Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mpQRZAbMOeZ1r_N8pDo9K02qCy0.roa
File: mpQRZAbMOeZ1r_N8pDo9K02qCy0.roa (raw, json)
Hash identifier: iTL6p1U2enGQBaLQt9NgEMUEqqzfFlPdo9PII6WyacY=
Subject key identifier: 9A:94:11:64:06:CC:39:E6:75:AF:F3:7C:A4:3A:3D:2B:4D:AA:0B:2D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1129
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mpQRZAbMOeZ1r_N8pDo9K02qCy0.roa
Signing time: Sun 07 Feb 2021 13:14:02 +0000
ROA not before: Sun 07 Feb 2021 13:14:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 122.254.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4393 (0x1129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:14:02 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9A94116406CC39E675AFF37CA43A3D2B4DAA0B2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9a:38:89:0f:07:d1:0f:c5:c9:9d:b9:24:cd:
f4:36:5e:2c:08:24:f1:c9:c5:87:71:b4:f7:d5:17:
3a:2d:3a:5b:d4:0a:5e:c8:85:87:e2:98:86:42:5e:
df:d0:05:a9:ed:fe:23:e1:4a:fe:b1:1b:1a:57:c3:
61:e9:13:09:4f:98:b3:f0:82:c0:ef:f1:4f:b7:47:
44:55:23:73:c1:13:e4:3d:67:a3:57:c5:a1:95:78:
a9:d4:32:4b:39:ea:dd:32:9e:23:62:47:19:83:f8:
db:c4:6c:ec:2e:1e:7d:35:ff:2d:b2:0c:a1:ea:da:
45:b0:39:d5:55:ee:1a:20:28:d2:87:bc:1a:77:4b:
49:0d:1f:82:39:07:ad:a1:0e:69:dd:1d:11:e4:4e:
fc:b6:19:a5:1c:6e:53:de:ac:86:66:61:55:31:f1:
a2:88:9c:65:9e:93:1a:36:ef:43:2b:3b:a2:a8:32:
81:ff:1f:2d:db:5b:23:11:ae:8d:8f:b6:76:7b:18:
90:72:b8:b9:21:f5:f9:32:10:db:33:03:20:cf:99:
e8:7e:96:b8:69:88:ec:b7:e9:e3:a5:76:7a:a8:6e:
5b:54:e7:49:85:5c:19:01:21:0b:52:97:72:92:e7:
54:0d:46:8d:1c:a4:04:7d:62:24:72:02:56:c5:19:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:94:11:64:06:CC:39:E6:75:AF:F3:7C:A4:3A:3D:2B:4D:AA:0B:2D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mpQRZAbMOeZ1r_N8pDo9K02qCy0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.32.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:75:f6:d3:83:03:fb:f8:ea:b8:d1:9f:0c:45:b7:be:3a:95:
85:c9:b7:d1:93:12:2d:e6:76:f1:00:25:c7:22:da:61:0e:46:
7a:85:95:30:e2:29:2b:0a:70:95:2f:a3:77:d7:41:91:ac:04:
f7:44:ef:3c:15:c2:16:75:67:82:ca:10:ed:ec:78:20:b7:80:
7c:fb:95:7b:40:b7:70:16:f7:be:02:b2:d5:da:07:e3:b0:eb:
ff:f0:d0:d4:05:94:a0:02:a0:cf:c9:57:4a:7b:6c:8c:d8:44:
61:a5:42:d5:e9:1a:77:3b:c8:47:0b:f0:98:4b:da:3b:5f:21:
81:85:01:73:02:5c:19:bd:6e:cb:fe:16:f7:e9:28:e6:b1:44:
27:d9:09:5c:0a:3d:4d:69:82:de:28:9b:77:67:76:f1:6a:96:
93:ab:be:cc:5c:09:b8:73:a9:40:51:98:4f:eb:58:cd:e6:d3:
42:16:d4:45:39:f4:9e:98:48:80:2a:6c:67:14:d5:3f:d6:b3:
08:7c:d8:0b:ee:f2:e0:aa:c2:c6:08:2e:8a:60:c9:83:b9:7c:
a8:00:03:c4:25:9c:f4:5b:13:e8:1d:84:2a:e3:32:bd:dc:31:
53:90:8e:0d:3d:ca:36:1e:42:38:97:a7:d8:2e:4c:5b:c1:78:
76:7e:27:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org