Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aLw9Y7iSvFVFD36LRtyUZ1H2ZC0.roa
File: aLw9Y7iSvFVFD36LRtyUZ1H2ZC0.roa (raw, json)
Hash identifier: 3V43sV6hQl8tTKxLBYM5RjA1OYbLLD+QLG8ixfg7/88=
Subject key identifier: 68:BC:3D:63:B8:92:BC:55:45:0F:7E:8B:46:DC:94:67:51:F6:64:2D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0A9E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aLw9Y7iSvFVFD36LRtyUZ1H2ZC0.roa
Signing time: Tue 29 Sep 2020 10:07:25 +0000
ROA not before: Tue 29 Sep 2020 10:07:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 122.254.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2718 (0xa9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:25 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=68BC3D63B892BC55450F7E8B46DC946751F6642D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:4a:74:45:4e:b4:90:ad:da:77:84:f2:7a:
66:8b:8a:3a:91:02:64:85:5a:bc:12:af:49:3a:80:
50:f9:15:86:88:f9:35:17:5d:40:89:52:23:02:cd:
2e:6f:6f:93:7e:33:77:62:01:d8:18:db:28:52:b7:
7e:62:7b:82:3e:bc:0e:f9:9d:24:b2:e2:5d:53:94:
83:85:89:c4:c2:37:c4:f0:c0:28:52:32:9f:d2:12:
06:1c:34:b3:03:2b:67:ac:f7:c2:db:d3:d1:b4:c6:
16:b0:4c:be:c8:9d:ec:b5:b7:3f:de:75:d1:f8:49:
ef:7f:cb:8d:40:49:8a:a3:d7:0f:26:9c:94:66:a2:
7c:78:3d:25:7c:3f:29:07:d1:4b:38:b3:bb:64:87:
dd:92:8a:6b:34:40:7a:01:7e:e9:b6:0a:86:34:e7:
99:d6:db:47:27:b0:c7:9f:73:33:72:18:31:cb:04:
64:ca:61:93:24:30:77:08:3a:27:e8:b8:0f:ad:11:
75:65:25:cc:ce:9d:5f:dc:83:10:44:27:1c:d3:dc:
c7:6a:14:88:32:2e:2e:4c:fa:82:b6:cf:26:a2:c0:
9a:c7:18:a0:0a:b1:5c:ea:29:b0:4e:17:ac:98:04:
c2:fc:fe:0a:c4:78:8b:49:a8:14:5c:5d:58:2d:d5:
18:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BC:3D:63:B8:92:BC:55:45:0F:7E:8B:46:DC:94:67:51:F6:64:2D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aLw9Y7iSvFVFD36LRtyUZ1H2ZC0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.32.0/21
Signature Algorithm: sha256WithRSAEncryption
24:4c:20:ff:1f:31:3e:9e:ad:86:39:29:3f:5f:2e:dd:60:2a:
ea:eb:a0:f8:4c:71:d7:ec:38:45:24:e5:8d:88:3d:05:1e:4b:
58:73:20:d2:4f:1a:54:d3:e3:2f:13:d2:ed:fd:48:8e:8e:9c:
c2:ea:e1:6d:7d:96:ff:b1:ea:d6:dd:63:72:4d:7a:22:44:c0:
5b:f7:0b:75:b8:5f:f7:dd:89:38:ac:ab:ec:b7:59:67:8d:8a:
1c:92:ce:80:85:c6:52:71:ea:aa:29:0b:c3:86:fa:72:0b:1e:
7e:33:b5:49:27:8c:f4:56:b4:7f:d6:0b:8c:46:5b:5d:22:31:
2a:2d:b7:75:10:ea:97:b5:ac:8c:45:06:ba:94:1f:a9:2a:16:
68:d2:6f:00:14:a9:34:5d:57:aa:b3:52:f6:c4:f7:58:13:db:
d8:66:fc:d4:38:f9:13:4d:b3:94:99:a5:1a:5b:54:5b:f1:e3:
af:0f:31:33:e3:b9:62:57:09:02:eb:ca:ea:5b:6c:1a:0e:58:
fe:fc:15:82:51:7c:37:86:4e:0c:07:e0:95:68:3e:3a:d5:e3:
d2:bb:bc:47:88:c8:4a:22:a9:e1:86:75:10:dd:82:26:41:c9:
4c:4e:c7:24:03:20:79:80:db:41:9a:52:21:f2:65:98:a1:c2:
18:b1:71:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org