Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Lg0qFbEhqdLr398iVZoJoR0r0Sw.roa
File: Lg0qFbEhqdLr398iVZoJoR0r0Sw.roa (raw, json)
Hash identifier: VU7dJgY3CVDUDkG4wC4NkxtbCce9qtfdNe2ikNQeQyA=
Subject key identifier: 2E:0D:2A:15:B1:21:A9:D2:EB:DF:DF:22:55:9A:09:A1:1D:2B:D1:2C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18E0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Lg0qFbEhqdLr398iVZoJoR0r0Sw.roa
Signing time: Sat 22 Oct 2022 06:05:49 +0000
ROA not before: Sat 22 Oct 2022 06:05:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 122.100.126.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6368 (0x18e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2E0D2A15B121A9D2EBDFDF22559A09A11D2BD12C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:cc:e3:0e:0c:fe:93:2c:01:f1:82:8c:48:
27:36:0a:00:ad:32:93:1e:4b:7f:7c:72:0f:85:ee:
0b:46:4d:a3:d2:e8:0d:8c:2c:fa:43:dd:77:b4:93:
e6:54:0a:7b:bb:f3:ec:be:0a:1d:b6:10:c4:52:32:
09:a8:40:ec:4e:ce:e9:f1:a8:70:2e:e2:d0:f1:9d:
6c:d3:b6:2b:c0:72:c0:40:b1:21:cb:fe:af:41:3d:
5f:be:85:9b:a9:59:9e:3e:d5:ca:72:c6:19:ba:32:
7b:a9:08:6d:05:09:cb:af:5e:49:c6:d9:90:76:7f:
e0:87:bc:a8:ad:87:fb:27:25:1b:63:ce:31:71:d7:
12:59:a1:83:d0:d0:4f:cb:e6:78:42:4a:33:ac:ec:
a0:2b:5c:4c:5a:99:a6:9f:68:6f:67:d0:01:91:78:
a0:e4:80:4b:41:76:68:25:2c:2e:2a:84:34:9b:ec:
d5:ae:b6:4a:be:25:72:36:02:ff:49:ac:66:03:a4:
22:b8:cc:86:0c:cd:2d:2e:63:19:9a:5e:3d:51:61:
2e:ae:3a:ca:09:e1:c9:46:ca:dc:a6:2c:be:6d:60:
ec:ed:62:b7:ef:b7:cd:a4:a9:3f:f3:b7:d0:28:c3:
84:aa:23:18:22:70:27:61:c1:bb:2d:d9:8f:0b:2e:
6f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0D:2A:15:B1:21:A9:D2:EB:DF:DF:22:55:9A:09:A1:1D:2B:D1:2C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Lg0qFbEhqdLr398iVZoJoR0r0Sw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.126.0/23
Signature Algorithm: sha256WithRSAEncryption
00:7d:e1:79:a2:7f:d1:e4:91:c9:ed:ca:f4:0e:a7:01:b6:c5:
ae:8b:4e:af:0c:5f:34:16:23:7c:66:6a:85:00:74:45:80:6f:
e7:12:b1:0c:77:dc:28:92:26:6b:64:b2:26:58:de:bc:e9:e8:
4a:29:4c:a0:6e:6d:34:b5:1c:52:8e:90:9f:b0:38:c8:f7:dc:
17:df:cd:51:4d:65:91:72:15:96:61:a9:6f:1b:43:e0:95:76:
1f:2c:f0:47:85:45:b1:82:04:4d:df:02:f1:9b:98:ec:d6:b2:
f3:a7:c1:ed:8d:97:bf:da:1f:45:37:ce:6f:2c:df:02:a5:5a:
6f:53:d7:24:9d:71:ea:7f:9c:fe:ed:8d:28:4b:2d:b9:2c:f9:
5c:cd:bb:f0:ab:db:88:af:98:81:c8:ed:d2:f8:be:6e:98:6f:
02:a3:51:58:f2:1d:f6:4f:b5:07:db:a1:6f:69:5c:4c:3f:de:
c8:2b:69:dd:e8:d6:ad:95:68:86:86:a8:43:7c:c3:41:83:23:
c5:f2:cd:5f:7e:53:56:fe:95:8b:71:59:66:b1:26:6a:50:93:
4f:7c:a9:b4:de:59:d8:71:83:44:41:54:42:61:a5:24:b0:8f:
a1:ed:56:36:b4:6b:92:3e:08:3c:90:f1:15:7a:b3:f5:57:76:
f1:3e:b1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org