Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OBd9xcATgrEYNOzMViKnNiw67Cg.roa
File: OBd9xcATgrEYNOzMViKnNiw67Cg.roa (raw, json)
Hash identifier: 8VovdtalCekVkfiOEPGssRLuOgVINQc6eQ7COIa65GM=
Subject key identifier: 38:17:7D:C5:C0:13:82:B1:18:34:EC:CC:56:22:A7:36:2C:3A:EC:28
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 125D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OBd9xcATgrEYNOzMViKnNiw67Cg.roa
Signing time: Wed 29 Sep 2021 02:54:30 +0000
ROA not before: Wed 29 Sep 2021 02:54:30 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 122.100.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4701 (0x125d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:30 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=38177DC5C01382B11834ECCC5622A7362C3AEC28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:2c:61:11:3b:c1:f3:a1:2f:c8:6c:57:0c:
90:5e:dd:cd:a6:da:f7:10:cf:cf:91:36:cb:0d:ac:
71:c6:5b:6c:d4:5c:38:81:a8:d7:64:1a:6d:60:27:
e8:b8:de:b3:27:f8:35:57:95:b2:6e:35:1b:d8:8c:
3d:89:7f:f6:d2:fa:cd:da:06:c8:fd:35:0a:4d:94:
61:be:7d:88:40:8e:33:f9:d0:28:78:31:52:db:fa:
02:04:4a:9d:72:8d:32:e6:61:02:5f:15:60:46:e0:
54:8c:77:ed:19:e0:9a:31:16:75:23:40:1c:e4:86:
ec:d7:08:27:03:dc:e2:96:4d:15:8f:51:bc:54:31:
9b:cb:b9:01:66:bf:ec:c5:1a:53:32:15:47:7b:19:
3f:86:35:2b:9f:ca:e4:80:cf:0d:bc:48:01:bc:be:
78:6c:99:ca:85:d5:9a:b7:c3:bf:93:84:b1:08:c5:
f9:7f:4f:75:31:34:b2:f0:ad:f1:e9:9c:95:f9:47:
5a:34:73:f1:80:31:40:5b:06:1a:1c:b5:97:65:97:
ce:34:82:81:d4:b7:70:2c:e4:23:4e:2b:3a:dc:ab:
a6:00:be:93:49:98:69:06:5f:f8:64:14:dd:0c:dd:
43:3d:89:28:3c:3b:e0:84:73:c3:5e:5a:f3:17:2f:
f8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:17:7D:C5:C0:13:82:B1:18:34:EC:CC:56:22:A7:36:2C:3A:EC:28
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OBd9xcATgrEYNOzMViKnNiw67Cg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.88.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:ed:c4:ea:12:58:bf:1b:3a:8e:46:c7:bc:c0:9c:ed:74:31:
5b:54:8f:a2:34:e6:f0:7f:a7:c5:a5:b3:aa:ad:c5:68:3d:0c:
81:e5:f1:f5:70:e0:5e:33:23:c3:ea:5a:2c:b4:7a:70:eb:0b:
c5:ae:70:e0:0f:8f:13:21:6c:ea:3c:da:41:fe:12:4f:4f:e7:
cc:ff:ba:a4:cf:b0:b4:44:1c:86:79:90:68:d5:dc:a0:54:6a:
ff:cc:34:cb:54:e3:35:3d:a2:30:b3:52:d4:fa:5a:f6:b2:0e:
b1:0b:46:85:76:42:63:fc:da:60:8f:d5:6f:14:3d:e9:2a:9d:
bd:cf:4e:0c:dc:8d:49:2f:22:3c:a3:8b:2f:a0:fc:f8:77:08:
88:fa:2b:3a:3b:56:b6:61:09:d6:bf:4d:0a:e0:7d:fc:fc:70:
ae:e9:7c:31:bd:bf:52:20:cd:6e:59:a7:e9:36:68:16:63:b8:
b3:ec:53:2b:5b:08:32:ec:e8:fb:b5:05:8d:94:b0:d4:b5:30:
1b:93:2a:b2:66:f0:72:8f:5f:22:e2:95:de:a7:f3:35:e3:82:
60:3a:35:d2:16:2f:cd:11:53:48:01:77:a1:6a:12:d8:99:23:
d3:e5:d8:8b:2b:c6:b0:9e:7b:88:29:14:d7:13:a8:2d:97:83:
ce:30:90:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org