Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_wPNex1k78aLRv8m9er_w4UCugo.roa
File: _wPNex1k78aLRv8m9er_w4UCugo.roa (raw, json)
Hash identifier: 2QsNi8y4UQ8dWBOFqreTkkIP8uJvLu/4HuNavRS4cwo=
Subject key identifier: FF:03:CD:7B:1D:64:EF:C6:8B:46:FF:26:F5:EA:FF:C3:85:02:BA:0A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1223
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_wPNex1k78aLRv8m9er_w4UCugo.roa
Signing time: Wed 29 Sep 2021 02:54:14 +0000
ROA not before: Wed 29 Sep 2021 02:54:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 123.0.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4643 (0x1223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FF03CD7B1D64EFC68B46FF26F5EAFFC38502BA0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:2b:e1:8f:7f:91:50:95:ed:11:7b:de:b9:
27:ec:d5:b4:6e:c0:63:81:ac:4d:d5:67:11:4a:7b:
14:9d:05:25:08:57:3a:97:47:4f:fe:89:e4:02:e6:
92:b7:95:f7:26:b0:26:cf:1e:d4:00:c7:90:55:1b:
28:36:32:75:d5:26:30:00:95:28:80:51:5b:fe:a3:
e9:9f:be:38:04:84:f7:df:62:ac:a9:75:ea:3b:c7:
aa:73:27:72:36:b1:3b:c6:cb:8d:b6:29:ca:9b:67:
65:72:c8:8e:a5:2c:3e:d5:49:4e:0f:5f:29:03:75:
bc:d8:7d:4e:6a:bd:7c:45:10:44:4d:b8:27:a3:21:
96:5e:f9:db:4a:ca:48:4a:cd:e6:f6:00:b5:26:bd:
e7:ea:2e:31:7e:01:2a:43:65:de:a8:b2:85:b3:c6:
52:44:10:c2:d8:60:73:ed:17:4e:a1:bb:61:5c:29:
c4:1b:37:77:ab:86:fb:ae:f8:fa:fd:2b:e5:02:e0:
43:27:37:25:ce:4e:0d:f3:5f:09:e6:72:c9:0c:e0:
98:02:7d:98:7e:30:f4:13:25:d1:8f:ac:f6:c6:6d:
32:d8:db:c4:2f:c6:a4:d6:47:51:60:e3:de:b9:ab:
3d:26:dc:7f:26:7f:1f:6b:fb:7d:72:08:94:c4:b5:
2c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:03:CD:7B:1D:64:EF:C6:8B:46:FF:26:F5:EA:FF:C3:85:02:BA:0A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_wPNex1k78aLRv8m9er_w4UCugo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.32.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:36:9f:44:34:22:f8:7d:5e:b1:58:f6:76:c6:9b:8c:45:08:
f9:a8:5b:6c:46:7b:5c:01:ab:ea:58:62:21:bc:9f:49:07:cb:
64:39:3f:c4:d7:61:62:b5:3e:d5:59:38:2c:41:e2:2f:b1:d8:
89:2f:d5:f1:66:4e:64:82:53:fb:4f:49:f4:cd:92:f3:29:c5:
ad:7d:3b:bc:d9:96:2e:a3:9d:eb:bc:80:0d:1c:c0:c4:f7:5b:
7a:1a:8a:0b:fa:1b:5f:46:17:cf:30:3f:e4:23:49:05:9e:61:
9a:3f:25:cc:68:5e:dd:50:11:df:9b:e6:90:4e:99:a3:ba:70:
3c:96:23:41:22:34:57:f6:5c:cf:ee:91:bd:96:1a:75:12:a3:
00:b6:01:f7:79:d2:17:7c:4d:05:e7:0c:1f:01:20:29:2c:ea:
63:6d:be:c6:0e:29:7c:2b:9e:3c:52:ad:e9:b0:e2:b9:83:3b:
e0:21:35:9d:f3:d3:2d:3f:c5:49:12:d9:01:b4:54:bf:e8:d8:
58:09:31:74:4c:49:14:a3:13:2c:21:c5:b3:6a:03:46:b4:2e:
88:3c:54:c0:17:e7:2f:7a:96:06:0e:0a:63:75:9d:d4:dc:d4:
53:23:b1:22:ae:82:39:e7:eb:2a:ed:25:8b:0f:9a:d6:bb:b1:
be:9a:71:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org