Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EGJapXE4PAN5m3IeKJIvO5yXqQ8.roa
File: EGJapXE4PAN5m3IeKJIvO5yXqQ8.roa (raw, json)
Hash identifier: 2h37eHSgW12nXs8wG3KB8BFINM7bLhN4uoT9DVMNo6k=
Subject key identifier: 10:62:5A:A5:71:38:3C:03:79:9B:72:1E:28:92:2F:3B:9C:97:A9:0F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1271
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EGJapXE4PAN5m3IeKJIvO5yXqQ8.roa
Signing time: Wed 29 Sep 2021 02:54:34 +0000
ROA not before: Wed 29 Sep 2021 02:54:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 124.6.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4721 (0x1271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:34 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=10625AA571383C03799B721E28922F3B9C97A90F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:3a:f4:05:ed:9c:d0:95:1f:ef:4c:14:f4:
ed:a9:91:c8:71:af:65:33:85:fa:be:94:f3:8c:24:
e6:30:fd:c0:95:6c:03:4b:5f:2f:4c:10:05:cb:1b:
7d:c9:ac:5e:83:70:76:e5:72:ad:55:77:79:b9:56:
48:b1:f9:18:f6:a9:59:aa:d4:e7:99:f7:2e:aa:f6:
77:24:8f:81:0d:e3:3c:31:5b:9c:8f:3c:e3:81:8a:
cd:26:88:fc:88:9a:de:76:8c:c5:e2:f3:8a:66:33:
39:7f:6f:4c:65:85:14:b7:ad:3f:4c:f5:31:5a:a5:
d2:28:86:7d:9b:0f:db:1b:66:0e:ac:a8:49:a3:d1:
d9:53:e5:97:90:90:cd:8f:75:e2:a7:16:f7:90:89:
56:7d:0e:8c:f9:14:a9:0e:8e:9a:53:35:be:8e:fa:
4a:2c:d8:ae:9c:15:e3:c2:c9:04:23:1b:d4:d2:66:
81:8d:55:71:5d:d8:15:99:62:e4:5d:1d:80:51:08:
0d:46:5b:93:63:b3:9b:ce:bf:6f:cd:8d:c4:66:57:
cd:56:20:0b:bf:81:03:32:98:ae:7f:43:df:fb:aa:
27:74:5f:0b:7e:b9:f6:eb:87:95:f4:ad:8e:b5:59:
06:5d:1f:e4:d2:24:20:58:e6:8c:b0:5d:08:6a:31:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:62:5A:A5:71:38:3C:03:79:9B:72:1E:28:92:2F:3B:9C:97:A9:0F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EGJapXE4PAN5m3IeKJIvO5yXqQ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.8.0/21
Signature Algorithm: sha256WithRSAEncryption
53:73:bc:77:0f:50:68:61:f0:a6:3e:fc:6e:10:82:a1:f5:c5:
fe:c8:7a:ed:88:b4:11:b2:07:88:36:50:94:78:db:d4:d5:fc:
88:ba:55:3a:e8:2b:4d:20:19:5e:5f:ff:ab:34:7f:bf:1f:dc:
40:38:c5:c8:2a:0a:71:3e:b0:bc:37:3e:d9:30:61:30:ed:be:
87:aa:09:40:37:a1:98:80:f4:04:21:fa:32:c6:76:50:bd:f0:
e2:1c:78:52:e2:3c:4e:4d:c5:e1:98:46:4a:59:78:c8:d4:32:
c5:41:5f:4a:72:77:2f:8c:56:9d:c5:54:e9:89:ba:a4:be:73:
2c:4e:1d:20:7f:c0:26:0e:8b:fb:13:54:de:be:3b:55:2b:bf:
78:c1:ab:04:e7:9e:14:1a:64:e5:98:c8:a5:b2:64:aa:8d:af:
93:48:0d:d2:e2:c7:6c:c0:38:d3:09:e7:84:55:fd:28:5c:80:
1f:27:25:08:d4:56:77:6f:a8:b4:0e:ad:89:f3:37:32:a0:bd:
7e:79:12:ac:5c:f9:8e:40:f2:a5:cb:2a:a8:3e:b4:00:30:01:
8f:40:55:cc:ca:48:6f:c3:46:21:bc:75:7c:d4:6c:5a:78:01:
fd:13:65:a4:54:4b:68:15:4a:63:ce:29:3c:4e:9c:7d:00:5f:
7c:01:09:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org