Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ASgtL5bai16h2txw1LvMfx5ZCPE.roa
File: ASgtL5bai16h2txw1LvMfx5ZCPE.roa (raw, json)
Hash identifier: CbCaSgIYkcAaKX3LH0+tyOxpDa6lanq9Iz2k/QBioik=
Subject key identifier: 01:28:2D:2F:96:DA:8B:5E:A1:DA:DC:70:D4:BB:CC:7F:1E:59:08:F1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 133A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ASgtL5bai16h2txw1LvMfx5ZCPE.roa
Signing time: Wed 29 Sep 2021 02:55:30 +0000
ROA not before: Wed 29 Sep 2021 02:55:30 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4662
IP address blocks: 123.0.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4922 (0x133a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:30 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=01282D2F96DA8B5EA1DADC70D4BBCC7F1E5908F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:1c:81:b6:05:ae:be:cb:24:56:71:d4:77:
af:54:f7:99:bc:f4:1b:64:56:c7:e8:86:9d:ab:ee:
85:bb:7c:7e:8c:6c:89:f2:60:16:ea:2b:30:3c:74:
e0:9a:29:bf:72:5c:6c:44:8d:8d:25:56:c6:3a:5c:
79:09:a1:d4:b8:35:d2:ae:2c:d8:88:0d:45:6d:db:
e1:6c:43:16:01:59:14:5e:69:a4:90:14:a9:4f:54:
df:fe:85:55:49:ee:19:21:82:a1:3b:7e:e1:a9:9f:
8a:71:49:43:ec:51:8e:d1:56:f5:9e:e9:17:b7:e3:
cd:d1:d3:f2:1d:aa:f1:35:36:da:dd:41:63:9b:58:
39:81:5f:e3:01:62:49:cc:d2:4a:84:b9:76:5f:9a:
2f:ca:68:05:5b:0d:8a:39:34:23:4b:f7:65:dd:1a:
b8:dd:e8:c2:1c:75:d1:df:29:8a:83:82:6a:ee:2b:
5b:bf:a0:0b:7c:3e:f4:8a:33:7b:d4:95:44:f1:d5:
1f:b9:ea:da:b6:1c:a2:d3:dd:7d:54:66:65:79:d9:
ed:86:87:29:5c:1d:a5:b0:98:36:ae:b0:3b:ac:81:
7d:6e:80:a3:55:f4:22:f6:04:d0:6f:c5:c3:fc:c1:
f3:89:97:9f:32:a1:51:6c:b7:c5:f0:bf:25:4c:05:
20:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:28:2D:2F:96:DA:8B:5E:A1:DA:DC:70:D4:BB:CC:7F:1E:59:08:F1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ASgtL5bai16h2txw1LvMfx5ZCPE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.32.0/19
Signature Algorithm: sha256WithRSAEncryption
31:11:fb:f1:5e:f8:76:17:10:3e:f6:f5:8b:ed:ef:cc:52:24:
cc:5c:99:80:4f:9a:c8:6a:cf:b1:9e:5c:9b:0c:2f:02:00:84:
5e:16:b8:c8:39:e3:ee:85:99:3c:3f:2b:a5:39:84:6d:22:4e:
13:96:57:65:1e:37:4c:fd:84:3c:36:51:ef:ce:e5:e2:03:98:
10:ad:f4:97:12:a7:31:fe:3f:a8:ec:e4:a6:5d:b7:07:3a:1b:
af:b6:61:7e:06:59:fc:25:f2:dd:50:16:d6:0e:7f:b1:4a:8d:
ff:01:50:9d:c2:0b:de:10:b8:43:38:15:c6:ff:b1:38:37:a7:
ca:bc:8a:e3:76:35:77:e6:34:19:bb:f8:83:c0:e4:0c:ca:35:
af:c9:dc:88:b1:13:58:23:bd:08:46:0d:b9:ab:58:3a:6f:37:
ab:f6:ac:48:90:7d:14:4a:02:8b:c7:2a:20:10:06:23:e6:1d:
1f:c2:0a:66:03:a8:21:9f:63:f6:9a:ad:49:d9:3d:92:5d:ff:
db:66:4e:95:75:7e:28:87:83:5f:d6:79:c6:9d:19:1f:bf:3a:
ab:2f:a5:81:08:7d:de:79:5f:99:db:1d:34:e0:79:98:e2:64:
57:05:4b:c1:87:56:92:25:20:f1:d8:d0:6b:cd:3a:a8:bd:82:
f9:14:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org