Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DDHiURB8IYMmv2VmmwHYhe8DzQU.roa
File: DDHiURB8IYMmv2VmmwHYhe8DzQU.roa (raw, json)
Hash identifier: 5ZSETlFF0wOVXy2+MCnXR0dkn09cPhTQnUdr8hmB/lA=
Subject key identifier: 0C:31:E2:51:10:7C:21:83:26:BF:65:66:9B:01:D8:85:EF:03:CD:05
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DDHiURB8IYMmv2VmmwHYhe8DzQU.roa
Signing time: Thu 15 Sep 2022 02:36:03 +0000
ROA not before: Thu 15 Sep 2022 02:36:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 122.254.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0C31E251107C218326BF65669B01D885EF03CD05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:ea:8d:49:a6:d9:7a:be:21:58:8c:01:52:
c3:22:98:7d:46:0a:8e:6b:8b:f2:45:76:d8:17:74:
ef:4c:74:0d:61:db:90:ae:11:08:29:54:c5:e8:a3:
1d:eb:c2:af:e2:75:20:a8:ec:68:64:85:4e:7a:7c:
b1:1a:4e:0e:7a:3d:07:fd:12:a3:f3:4e:eb:17:8d:
6a:e1:7c:ae:d0:ec:8e:65:f2:f2:90:38:e8:93:ac:
15:e5:ef:a6:26:bf:3c:37:85:0d:03:8c:6c:c9:ca:
6f:21:e6:bc:50:08:e1:f5:1b:e6:8e:d4:0b:47:d1:
3c:ff:eb:cd:1b:8a:ce:7e:d7:d4:9b:79:a2:a9:23:
b1:30:17:ad:1c:94:4d:07:40:34:32:57:c4:bc:08:
95:a3:72:da:3e:ef:29:22:e7:65:d8:ba:96:7e:c9:
5e:61:d2:50:62:75:1f:eb:ce:cb:3f:d0:a4:03:d4:
55:80:b6:b3:dc:7f:c5:de:dd:8a:16:02:b2:cd:55:
2f:5b:c2:e5:76:0a:0c:66:61:d4:2e:20:c2:6b:16:
76:fd:0d:6b:6e:a9:1c:d9:8b:90:6c:42:8c:e1:7c:
2f:76:f2:ab:7c:6a:4a:52:d3:98:d4:c4:82:8c:3d:
38:0d:c7:45:77:64:b8:41:f8:a9:66:63:05:28:66:
b7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:31:E2:51:10:7C:21:83:26:BF:65:66:9B:01:D8:85:EF:03:CD:05
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DDHiURB8IYMmv2VmmwHYhe8DzQU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:2a:28:9c:3a:14:a5:47:04:71:cd:df:1f:b8:24:ff:fd:c9:
e2:22:e9:1d:ba:09:48:28:b7:54:e3:8b:3b:51:34:3c:18:82:
a8:b1:69:eb:65:13:97:62:6f:ec:47:e8:fb:bd:cc:f3:ea:09:
2c:59:bc:17:c9:5c:ad:a8:c2:60:b5:b9:98:56:ca:af:79:66:
e1:74:4c:b3:58:81:73:95:33:0a:62:da:82:73:92:07:14:13:
5e:f3:7c:bb:66:99:a3:d5:fa:15:55:a0:4b:83:c7:3f:30:38:
a6:0e:b1:38:ed:e3:96:78:19:2d:28:74:9c:0d:d6:6b:ea:bb:
4b:42:70:2d:87:a8:d3:2d:45:78:f6:a7:45:ab:87:89:da:a9:
a6:ec:30:39:91:70:92:18:f0:42:ec:34:48:2c:24:3f:71:1c:
6f:e9:49:4c:72:07:7a:b8:db:82:f9:cc:73:3a:f2:5e:53:f2:
a7:e9:ba:e9:3b:3d:6c:8b:70:a6:cf:3e:42:69:db:69:0a:e2:
28:37:25:c2:89:f1:b3:04:38:ff:eb:fa:45:4c:93:ec:46:64:
e1:6b:a8:ef:e3:2c:61:ce:ee:0b:fa:27:17:ed:d9:51:da:80:
53:31:df:68:71:ff:1e:46:94:12:07:7a:3b:71:f2:ec:5c:33:
0f:bc:62:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org