Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZEYddApuVv6eR4OUABLsaxO0ETU.roa
File: ZEYddApuVv6eR4OUABLsaxO0ETU.roa (raw, json)
Hash identifier: S/nLyrUsY4eP1JA0PwpOlLdv/V511CRO4pub3PPZpbw=
Subject key identifier: 64:46:1D:74:0A:6E:56:FE:9E:47:83:94:00:12:EC:6B:13:B4:11:35
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12DE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZEYddApuVv6eR4OUABLsaxO0ETU.roa
Signing time: Wed 29 Sep 2021 02:55:05 +0000
ROA not before: Wed 29 Sep 2021 02:55:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 123.0.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4830 (0x12de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:05 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=64461D740A6E56FE9E4783940012EC6B13B41135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:9e:ca:6d:1d:84:cf:a7:7c:b1:13:fb:a6:
44:30:c4:77:5a:d2:c0:7d:2a:e8:b5:f5:69:88:89:
65:07:72:0e:fa:ef:5e:5f:43:bb:11:3d:2b:e2:6f:
93:d6:a5:81:74:db:2c:c7:d6:e1:3c:d2:f6:d6:f7:
94:6d:53:f7:8d:e8:08:e2:f5:9b:88:92:f3:fa:8f:
06:53:68:8d:b8:de:c9:9a:f5:50:87:89:a0:9a:ab:
d8:47:4a:2e:85:33:a7:64:60:dd:2b:ee:d4:b5:1d:
ce:d4:bd:65:c0:34:21:d4:51:21:01:c9:30:44:98:
c6:75:62:20:31:90:f1:1c:ab:de:79:86:18:20:85:
5f:d3:43:32:ac:ea:5f:a2:60:12:24:91:6a:56:64:
41:d5:15:c2:49:37:43:44:16:fe:c8:5e:98:d7:92:
c0:0b:47:3f:26:30:fc:ee:71:20:a7:bc:38:26:7f:
09:fe:75:8c:54:2a:7c:68:bd:80:1b:8a:62:d4:84:
c0:19:16:93:44:6d:6d:1d:79:80:d8:86:54:16:cc:
54:b4:94:e0:c6:79:60:50:aa:da:47:25:07:7d:0e:
25:70:75:da:1b:18:20:d9:ed:ba:e0:3f:a8:47:74:
40:6f:f4:6d:4f:23:8d:34:d5:a9:59:ed:2a:47:cc:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:46:1D:74:0A:6E:56:FE:9E:47:83:94:00:12:EC:6B:13:B4:11:35
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZEYddApuVv6eR4OUABLsaxO0ETU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:46:1d:a0:8a:11:a3:7a:22:12:1c:b2:83:57:96:82:80:a7:
e3:77:9b:99:d9:7e:a2:b1:eb:0e:28:d3:e2:e7:60:f1:f8:ad:
fe:20:4b:57:06:65:aa:44:2a:2e:ff:05:52:9d:9a:1e:29:c2:
c8:20:42:59:56:0b:a6:de:58:59:64:3e:bb:9e:3a:e3:ed:5b:
dd:cc:2d:d9:00:04:97:11:0b:0d:cd:e7:01:05:29:72:18:a5:
66:ad:72:d7:7e:1e:c8:1a:3f:85:7f:99:e2:ad:a6:a2:17:ef:
4a:d3:d8:d4:dc:01:b1:72:37:a3:f8:7a:a4:92:af:6a:f8:c8:
ce:26:fe:c8:59:e3:98:eb:e0:23:ae:79:23:17:1a:d2:71:74:
00:a8:3b:01:ea:fc:0f:b2:45:ad:3a:b0:02:76:1c:eb:b1:da:
c3:5e:86:63:34:9c:a6:eb:2a:de:b8:3b:4b:4a:65:b4:ee:f8:
48:fd:56:79:8a:8a:83:0b:5c:9d:aa:f3:72:f8:5a:1a:78:40:
35:58:1f:26:98:ad:dc:13:00:5b:55:e3:a4:6d:bc:8d:91:a5:
51:6c:f7:49:24:e1:fe:bb:f5:65:d7:c6:0e:28:71:0a:8d:b0:
85:49:19:42:ce:de:11:1d:a4:2d:3d:2a:16:af:d1:22:9a:8f:
10:86:e4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org