Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fO2a8R7KJomqOX_5OrENCFenmxc.roa
File: fO2a8R7KJomqOX_5OrENCFenmxc.roa (raw, json)
Hash identifier: 7/7I8awLlCM4ZOpaI4OyE6uEnpF9ugE/8p7i92CF9Ss=
Subject key identifier: 7C:ED:9A:F1:1E:CA:26:89:AA:39:7F:F9:3A:B1:0D:08:57:A7:9B:17
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1209
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fO2a8R7KJomqOX_5OrENCFenmxc.roa
Signing time: Wed 29 Sep 2021 02:54:07 +0000
ROA not before: Wed 29 Sep 2021 02:54:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 122.254.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4617 (0x1209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7CED9AF11ECA2689AA397FF93AB10D0857A79B17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:eb:0c:51:45:18:3d:d6:4b:aa:e6:20:54:
69:19:51:a7:2b:6f:35:f3:3a:9f:31:e9:3b:c6:ef:
01:6e:42:4b:77:08:f0:dc:75:62:0d:71:4f:1b:1d:
1b:ad:13:67:89:1f:94:06:c1:12:93:e5:96:f5:42:
27:0d:06:ce:db:75:1a:5f:82:d0:ae:19:f0:b8:e8:
34:66:ba:f1:f1:68:c7:83:0f:c7:a9:f0:d5:d2:0c:
f6:db:5b:ee:0c:ce:e7:04:c7:69:71:9d:90:3f:6d:
90:9b:9c:00:4e:ee:f5:ac:90:f6:d1:cc:19:27:d7:
fd:a5:8a:0e:cb:5d:c2:36:ee:df:53:09:8a:e2:bb:
8e:40:08:de:59:fe:63:44:ad:82:62:38:34:d5:cd:
0a:fe:e9:4e:4c:2b:c7:20:9b:3c:05:5c:83:75:e9:
d8:85:03:5c:5d:95:81:80:c7:83:9e:b8:65:bd:d6:
f6:d7:19:4a:ce:1f:a7:28:76:7a:cf:dc:42:29:33:
3f:e6:4f:5e:fe:78:05:35:c7:24:b2:08:81:d6:1f:
0c:7f:b6:52:c8:31:29:a3:d8:7e:11:ba:d2:62:b0:
5b:fa:9f:42:39:a9:dd:8c:1a:f8:f3:e4:df:e6:b6:
c6:7d:e3:f9:57:fc:0e:57:26:19:0c:a3:c0:ab:c2:
5d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:ED:9A:F1:1E:CA:26:89:AA:39:7F:F9:3A:B1:0D:08:57:A7:9B:17
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fO2a8R7KJomqOX_5OrENCFenmxc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.56.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:f3:58:e4:61:c0:02:c5:ff:20:e1:d7:00:ab:ad:78:6d:8e:
5b:4b:59:9c:9f:40:a7:dc:75:d0:b5:aa:20:28:16:a9:c0:7e:
fb:9e:3b:f9:ce:a7:f8:c5:a6:c6:ea:7a:7f:b4:1a:0f:d0:0e:
d1:f3:24:38:91:7f:15:b8:79:cd:29:26:d2:0f:26:df:56:4c:
01:14:1f:fe:20:71:1e:4a:cb:99:be:5a:72:c9:09:3d:bb:63:
e3:c4:34:9f:dd:02:4b:7d:07:4c:ce:28:37:e6:ce:d4:58:82:
a6:45:61:70:5d:0f:2e:04:8d:f7:d3:6f:9d:7d:9c:03:fa:68:
d2:ae:43:69:44:0d:b7:c3:d3:26:79:82:d8:aa:7a:7f:26:02:
c6:c5:55:dc:77:4e:45:28:c0:cb:82:23:f7:61:81:c3:f8:11:
6f:93:41:22:2e:c7:17:51:a0:84:21:02:e0:ea:81:f8:e1:d3:
76:d7:dc:cc:a9:e2:25:da:57:b8:2f:51:94:38:64:2e:bd:74:
b0:c1:4b:94:38:c5:58:06:ad:bd:ac:93:e9:f6:e9:d3:94:b7:
87:0a:5c:23:90:b0:88:f3:f6:45:9c:ab:e3:c8:2f:64:d8:c9:
44:79:f4:d1:94:26:c3:85:93:75:3f:41:b8:5d:d8:9a:70:6c:
d2:a8:0f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org