Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XbIh2s6aZ3uKNsa9Nn_vvfwCEoA.roa
File: XbIh2s6aZ3uKNsa9Nn_vvfwCEoA.roa (raw, json)
Hash identifier: Ko+r8rdAEK4ZKUkAblsZzydwh7TuL3FTORqJQXtJFW0=
Subject key identifier: 5D:B2:21:DA:CE:9A:67:7B:8A:36:C6:BD:36:7F:EF:BD:FC:02:12:80
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XbIh2s6aZ3uKNsa9Nn_vvfwCEoA.roa
Signing time: Thu 15 Sep 2022 02:35:17 +0000
ROA not before: Thu 15 Sep 2022 02:35:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 122.100.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5DB221DACE9A677B8A36C6BD367FEFBDFC021280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3a:1e:71:9d:d9:45:51:4f:9a:0c:75:d3:3e:
ad:83:10:c8:f3:62:0b:70:8e:39:53:3f:6d:a8:cc:
c8:b3:2c:f5:50:49:ab:d6:72:50:3c:1e:91:21:60:
6a:f4:97:ec:7e:ef:33:4f:2d:36:df:6d:20:a2:ae:
c5:88:01:60:9c:18:2b:4b:79:83:d9:9a:81:4b:ab:
3c:8b:56:03:19:92:38:03:58:e5:b7:66:2f:c3:3d:
b6:de:f3:67:3d:fc:7d:30:32:f5:f0:e0:6b:72:bd:
3c:fd:c3:5c:a2:f2:4c:6a:36:ce:ab:73:25:7a:af:
35:70:09:cf:94:f6:ea:20:00:92:b3:7f:3f:18:c6:
4a:ee:b5:f6:74:6e:fd:02:55:a6:39:3d:f3:4b:7e:
79:14:6f:b6:bb:46:85:9e:1d:72:97:e6:72:d2:68:
50:49:b8:47:7d:e3:c8:85:c2:fd:18:c9:ac:3a:4a:
3d:4c:56:0c:74:00:a1:ed:57:39:dc:19:4c:87:0d:
01:5a:1c:56:78:fd:a6:5a:cd:58:83:57:48:f8:18:
75:a7:bc:7b:4e:0f:c1:5a:5b:bb:9c:d5:88:07:69:
8c:19:f8:43:5e:c9:0f:e5:ad:5c:62:b8:30:47:c8:
be:40:65:bd:50:0a:ae:19:75:80:f2:ae:d7:07:e8:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B2:21:DA:CE:9A:67:7B:8A:36:C6:BD:36:7F:EF:BD:FC:02:12:80
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XbIh2s6aZ3uKNsa9Nn_vvfwCEoA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.72.0/22
Signature Algorithm: sha256WithRSAEncryption
07:d2:ff:f4:b8:7b:8d:a8:44:d1:14:58:b3:52:69:97:bf:87:
fc:7b:a6:1b:ce:b5:31:66:b0:75:e8:cd:0f:1b:29:ec:67:07:
4c:78:cf:ff:9d:20:f1:5b:5d:2c:84:92:06:9f:cb:10:97:9f:
d9:ae:07:2d:40:b5:2d:1d:28:d6:54:01:8e:db:77:fd:e8:e8:
7d:68:a2:b0:5c:73:d5:ab:c3:91:56:dd:e0:2a:33:25:14:23:
b8:1b:f5:0e:0b:11:6c:45:a4:1c:14:d6:ea:3a:82:ca:2a:0d:
e0:64:83:2e:3c:ce:c7:57:e4:00:b0:3f:d4:63:27:35:7b:d4:
6d:8a:66:84:20:6e:d5:24:5f:a3:e0:bd:92:f9:6e:f2:7e:0b:
36:39:bc:35:d3:8a:2f:c2:3c:4f:9a:f9:ff:47:ee:1a:52:3b:
2b:7e:4d:44:39:69:88:c9:30:9a:35:e5:1c:82:be:f3:8f:d9:
ac:3c:14:59:fd:a4:eb:a3:3f:ac:89:5a:5f:ba:6a:42:80:38:
8f:a1:2f:fe:65:24:2d:d9:af:eb:22:65:eb:f4:91:25:ea:75:
4c:6c:a7:09:4e:cb:b4:e2:24:ab:d0:14:d6:59:54:bd:6e:6b:
18:ae:e8:a4:3b:95:48:02:2b:e1:e0:34:2d:c0:73:51:2c:b5:
56:70:67:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org