Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mw5z3694UQmqC9RQGZYYYWTh1ZU.roa
File: mw5z3694UQmqC9RQGZYYYWTh1ZU.roa (raw, json)
Hash identifier: hGun6vt7U2B+796H25wTWroH1g0MIX/g9BiS956dW4w=
Subject key identifier: 9B:0E:73:DF:AF:78:51:09:AA:0B:D4:50:19:96:18:61:64:E1:D5:95
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mw5z3694UQmqC9RQGZYYYWTh1ZU.roa
Signing time: Thu 15 Sep 2022 02:35:14 +0000
ROA not before: Thu 15 Sep 2022 02:35:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 124.6.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9B0E73DFAF785109AA0BD4501996186164E1D595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:87:30:d8:7a:d1:51:d6:80:95:cb:08:40:
7c:9a:8e:62:b2:4a:31:33:2a:e7:e5:1b:10:da:89:
ad:a6:e7:97:53:6e:b0:b8:4b:d5:da:0b:c6:78:b4:
c2:c5:ca:59:17:6e:da:c8:24:26:50:48:15:03:7d:
68:b3:fd:cd:0f:11:94:ea:f4:b1:97:ee:ad:60:83:
e0:63:cc:11:a2:33:fc:39:de:77:32:d1:10:d3:4d:
a1:c7:e8:f6:a1:65:e2:35:b1:db:58:77:4a:00:1e:
73:a7:0a:af:8d:14:51:3c:e3:35:56:a7:d3:40:b2:
0b:80:c7:c4:67:80:a7:45:66:4d:6b:be:7c:83:be:
b5:77:5d:08:a6:cb:21:aa:2b:1d:76:cb:49:e7:54:
68:24:e4:fd:d7:fa:0f:c2:91:cc:33:5d:59:06:20:
79:13:10:68:c0:f8:47:20:85:0d:b4:71:de:32:ce:
59:47:ab:bf:fd:b8:37:b3:54:e1:1b:0d:a0:ab:87:
71:b1:1c:f2:6f:d0:86:d8:0e:ae:e8:26:7a:65:ae:
f5:73:17:fc:3c:20:1b:32:37:ac:fe:83:9c:dd:0c:
32:2c:01:ac:3d:f9:72:87:18:13:9f:19:bc:61:3b:
72:f0:de:44:23:3e:5c:19:17:1b:6c:eb:a3:de:c5:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0E:73:DF:AF:78:51:09:AA:0B:D4:50:19:96:18:61:64:E1:D5:95
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mw5z3694UQmqC9RQGZYYYWTh1ZU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:6d:d8:b4:4c:af:b1:b9:a4:67:f3:87:90:0a:ec:6e:28:4e:
0a:7b:91:1e:39:0f:3d:99:87:55:c7:2e:60:7b:e7:cd:5c:76:
43:d5:45:96:60:d6:a5:2a:b3:60:82:21:4d:82:0f:f6:e0:3b:
06:7d:0f:ce:be:c6:4d:be:59:e5:e9:f4:fb:eb:4e:13:51:67:
8e:84:0f:47:ec:35:5e:b0:7f:1a:32:77:07:d8:a4:f9:e3:90:
7c:11:15:9c:ae:50:b7:2c:f4:57:36:9d:db:f9:ef:70:69:cf:
c3:39:03:72:d9:ab:21:e0:3a:20:e9:95:e4:0f:16:7a:49:7c:
32:04:95:80:2f:74:23:d5:ea:b7:0b:54:ce:fb:80:85:9f:3e:
68:2f:92:33:fc:8c:5d:47:6a:19:eb:22:2f:93:d3:7b:f7:ea:
e3:a2:b3:91:af:56:57:e2:5b:24:06:29:b1:a6:08:01:1e:76:
19:bb:02:04:72:9a:06:4f:c4:56:ee:dc:72:2b:f9:e1:bf:70:
ca:1a:fc:4c:8e:bf:68:6f:6e:c8:3a:3f:fc:09:0b:44:92:b2:
16:0c:26:5f:1b:de:ea:32:ae:23:93:c6:cf:4e:30:6f:9f:6a:
c8:0f:c9:6f:22:9b:46:0e:3a:b5:4f:07:42:ee:8b:83:96:af:
6e:e0:23:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org