Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/a8XecADrlAKIZYrm_IGzthYE3ng.roa
File: a8XecADrlAKIZYrm_IGzthYE3ng.roa (raw, json)
Hash identifier: vNnWXe7YUG99fb/xcRGCcVIkZbulXZGSCSjrB2dBrFQ=
Subject key identifier: 6B:C5:DE:70:00:EB:94:02:88:65:8A:E6:FC:81:B3:B6:16:04:DE:78
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B1F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/a8XecADrlAKIZYrm_IGzthYE3ng.roa
Signing time: Thu 02 Feb 2023 07:11:45 +0000
ROA not before: Thu 02 Feb 2023 07:11:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24613
IP address blocks: 122.100.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6943 (0x1b1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 2 07:11:45 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6BC5DE7000EB940288658AE6FC81B3B61604DE78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d0:89:9d:9e:4f:3c:d5:c3:a7:60:09:cd:2d:
a3:fd:f9:73:5c:a2:ac:90:80:a2:6e:48:8f:bc:c7:
9e:7e:2d:93:5d:f5:a8:a0:d9:92:cb:87:8a:f7:46:
76:e4:4a:17:c0:44:6f:ef:f8:e9:67:85:9c:cd:f8:
2a:e7:9d:af:25:ab:ec:20:98:d9:5b:d7:aa:b8:fb:
49:47:14:9e:fa:74:0b:38:b2:fa:ce:71:92:d6:4f:
ba:2c:f4:e5:a6:9d:db:c0:e3:60:39:94:06:e0:6c:
4c:01:01:af:11:11:ac:73:d9:26:88:3c:93:f7:2f:
c2:93:c8:71:e5:fb:97:4b:d0:e3:0c:f2:30:32:46:
14:30:fb:83:fc:c2:b8:9e:d7:b0:73:b9:c6:3d:f9:
fc:08:56:d7:93:b5:85:cc:b5:ae:05:3f:17:85:a5:
88:dc:7a:e0:52:81:fe:c1:47:01:05:32:2f:bd:8f:
e3:9c:52:72:16:b5:b1:f3:7f:d1:5f:fe:4c:b6:27:
ef:cd:e1:41:24:d0:bc:53:66:2c:7e:b7:93:bb:47:
96:e4:99:a8:75:b3:e4:23:e8:e9:4c:e4:c3:90:45:
8d:d2:57:3b:d7:89:ba:5b:3c:97:06:53:b8:2d:3a:
42:73:2a:4f:34:d7:8e:be:b5:11:d7:cb:7b:59:06:
ef:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C5:DE:70:00:EB:94:02:88:65:8A:E6:FC:81:B3:B6:16:04:DE:78
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/a8XecADrlAKIZYrm_IGzthYE3ng.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3c:aa:d9:1c:9e:ae:85:c1:a0:76:aa:28:8b:18:02:d2:7f:9c:
54:2f:24:ad:cf:03:6d:ae:91:8f:88:3e:a9:87:0b:dd:9e:d1:
7d:54:05:15:79:8e:85:b2:fc:d7:ca:94:72:b2:a2:6a:8b:bc:
d3:b9:7a:94:fd:3b:d3:79:12:e4:bc:16:ca:3e:eb:5b:fe:83:
20:0f:98:29:4e:22:a5:16:7f:60:3b:17:7f:71:f1:d3:86:01:
b1:f8:c9:08:f2:2b:40:50:bf:90:af:82:9d:78:67:f1:2f:36:
b5:3e:1e:7a:06:dc:5b:91:3b:0b:ef:e5:af:ee:2a:09:ed:70:
e8:fb:52:fb:c4:94:78:19:5e:45:6d:c2:06:79:f6:3d:39:b2:
b8:a3:ba:a7:e4:5b:84:26:5a:00:2a:e1:5b:46:c8:83:95:cf:
87:91:21:da:6d:cf:30:81:3d:f4:af:6e:c1:ea:f0:8f:b4:f3:
78:43:95:6c:6a:11:1b:ff:a0:47:06:3e:0e:98:0d:01:a6:ac:
32:3a:5b:f7:09:8f:eb:b3:39:82:a8:b1:0f:90:26:61:4a:02:
81:35:55:89:3d:2b:8c:a8:2a:f9:23:a8:b9:68:59:86:92:83:
20:a5:e3:da:c4:71:04:08:9e:47:a9:8e:06:53:36:40:34:e1:
01:0d:10:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org