Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MT4fjyNvruCfSWkbthBPVqk8xyQ.roa
File: MT4fjyNvruCfSWkbthBPVqk8xyQ.roa (raw, json)
Hash identifier: SWuyfVxP9ciiD8vVpNU3SNkyoVJOX25vewBLL/61cFI=
Subject key identifier: 31:3E:1F:8F:23:6F:AE:E0:9F:49:69:1B:B6:10:4F:56:A9:3C:C7:24
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B3B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MT4fjyNvruCfSWkbthBPVqk8xyQ.roa
Signing time: Tue 29 Sep 2020 10:08:10 +0000
ROA not before: Tue 29 Sep 2020 10:08:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 124.6.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2875 (0xb3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:10 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=313E1F8F236FAEE09F49691BB6104F56A93CC724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:5d:c5:5a:2c:7b:93:b4:0f:2b:b4:ad:40:
4c:dd:29:d7:0f:f3:5a:51:2e:14:f4:a5:e7:38:16:
f0:41:d8:0e:c1:51:60:fa:f3:f0:a3:ba:d8:75:f9:
8e:a9:37:a1:f1:1f:66:24:4c:37:b4:0d:ec:04:2c:
99:7f:02:05:7d:76:6e:ce:26:b3:40:13:22:f2:9a:
6f:cb:c3:91:8a:ab:52:8f:7b:04:e6:62:02:a0:a8:
71:fb:3a:48:43:38:7e:bd:3d:bb:93:d7:7a:46:5b:
ed:e4:52:8c:3e:28:7f:94:65:5c:e7:0c:60:c5:8b:
40:3e:22:0f:5a:ef:da:9a:c3:bf:3c:15:8e:08:a6:
f6:d4:00:aa:aa:64:a1:ae:7b:64:a1:20:f1:69:ea:
24:9e:cd:88:a7:9e:f9:89:f1:b6:aa:98:ce:0a:fc:
41:80:30:3f:1e:44:26:51:73:c0:4f:fe:4a:b8:8d:
03:4f:d4:9a:d7:10:ce:5b:0f:ea:a6:f0:af:57:6b:
55:c1:7b:2e:5a:eb:b4:e4:8b:af:63:4a:cf:06:51:
6b:67:1c:60:33:b9:a1:ba:e5:c1:36:7d:6e:7b:39:
42:bb:18:43:45:b1:c4:9b:5c:1a:92:ae:d9:14:16:
eb:ca:a6:5e:32:81:09:90:17:01:1d:a9:9b:5f:97:
ce:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3E:1F:8F:23:6F:AE:E0:9F:49:69:1B:B6:10:4F:56:A9:3C:C7:24
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MT4fjyNvruCfSWkbthBPVqk8xyQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.24.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:13:ad:e9:2c:3f:bc:75:23:98:fe:b9:48:e6:cf:2a:e1:1f:
f2:97:bc:49:83:29:71:1c:74:97:4f:24:38:89:e6:73:9f:d0:
ce:f2:42:ee:0f:d7:7e:c3:7b:6d:f6:83:cc:49:11:4f:b1:19:
1b:55:cc:2f:04:4e:72:f1:51:df:d8:2f:58:61:0f:68:52:58:
ea:cb:9f:67:53:a3:00:77:86:66:3b:9a:46:23:6e:92:9b:c8:
26:c1:f2:11:ec:e3:84:f5:dc:d3:31:d7:58:ec:f2:dc:2c:30:
ec:72:c2:dc:cc:c3:c4:4b:f2:02:83:dd:0a:e8:3a:6a:1a:6f:
46:9b:50:a9:ba:e3:ff:7f:e4:4e:d8:05:97:be:6f:96:58:4a:
76:5a:f7:2e:f9:73:2e:3c:fb:d8:08:50:d1:6c:aa:2f:db:b2:
04:de:a4:ee:eb:70:06:ca:1f:62:47:2a:2b:06:41:fa:3b:14:
18:ba:3e:2a:d1:38:b8:99:84:66:ae:5b:dd:60:67:8b:ea:c8:
77:02:c2:0e:2b:6b:70:8d:e2:9c:f5:95:a8:3a:90:94:2c:67:
b4:79:34:75:b3:ed:f1:6b:a9:ff:bc:7a:e2:c7:0a:53:e1:e9:
04:1d:8a:9a:03:cd:8d:80:83:6a:3b:4e:45:26:76:a6:38:71:
d8:29:eb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org