Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rnHg_hcYB9K0WpFWeFir4Y8nU9s.roa
File: rnHg_hcYB9K0WpFWeFir4Y8nU9s.roa (raw, json)
Hash identifier: Kv/I8zMwQTYcnsSAxzpVJhHgV8P+MCQTDg9+JSAAVgg=
Subject key identifier: AE:71:E0:FE:17:18:07:D2:B4:5A:91:56:78:58:AB:E1:8F:27:53:DB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rnHg_hcYB9K0WpFWeFir4Y8nU9s.roa
Signing time: Thu 15 Sep 2022 02:35:47 +0000
ROA not before: Thu 15 Sep 2022 02:35:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 124.6.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AE71E0FE171807D2B45A91567858ABE18F2753DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:c3:36:1c:1b:55:e9:89:bf:98:ba:aa:14:
68:81:53:83:f6:67:76:1d:a2:ca:7e:ad:a6:55:c8:
95:46:ed:64:46:1b:8a:83:f7:b3:06:b4:79:9e:74:
39:af:a9:80:ec:02:de:e5:ec:c6:ed:da:fb:e6:82:
3d:88:4c:c8:ce:23:70:59:c6:9b:8c:2d:33:e7:f7:
c2:19:92:17:3a:6f:bf:b8:61:50:0f:d5:07:b7:3c:
90:33:fd:1f:10:b5:cc:1f:01:68:b4:f9:d2:4d:f9:
3d:6a:42:ec:25:67:dc:f3:e2:e0:67:ed:15:83:93:
c7:28:a1:ff:60:8e:cd:9e:59:1d:12:b5:39:fa:37:
6f:ec:de:7f:dc:39:e1:4a:20:c8:7b:72:9f:a3:4e:
52:59:60:20:2a:32:6e:89:c2:0f:a1:b6:05:66:48:
2f:f1:74:60:db:4e:a7:c8:ac:24:1d:67:fe:59:25:
40:03:3e:42:c5:20:e4:c1:83:b7:27:33:03:e9:d3:
42:21:f4:be:41:09:b0:e4:02:1c:0f:ec:8c:63:a8:
72:28:78:30:6a:61:b9:36:e9:8f:24:f7:cf:41:11:
a8:da:76:4d:76:75:5c:33:e5:fa:b1:47:19:53:9c:
77:c8:1a:44:86:3d:67:7a:a5:af:a1:6e:4d:af:13:
9d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:71:E0:FE:17:18:07:D2:B4:5A:91:56:78:58:AB:E1:8F:27:53:DB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rnHg_hcYB9K0WpFWeFir4Y8nU9s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.24.0/22
Signature Algorithm: sha256WithRSAEncryption
23:6a:6a:d4:7f:36:a9:06:06:5d:41:96:df:0c:3b:ba:64:74:
a2:d2:8b:9b:0a:04:0d:06:f7:60:85:2d:5b:c2:64:78:96:c6:
d6:89:0d:e3:10:85:ba:14:58:1a:35:cc:a6:11:a3:20:a9:7b:
fa:38:c6:f9:d1:68:4e:75:4d:d1:49:fb:a7:18:cc:44:c4:3e:
4d:88:a4:e8:49:2c:e6:b2:44:22:b2:0b:58:02:c3:63:2b:f8:
92:34:af:b8:92:68:fa:51:b5:d8:f3:50:09:18:0f:08:a8:d4:
3a:10:31:66:4f:8a:4d:0e:9f:c6:2b:7c:fd:8f:ad:59:7f:c9:
fc:d1:d3:60:a5:5b:0c:d4:90:17:16:6e:13:4f:51:3a:3b:ea:
e9:ad:65:82:2d:16:a3:c6:51:67:aa:4e:96:a0:87:1f:2b:e3:
e8:ca:7a:c8:17:95:82:22:26:1a:e2:c4:4b:3f:da:8b:94:49:
e2:2c:7f:69:02:0d:9a:f5:3c:c7:55:90:21:8f:59:74:29:42:
68:97:3f:1f:7e:05:62:6c:80:c8:b4:82:12:61:b2:e1:4f:dc:
23:b5:4f:58:02:c4:04:bc:b1:f4:50:b7:17:55:71:f2:2e:45:
e8:0b:99:37:e8:a4:c1:72:db:b6:6c:3f:12:bb:fa:08:3d:50:
da:21:fa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org