Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RCUopqRwZPg7JAk7BxRH3X8Alwo.roa
File: RCUopqRwZPg7JAk7BxRH3X8Alwo.roa (raw, json)
Hash identifier: h50EiRmVZ5lpHF8xAtsarp8o+C2BHnqCTvdYQ8/g4M4=
Subject key identifier: 44:25:28:A6:A4:70:64:F8:3B:24:09:3B:07:14:47:DD:7F:00:97:0A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 191C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RCUopqRwZPg7JAk7BxRH3X8Alwo.roa
Signing time: Sat 22 Oct 2022 06:06:07 +0000
ROA not before: Sat 22 Oct 2022 06:06:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 124.6.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6428 (0x191c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=442528A6A47064F83B24093B071447DD7F00970A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:53:cb:8f:b7:12:ea:e3:b6:41:d6:f5:32:
b2:41:83:6c:fd:5f:9a:9a:93:bf:d8:54:58:f2:c4:
c8:c2:8a:69:58:b9:48:0c:0f:e9:9c:69:f0:ba:03:
f3:b9:a7:22:0f:02:4c:94:5c:83:b8:f4:2b:6d:d1:
da:35:ea:7c:19:d0:d7:68:80:7f:71:2c:14:a6:ee:
bb:d9:97:8e:9e:92:b1:c4:62:c7:dc:da:33:85:32:
46:cb:90:fa:a2:61:ae:d9:65:b9:7b:bb:99:05:3f:
5a:d6:60:b9:69:ed:bd:4c:89:94:01:5d:06:34:9b:
02:27:86:c2:cb:ab:18:c6:80:18:08:10:3e:b2:36:
90:3f:96:00:bb:04:40:9b:cf:5c:86:db:06:bf:21:
ce:67:ad:82:57:cf:56:c1:a2:23:7e:35:80:3c:aa:
df:da:ab:65:10:6a:d3:43:2f:6e:bf:10:ea:c0:04:
71:56:ee:26:d4:5e:3a:b2:ab:68:73:4b:b3:63:56:
9a:b1:52:d4:72:76:ce:b7:d0:3c:b0:5b:b3:32:df:
27:87:7b:83:17:f8:01:2a:f9:b4:a2:a7:cf:7f:24:
83:d6:33:1e:aa:2e:dc:76:aa:9e:d4:d9:49:95:d0:
99:d3:7b:b6:57:7c:bc:35:9c:8b:da:26:28:ff:dd:
fc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:25:28:A6:A4:70:64:F8:3B:24:09:3B:07:14:47:DD:7F:00:97:0A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RCUopqRwZPg7JAk7BxRH3X8Alwo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.16.0/22
Signature Algorithm: sha256WithRSAEncryption
06:7d:2b:28:af:c9:68:90:b7:2e:63:4e:aa:9e:f9:34:3e:81:
7c:12:90:ad:0e:62:bb:a3:42:06:3b:86:c4:7e:09:c1:f7:f5:
55:c0:98:9f:97:7b:a2:86:14:75:27:77:47:a4:8f:32:c3:30:
27:1e:56:00:c6:20:f4:96:d3:ed:dd:92:91:10:bd:4e:50:10:
a5:d3:8c:f0:5f:65:f9:d2:fe:9d:7f:6c:55:06:be:37:80:7a:
5c:e1:88:69:26:02:ec:56:06:95:d1:d1:58:e8:8f:f1:59:4c:
54:4e:28:88:55:47:03:63:68:e7:32:c9:da:92:8d:21:1b:fa:
16:6a:01:4a:8c:8a:ac:67:fc:96:15:da:54:ba:fb:c6:77:f8:
b8:9d:fb:dc:95:48:af:cb:4f:a1:1b:b0:48:f9:54:a2:69:d7:
a0:9a:72:47:bb:85:03:11:ed:dc:f1:db:bf:05:06:1a:fc:50:
50:eb:5d:5d:06:84:50:9d:c7:14:f2:17:4e:b9:5e:ed:d4:cf:
6e:41:c7:e2:cd:0b:39:8c:e9:56:b2:92:e7:fe:80:49:0e:20:
c8:db:24:bf:e9:9a:56:5e:9b:8e:ba:9a:cf:d4:4f:3f:8d:50:
4b:d6:a3:83:85:b9:ae:16:a7:86:47:15:da:79:e6:20:bf:29:
e0:fa:8e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org