Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ybo54G9Hfn87m1-UmldmKM1T24I.roa
File: ybo54G9Hfn87m1-UmldmKM1T24I.roa (raw, json)
Hash identifier: 7U/m8D+Oqf0G6BNbmSqOfM88eqsBrQm1k+qFkhynsco=
Subject key identifier: C9:BA:39:E0:6F:47:7E:7F:3B:9B:5F:94:9A:57:66:28:CD:53:DB:82
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1768
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ybo54G9Hfn87m1-UmldmKM1T24I.roa
Signing time: Sat 22 Oct 2022 05:36:55 +0000
ROA not before: Sat 22 Oct 2022 05:36:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 124.6.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5992 (0x1768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:36:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C9BA39E06F477E7F3B9B5F949A576628CD53DB82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:bd:fc:ba:de:64:50:e3:72:de:ae:e6:83:
71:b6:e9:ae:02:a3:92:0d:b6:cf:18:e9:d8:20:e3:
23:7e:32:6c:d9:8e:93:34:1e:91:ed:e1:b5:a7:05:
a8:00:7e:e9:e2:29:05:99:ef:99:45:69:4f:e3:79:
3e:54:bd:31:d6:b0:fa:01:a1:57:ac:9a:ea:7d:66:
4d:1a:bc:c1:1c:d9:ee:3e:09:a2:c6:b2:37:b7:f2:
6d:85:67:f6:a7:cf:35:ce:da:06:ba:51:36:c5:c6:
7b:2e:78:f6:24:ef:5a:ec:fc:50:06:77:1e:c8:fc:
02:38:d3:25:2a:03:0f:a8:16:72:60:33:b5:b8:06:
63:4f:a5:d1:bb:aa:b0:5a:10:56:77:d9:15:7c:e7:
d3:bc:30:05:c5:3b:c5:93:2d:cf:ee:13:88:53:c8:
6f:42:4f:15:bb:75:29:5a:27:37:da:33:83:75:39:
6a:0d:6e:09:43:c2:88:48:68:07:0a:e0:02:b9:10:
9d:75:94:9d:8c:f6:e8:56:51:a5:7b:ba:12:da:e6:
72:60:68:26:03:58:5a:32:28:5f:d8:d5:37:1c:15:
26:7a:1a:61:2b:86:e5:2f:47:4e:df:2c:eb:4d:51:
07:6b:9c:e5:85:9e:e2:01:dd:37:f9:4b:34:bf:74:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BA:39:E0:6F:47:7E:7F:3B:9B:5F:94:9A:57:66:28:CD:53:DB:82
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ybo54G9Hfn87m1-UmldmKM1T24I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.24.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:2d:78:50:d9:09:16:db:3b:7c:ce:ff:93:1c:35:1b:5e:80:
5b:a6:84:2b:da:2f:b8:fe:f4:ce:43:3c:a1:2e:01:08:65:b1:
40:e6:a3:8b:00:0b:b5:02:4a:ce:fe:b1:75:b1:ba:e6:9b:aa:
61:3c:10:be:8f:63:2c:93:d0:0b:ed:6c:2d:1d:48:74:fa:f9:
bc:39:74:73:30:f0:85:09:d2:61:cd:b9:91:17:8f:81:2b:3b:
9f:70:17:20:b1:7d:bd:17:35:48:0c:1f:9a:c3:26:33:ab:da:
23:7d:4d:52:98:e6:2d:a2:68:6e:d8:87:c8:0b:1e:58:b8:a2:
fa:7c:28:9e:ab:f9:da:32:6d:3d:93:13:fa:c0:f2:57:92:a8:
be:62:25:11:d0:73:6c:b3:31:2d:36:56:1c:46:14:8c:09:41:
76:ad:b7:72:40:f0:aa:1c:42:cc:de:7d:9e:4c:dd:90:6d:13:
7b:a2:34:ba:c9:c3:d9:1a:93:1b:35:7b:d0:6a:5e:81:0f:f9:
0b:cb:da:21:31:91:45:b3:57:2a:7a:e9:d6:82:0d:53:f5:66:
09:45:74:83:4d:31:ff:b1:dc:e4:21:bd:80:fd:3a:11:fd:3a:
a6:15:a4:d8:69:a6:7d:28:52:cc:70:14:a9:ba:c2:f6:73:53:
b2:97:a5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org