Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/O7XFXlJZBqc3H_6PL91td7sqjqk.roa
File: O7XFXlJZBqc3H_6PL91td7sqjqk.roa (raw, json)
Hash identifier: NbpL9/6hkHwETbJ3JWzQotQZqDO+eLdfhZ+U14ZZGmw=
Subject key identifier: 3B:B5:C5:5E:52:59:06:A7:37:1F:FE:8F:2F:DD:6D:77:BB:2A:8E:A9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BC9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/O7XFXlJZBqc3H_6PL91td7sqjqk.roa
Signing time: Tue 29 Sep 2020 10:08:50 +0000
ROA not before: Tue 29 Sep 2020 10:08:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 122.100.126.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3017 (0xbc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3BB5C55E525906A7371FFE8F2FDD6D77BB2A8EA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:2d:68:8e:a8:00:c0:84:1d:79:e7:8a:dc:
18:1c:4b:bf:4a:37:7b:7c:97:cd:f8:44:0f:bc:02:
d5:4e:9d:5e:ee:bb:8c:5e:41:77:9f:91:a0:2e:22:
8a:2a:30:61:ae:c6:9b:4c:64:9d:37:d6:ca:73:92:
59:6d:9e:87:60:7d:84:70:b0:01:5b:e0:c3:da:6a:
32:53:27:e3:42:d7:c5:01:94:80:07:ba:72:6b:cd:
13:11:22:72:c6:1d:09:a5:45:d3:bb:5d:0d:0d:91:
ef:07:04:b0:24:92:dd:ca:b0:11:ee:65:a0:48:7b:
ef:14:8d:25:2b:60:1b:59:c2:89:f4:0e:4f:1b:fc:
24:59:3f:92:e3:d1:0e:e2:de:ef:99:bb:cb:bf:bf:
d7:4c:8b:83:22:8e:26:80:c2:58:24:d9:6d:ae:f6:
dc:e5:af:82:1e:74:af:aa:1a:a7:2b:71:10:cf:0d:
de:66:6c:ff:5d:37:41:75:49:b5:83:4b:46:d7:c2:
8b:9f:ca:a7:f1:40:07:a2:eb:16:f7:df:8e:de:20:
60:76:4c:b5:7a:03:fa:84:3c:c3:60:78:a5:43:51:
3b:a1:d0:7a:35:ff:18:4b:e7:1e:08:85:35:3f:50:
a3:ad:58:83:d5:d6:ba:a5:91:59:96:58:6b:fc:27:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B5:C5:5E:52:59:06:A7:37:1F:FE:8F:2F:DD:6D:77:BB:2A:8E:A9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/O7XFXlJZBqc3H_6PL91td7sqjqk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.126.0/23
Signature Algorithm: sha256WithRSAEncryption
06:e9:97:45:43:a1:ef:db:8f:cf:79:17:89:84:62:fd:dc:b2:
08:df:e4:3d:6c:26:94:7a:5b:94:e2:9b:0f:17:fd:92:69:79:
c9:ec:3d:d7:4c:08:6e:21:5a:97:c9:9e:c0:da:09:90:e2:e9:
7a:42:6e:21:87:42:2d:0a:47:c7:b2:3c:40:9b:0d:43:9b:f9:
64:ef:fa:96:08:31:7a:13:c2:87:52:2a:d6:a4:58:96:e9:f1:
50:4d:5b:9a:c0:cc:83:f2:c7:28:80:ee:67:18:fc:3b:36:72:
3d:3b:64:3e:a2:26:9e:3b:09:7b:b3:b9:24:6b:3c:90:1a:aa:
a5:91:c2:84:35:a6:97:dc:d1:a6:28:e1:13:67:30:ed:0b:91:
74:93:f3:04:4e:c4:c7:de:19:95:2d:69:36:04:d0:da:bd:f0:
19:6d:be:16:6f:33:7c:15:aa:a7:bd:7a:ec:fb:6d:36:b1:a2:
4b:d3:43:9c:f9:ba:65:73:ad:3d:e9:60:e7:91:8d:20:7e:29:
28:d0:9a:74:09:f8:d8:39:b2:45:ec:9b:5d:ef:28:be:03:8c:
61:51:a9:68:37:e8:c4:55:b7:10:22:a4:d3:63:c2:d3:6e:c7:
8a:31:ad:32:f5:3d:e2:88:d3:39:de:da:48:75:fa:8b:ec:5d:
d8:57:ab:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org