Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iViqZBoPy6DGlZQ79i5MbOj6VZ4.roa
File: iViqZBoPy6DGlZQ79i5MbOj6VZ4.roa (raw, json)
Hash identifier: zBiYYPef8IVvceFPMcWcZkeez9S/+zDLlZSfD3PT83Q=
Subject key identifier: 89:58:AA:64:1A:0F:CB:A0:C6:95:94:3B:F6:2E:4C:6C:E8:FA:55:9E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1463
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iViqZBoPy6DGlZQ79i5MbOj6VZ4.roa
Signing time: Thu 19 May 2022 06:01:56 +0000
ROA not before: Thu 19 May 2022 06:01:56 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 122.254.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5219 (0x1463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: May 19 06:01:56 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8958AA641A0FCBA0C695943BF62E4C6CE8FA559E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:45:a0:6c:28:10:07:ba:ad:0c:23:e3:5c:
b9:4f:2c:5d:14:aa:df:53:a7:e1:fd:08:af:ef:da:
fa:08:2c:7e:eb:39:3e:95:d9:5b:3b:f3:3c:7f:90:
ba:0f:3c:9d:c8:ac:6b:9c:bb:3a:ae:db:66:b6:40:
52:a3:c0:b5:a2:fc:44:2a:7c:b2:ee:62:7c:f6:df:
9c:96:00:30:e8:c0:46:53:7e:8c:95:11:b6:de:0b:
9c:62:77:e2:a7:f4:72:ff:32:0e:22:09:53:63:53:
e2:2b:4a:f0:65:3b:a8:f7:6d:b8:b5:eb:82:4a:82:
d7:86:1e:0f:0d:e4:46:fd:23:55:8d:1d:08:0c:f0:
84:2b:92:fe:2d:f9:07:30:ad:fb:c4:0d:cf:5d:e5:
2a:cd:aa:ae:47:b5:8f:0e:52:78:8a:f0:6d:3e:3b:
6b:90:e7:b2:75:79:2d:9d:cc:60:38:dc:66:f6:7a:
77:0c:c3:ff:26:bd:7d:ca:c7:b2:ed:f5:68:cc:30:
04:bf:1a:61:cb:05:13:88:56:a4:f4:39:4d:61:cd:
4d:df:ba:bc:2d:20:84:84:b5:2c:d5:97:3f:36:0e:
f9:75:ea:80:77:f3:84:93:d2:09:78:45:69:fd:92:
53:24:38:f5:4e:6c:b8:95:38:0a:90:06:09:45:88:
4b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:58:AA:64:1A:0F:CB:A0:C6:95:94:3B:F6:2E:4C:6C:E8:FA:55:9E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iViqZBoPy6DGlZQ79i5MbOj6VZ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.36.0/22
Signature Algorithm: sha256WithRSAEncryption
66:97:a0:21:f6:d6:b7:c5:a3:95:c5:72:bf:05:d7:04:59:0e:
57:a6:f3:ce:0e:e1:2a:47:84:d3:ef:35:0f:db:b9:71:e8:51:
21:4a:6c:23:c2:88:ad:5a:76:21:33:5c:c5:cb:9d:ff:22:ab:
58:90:67:a2:d7:01:60:99:cc:07:9c:5f:42:fe:9b:d7:5c:c1:
02:de:c0:d7:40:04:2c:88:2a:85:b0:92:51:a9:35:67:bb:31:
d7:95:f6:57:4f:6a:b5:48:38:92:07:8c:28:27:9b:9c:a8:d8:
29:17:48:47:30:50:e4:5f:04:8d:b7:89:c3:e3:df:51:33:36:
ce:0d:a0:f3:2c:39:85:94:b8:a0:ec:77:5d:d8:b7:1f:d8:51:
d1:21:bc:a1:09:dd:b3:ca:0d:5b:d1:f1:31:c3:af:1d:8c:5f:
61:8e:d8:7a:f8:7f:c1:24:1e:c8:42:3a:de:16:15:f2:16:f4:
24:a8:e3:ba:ec:b8:26:cd:66:83:b9:ea:e2:c8:c0:37:3f:a8:
d2:99:43:79:7c:7d:66:2d:59:85:7b:49:62:6e:61:ee:4d:71:
c9:c0:6d:4a:42:25:d1:db:f6:72:4c:13:5c:5e:a3:00:2f:9f:
dc:10:7d:5d:9f:a5:19:74:0a:5c:8e:18:63:e8:c7:1c:27:ce:
0f:8b:46:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org