Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pZxtDUqBO4EiYLJKKTAvvNA2U6s.roa
File: pZxtDUqBO4EiYLJKKTAvvNA2U6s.roa (raw, json)
Hash identifier: 4W6vbpsS3yHbDWBff8lqY0z04Z9pY3sVWXK2LbikyMo=
Subject key identifier: A5:9C:6D:0D:4A:81:3B:81:22:60:B2:4A:29:30:2F:BC:D0:36:53:AB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F61
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pZxtDUqBO4EiYLJKKTAvvNA2U6s.roa
Signing time: Sun 07 Feb 2021 12:33:55 +0000
ROA not before: Sun 07 Feb 2021 12:33:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 122.254.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3937 (0xf61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:55 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A59C6D0D4A813B812260B24A29302FBCD03653AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bd:90:25:16:ab:d8:1b:a0:5d:ea:48:73:a1:
b3:43:02:33:ec:61:14:c1:45:2d:18:bd:ef:f7:af:
df:17:cc:79:cb:80:74:26:c2:4a:f0:78:b3:42:48:
9c:f1:aa:e3:d4:c4:9c:0a:41:b2:30:df:94:32:df:
ad:58:9a:10:65:07:31:50:13:36:54:32:02:a7:70:
2d:12:76:c9:cd:0a:f7:c4:66:af:4b:32:d8:cf:23:
45:9a:62:cd:05:10:b6:75:ce:6a:c8:75:08:0e:7f:
6a:37:d5:2c:9c:69:0b:37:80:aa:27:40:87:58:d1:
d4:46:84:b6:44:f9:7b:ad:53:ab:22:da:42:0f:3b:
82:d8:26:08:bc:96:bc:38:c2:40:90:73:35:e3:78:
71:df:74:77:66:c7:36:3f:0c:00:0a:e5:3d:41:fd:
1a:ec:6d:43:45:8c:63:a3:7a:e6:79:7b:2e:ec:e0:
6e:9f:31:fd:8f:e5:75:5f:84:ce:be:2c:5f:5b:eb:
7a:82:61:f9:a6:45:8d:eb:92:fe:78:5b:12:b0:84:
70:aa:28:4a:94:86:4a:43:bf:55:95:23:ef:b7:c6:
68:4a:66:2f:56:ad:77:ae:9f:4f:e4:b0:b7:55:4b:
87:3b:a9:00:3b:26:8b:ef:ba:bf:d3:31:51:32:06:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9C:6D:0D:4A:81:3B:81:22:60:B2:4A:29:30:2F:BC:D0:36:53:AB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pZxtDUqBO4EiYLJKKTAvvNA2U6s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.24.0/21
Signature Algorithm: sha256WithRSAEncryption
53:1a:c8:04:6f:14:45:cd:7d:e5:f3:90:20:d4:37:74:1f:fe:
a8:2c:d7:41:b1:5c:70:08:bb:91:82:9b:b7:9d:81:e0:49:47:
60:63:ed:d2:c0:42:fc:13:92:0a:cd:a3:f5:bf:48:39:59:e4:
d4:eb:c7:94:f5:95:a6:3b:6c:00:a5:88:26:3d:7e:cf:40:f8:
60:f8:32:f3:5c:7b:e6:d8:97:34:bf:93:bd:51:80:44:8e:5c:
20:ab:44:e5:30:e3:99:c0:e5:65:38:8b:2e:3b:e6:7d:61:7f:
c8:9e:53:c9:23:05:14:7a:d9:0b:5b:3c:68:e6:d3:df:7d:6c:
a9:40:a5:da:cb:d2:a2:2b:e3:5e:77:17:91:91:d8:34:6e:7d:
f8:34:24:45:d3:16:70:02:76:2c:61:63:85:9a:7f:32:07:d0:
6d:e9:dd:4e:3e:d8:aa:7b:4d:30:78:6e:e2:ad:f3:43:9f:26:
f7:f7:72:36:a1:21:60:6e:02:c2:df:f5:4b:2d:f1:c2:d6:37:
7b:a2:52:87:39:55:70:f8:19:b9:14:79:e2:08:7b:4b:f3:51:
55:2b:e3:48:93:fd:ad:5a:00:73:12:5d:43:a1:9d:fa:ba:22:
98:03:67:5f:37:6c:9a:44:6b:22:79:13:af:6d:c4:f2:09:0a:
b5:40:09:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org