Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oK-mGgLrYKZ4N1Sh7gqoEwIxeks.roa
File: oK-mGgLrYKZ4N1Sh7gqoEwIxeks.roa (raw, json)
Hash identifier: zjtDu90SYpgSqzIn2/PPrvqrm4lbCQsFKgi0vNRkGlw=
Subject key identifier: A0:AF:A6:1A:02:EB:60:A6:78:37:54:A1:EE:0A:A8:13:02:31:7A:4B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1263
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oK-mGgLrYKZ4N1Sh7gqoEwIxeks.roa
Signing time: Wed 29 Sep 2021 02:54:31 +0000
ROA not before: Wed 29 Sep 2021 02:54:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 122.100.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4707 (0x1263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A0AFA61A02EB60A6783754A1EE0AA81302317A4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:8e:fa:8a:ce:07:bb:12:a8:6c:40:e6:88:
50:05:e5:34:b7:0c:7e:41:a0:2b:1d:f9:49:6b:f6:
bd:b0:ba:96:1e:bb:59:c1:7d:66:43:26:16:b4:de:
f9:91:dd:86:0f:fe:64:d3:d4:b7:fc:7d:29:08:c1:
d0:a1:0c:09:fa:c9:39:84:31:1a:69:77:2a:b4:16:
45:70:5b:d3:18:4d:ff:60:cf:4b:d0:42:a8:06:37:
56:9a:43:91:78:47:fa:bc:f8:ea:73:02:ec:aa:d9:
95:ef:13:12:9b:0e:b2:0e:5d:0e:73:e3:70:53:18:
69:1a:ad:f5:1e:bd:52:8b:cb:57:d0:1b:9b:3a:89:
2c:7d:89:f2:5e:44:9e:64:f2:64:e3:2b:b4:6a:6b:
ce:be:b5:74:cb:db:54:5e:06:24:87:33:b6:53:f1:
43:39:ec:20:86:1f:f3:78:5c:29:9b:9e:b5:4e:0d:
33:16:2e:07:de:25:92:1a:ca:71:32:11:ea:01:06:
8c:52:09:78:86:97:6f:79:6d:58:23:e8:16:8a:dd:
6a:7e:b1:86:8b:c4:88:08:53:9e:d6:e6:e1:8b:db:
0a:c1:d1:11:a9:f6:cd:c9:9c:4f:f7:d7:7e:da:8d:
27:1c:c0:62:1d:fd:e0:23:7d:15:a3:cd:7a:f3:3a:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AF:A6:1A:02:EB:60:A6:78:37:54:A1:EE:0A:A8:13:02:31:7A:4B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oK-mGgLrYKZ4N1Sh7gqoEwIxeks.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.96.0/19
Signature Algorithm: sha256WithRSAEncryption
37:42:d2:9f:a2:3a:ca:b2:ee:c8:7e:c3:39:dd:65:56:1c:ab:
ab:b9:ee:0c:6e:f5:fd:d6:92:e9:75:fd:16:cc:d6:37:09:80:
1d:72:2b:8a:84:c9:b3:46:20:77:37:3a:4f:55:03:1f:c7:87:
ab:f2:4d:95:f7:4e:ac:cb:d1:09:66:37:70:4f:5f:f7:28:94:
73:cb:98:ee:7f:c3:10:cd:2d:a4:95:ec:af:81:88:75:b1:1a:
f1:50:64:9a:94:ce:23:78:0e:ce:64:a6:b9:d5:37:01:ae:df:
6a:55:b2:38:cd:18:7b:e8:0d:0f:83:1d:db:26:bc:79:36:c0:
75:a2:70:37:a4:9c:52:0c:60:63:7b:52:1f:97:b6:17:8e:7c:
b8:9b:db:b8:c9:0a:86:62:6d:f0:36:99:17:5e:a5:aa:51:8b:
a4:58:d3:b9:08:39:62:a8:91:c7:8e:e6:0b:cf:a1:93:86:3a:
8a:67:2e:61:91:fe:c6:d8:80:2d:07:a7:bd:6b:58:a7:12:80:
12:27:dd:31:fd:e2:f7:60:73:cb:eb:24:03:19:c2:35:86:d1:
c7:76:99:49:32:34:9d:5f:94:3f:98:57:16:b2:03:17:81:b3:
8d:7e:94:b8:8e:bd:e3:db:97:62:55:28:60:0e:d9:df:ab:7c:
8c:8e:56:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org