Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lEes4_49S6MkGaP-yExp9LYWPIs.roa
File: lEes4_49S6MkGaP-yExp9LYWPIs.roa (raw, json)
Hash identifier: ZK5FixjNbW98KwKZJPWovwwTGWEyi/dhDpTwvpcWkPk=
Subject key identifier: 94:47:AC:E3:FE:3D:4B:A3:24:19:A3:FE:C8:4C:69:F4:B6:16:3C:8B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1992
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lEes4_49S6MkGaP-yExp9LYWPIs.roa
Signing time: Sat 22 Oct 2022 06:06:42 +0000
ROA not before: Sat 22 Oct 2022 06:06:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 122.100.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6546 (0x1992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9447ACE3FE3D4BA32419A3FEC84C69F4B6163C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:e2:22:4e:98:3b:37:15:f5:40:61:3f:4e:
66:c2:94:28:9c:50:cb:c0:0e:7d:14:98:4d:01:7b:
d4:ba:52:d9:1b:83:72:de:94:07:c2:ed:12:b6:fc:
1b:68:32:3e:20:41:ce:29:b0:0b:8a:5f:a7:8b:1a:
b1:e7:12:f6:35:c8:b5:d8:6d:e9:36:53:ce:21:f1:
a6:8c:b2:98:ce:29:21:49:f1:34:5b:ae:c1:55:7f:
31:84:fd:cf:78:28:44:3b:e6:14:97:23:1a:b9:ff:
3c:5b:4f:1e:cb:66:c7:68:e2:f1:51:0b:7e:d7:12:
5b:28:25:e5:23:31:73:8f:b1:65:65:3e:25:4d:32:
8e:cd:1c:c2:4f:e9:12:c2:5c:59:8d:ab:2d:d2:aa:
61:96:cf:21:13:1a:b8:75:98:6d:e7:cd:55:84:f6:
10:93:e7:0a:bf:21:af:85:76:47:ef:32:46:6a:12:
ec:a5:bb:58:5a:4b:56:15:53:a9:f9:d0:a0:bd:83:
11:05:f2:34:b8:ae:4f:37:62:b5:04:d0:ee:8d:c9:
0d:d8:4c:1a:54:9c:22:46:44:93:ab:d8:ac:ce:ec:
58:38:5e:3e:70:08:5d:9c:cc:cd:20:3e:0c:1f:0d:
f5:af:42:9b:02:c0:73:e7:d8:6d:61:e4:06:17:ef:
9c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:AC:E3:FE:3D:4B:A3:24:19:A3:FE:C8:4C:69:F4:B6:16:3C:8B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lEes4_49S6MkGaP-yExp9LYWPIs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.64.0/22
Signature Algorithm: sha256WithRSAEncryption
55:81:58:8d:2b:3f:36:24:d9:17:77:d3:74:24:74:72:6a:b9:
c0:79:e1:b8:65:0a:bc:15:9c:c8:6e:de:30:0a:dc:4d:38:01:
d9:6b:9d:cf:ed:a4:77:83:f3:f0:a2:6e:7c:55:80:a2:4e:6c:
e2:3e:7a:af:6c:e9:60:eb:cb:74:54:f7:c7:ac:52:5b:a3:d6:
4f:a0:7d:53:2f:af:b8:14:69:b1:71:3c:03:73:03:60:0d:67:
d6:e6:6f:6d:4c:a8:59:e1:83:2d:4a:27:fe:cd:5f:1d:ec:9e:
6a:1c:5b:26:a6:d4:a8:ff:be:6a:8b:ee:79:ac:7d:20:dc:db:
a2:76:96:cf:26:47:27:fb:cc:86:9a:e7:8a:ab:9d:86:85:fc:
85:46:1a:30:cc:53:30:28:cc:f0:ee:17:a9:28:35:fe:14:8c:
4f:e6:c4:98:9c:82:5a:69:a7:61:4f:a4:90:44:5d:9e:e1:1a:
fa:ef:8d:48:72:82:6f:49:87:d8:5d:e9:a5:ac:21:33:fc:ff:
5d:6a:a7:b4:23:d0:d2:96:9b:a0:5e:9a:b4:3a:4b:eb:ce:1e:
ff:ec:96:5b:c8:10:c6:2a:8c:46:70:d6:40:87:de:e2:03:60:
35:75:a1:99:9f:27:66:6d:93:7c:e6:bd:30:4e:32:d1:ca:df:
8a:88:00:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org