:d3:d5:0a:9d:03:0d:db:50:87:34:a6:bc:16:
e2:3f:32:a5:ad:95:65:66:30:e4:9b:52:79:84:51:40:c3:6a:
d2:5b:3a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org