Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J-Hliz0OAOJ0MxrtFNcA8A5RVzQ.roa
File: J-Hliz0OAOJ0MxrtFNcA8A5RVzQ.roa (raw, json)
Hash identifier: fKVKKZcM7sqQESWVG5b3/9HJdTe/xgyMUeEqYMvnNlk=
Subject key identifier: 27:E1:E5:8B:3D:0E:00:E2:74:33:1A:ED:14:D7:00:F0:0E:51:57:34
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B92
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J-Hliz0OAOJ0MxrtFNcA8A5RVzQ.roa
Signing time: Tue 29 Sep 2020 10:08:35 +0000
ROA not before: Tue 29 Sep 2020 10:08:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 124.6.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2962 (0xb92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:35 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=27E1E58B3D0E00E274331AED14D700F00E515734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:48:5c:d8:e3:d5:e0:93:90:b1:6f:f7:c9:
5d:2e:7b:1c:07:f6:3f:c4:1c:4c:57:b3:c2:0a:25:
6a:79:63:3f:b6:b9:5d:36:80:7e:10:98:8a:3e:a1:
81:76:e7:5b:e4:28:e1:a0:2b:21:bc:35:e0:36:79:
60:17:ce:a2:ec:46:10:83:74:1e:4a:f1:af:94:ae:
0d:d9:6d:3c:83:fd:0c:ce:80:c2:11:ca:fb:62:c3:
7f:08:2c:bb:f5:21:7e:67:56:d5:88:1a:00:70:80:
b5:19:39:46:e3:6e:15:d2:a9:91:58:a4:55:b0:80:
44:ab:de:bf:25:6e:57:01:00:24:1f:e7:90:99:b6:
5b:27:16:bf:b3:7f:5e:35:63:fe:af:e2:cf:69:ac:
1c:69:6b:f4:b4:93:01:c7:37:f3:2d:bd:8e:94:3b:
3b:08:bb:e1:24:82:f5:3c:bc:57:5a:b0:b2:96:f1:
56:21:84:a5:5c:3c:4d:f3:5d:2d:e4:79:fb:5c:13:
65:65:42:28:90:3d:74:0a:1c:62:6a:fa:b2:0e:50:
2b:6c:35:1f:de:1a:56:ef:7e:88:49:8c:6f:f3:68:
80:80:59:72:f3:dd:88:01:5c:2f:ba:a8:f2:92:49:
04:dd:2b:2f:af:9c:f2:0b:8b:44:8b:b7:f0:cd:cc:
e6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E1:E5:8B:3D:0E:00:E2:74:33:1A:ED:14:D7:00:F0:0E:51:57:34
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J-Hliz0OAOJ0MxrtFNcA8A5RVzQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.0.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:6a:54:55:9b:1e:6c:3d:37:6b:88:3b:7e:ec:b8:3e:12:f2:
9d:9e:32:aa:43:2b:f1:ef:27:14:59:af:1d:98:fe:ef:61:eb:
fc:86:d9:b8:12:9a:5a:b3:53:d9:84:74:61:11:46:e0:94:d3:
27:94:e7:7d:e3:17:d3:0c:37:a5:85:73:55:1a:06:7c:a3:8a:
0a:aa:09:b7:fb:26:be:9e:26:78:1a:48:cd:ba:9c:4d:04:87:
47:81:a8:11:fe:bc:fe:58:61:ad:2f:b3:13:57:40:6e:a5:84:
86:90:71:1e:9c:d6:11:a9:e5:1f:42:8b:ed:e0:06:6b:d2:be:
c1:36:a7:5d:dd:f2:c5:af:62:b7:00:9e:66:e8:cd:5a:3c:a3:
f9:38:88:4c:18:66:36:de:bc:e2:6f:d7:bb:9e:80:b8:d0:98:
f9:8d:72:e9:4f:2d:5b:c6:8e:69:64:3f:77:7b:5f:d4:cb:f9:
e2:3f:9b:93:06:72:06:c9:70:e7:ba:06:e3:a0:c1:9f:62:90:
e1:9b:a8:db:fb:eb:c8:a5:a3:8e:f4:e0:d1:26:f2:60:89:c0:
56:f9:d2:53:ee:db:79:9d:ed:fa:15:d1:55:ac:6e:ee:ee:25:
51:15:79:1c:88:0a:20:9b:05:89:bb:d6:23:0a:86:33:76:63:
16:cd:07:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org