Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f4nN8AkFxP9Woj_KSvhYys31744.roa
File: f4nN8AkFxP9Woj_KSvhYys31744.roa (raw, json)
Hash identifier: f0igF7VUMjbYDme0meR1zJcY7lVveR0JF996AvJI80g=
Subject key identifier: 7F:89:CD:F0:09:05:C4:FF:56:A2:3F:CA:4A:F8:58:CA:CD:F5:EF:8E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1353
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f4nN8AkFxP9Woj_KSvhYys31744.roa
Signing time: Wed 29 Sep 2021 02:55:38 +0000
ROA not before: Wed 29 Sep 2021 02:55:38 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 122.254.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4947 (0x1353)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:38 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7F89CDF00905C4FF56A23FCA4AF858CACDF5EF8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:14:70:09:09:6a:a7:50:d0:3f:ab:46:24:af:
4f:4d:95:c3:ff:e0:8f:2f:03:35:05:49:92:56:5e:
9e:39:06:8a:f8:6d:9d:9c:54:45:fd:92:95:80:b0:
ff:fb:1d:b2:28:95:4b:87:76:f6:71:40:99:2f:8a:
52:c8:6e:80:37:fc:ea:39:cb:ad:72:a2:f8:a2:bf:
e7:f0:00:06:c3:3c:b7:ee:a3:1e:f2:82:7e:d4:7f:
63:4a:fc:df:9a:ab:b2:05:10:29:13:d5:63:3a:5b:
84:c8:50:3c:8e:b7:5e:40:04:99:33:6f:13:7f:95:
87:f5:67:6e:ae:a6:da:9d:fe:94:de:d0:de:48:6f:
a7:e5:2a:bd:ff:77:e4:b9:73:d8:1c:fb:83:56:a7:
a8:d0:58:ab:5f:95:ec:a5:95:24:5a:f0:04:4f:65:
25:c6:d2:45:0a:5a:32:d5:20:01:8d:2d:e8:fd:78:
8e:7b:98:4d:e6:7f:90:f7:41:96:68:a8:70:15:59:
01:cc:25:61:ed:10:fd:7a:ba:a1:73:24:5c:71:11:
08:15:f0:65:93:cd:48:f9:fb:7b:ba:bc:3d:8d:97:
75:10:37:2b:19:45:30:01:3f:ac:cb:bb:2d:c1:23:
b6:19:c5:6e:e5:ea:80:dc:66:cf:54:3d:ab:aa:f5:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:89:CD:F0:09:05:C4:FF:56:A2:3F:CA:4A:F8:58:CA:CD:F5:EF:8E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f4nN8AkFxP9Woj_KSvhYys31744.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.32.0/22
Signature Algorithm: sha256WithRSAEncryption
69:44:26:63:78:03:9f:d0:5a:01:6d:cb:44:1f:42:08:29:f5:
02:ff:7b:cf:fe:7e:65:db:c8:5f:b2:3a:0e:b0:47:9a:d6:e5:
44:bd:2e:d4:a0:0c:6b:f8:de:33:66:81:d1:bd:00:29:d3:c9:
c9:62:6c:1b:fe:83:79:6e:bf:20:bf:47:d0:a5:87:9b:7b:76:
3f:65:28:68:54:b8:3a:d9:3b:31:a7:3f:24:4f:20:2f:91:ef:
86:67:c9:c3:b3:8a:ce:62:7f:06:6b:61:e0:1c:79:cd:22:5c:
f8:6b:6e:5b:18:dd:8d:1f:4e:66:f4:f6:11:c9:83:22:0b:e9:
9a:4b:2c:8c:ad:ac:2d:e1:c3:3d:ed:52:f4:ea:4d:ed:ef:bb:
92:7a:b0:20:47:b6:0b:92:52:89:4e:a9:a0:e1:8e:19:e5:10:
2c:d2:cf:2d:d4:b6:db:b8:fa:01:97:38:2d:a1:8b:57:3a:42:
22:35:ed:85:6a:ee:e4:e1:f5:4a:14:61:51:dd:11:47:ab:4b:
7d:8f:cf:af:5d:ff:2a:b5:d6:48:44:0d:18:52:6f:9d:cd:80:
b0:9d:ae:ff:76:c6:3d:6f:0b:45:45:cf:7a:4c:14:68:95:22:
aa:b2:b7:17:30:ee:86:ac:94:6c:11:38:5b:de:9e:e6:5e:af:
41:2d:6a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org