Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ysK_0GJVZKB2EXmOp84Bb6O6v9Q.roa
File: ysK_0GJVZKB2EXmOp84Bb6O6v9Q.roa (raw, json)
Hash identifier: hz6x4GOvzMpKzF9BUwOYvhn28yGtzHsSEfyDlCmuYBY=
Subject key identifier: CA:C2:BF:D0:62:55:64:A0:76:11:79:8E:A7:CE:01:6F:A3:BA:BF:D4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0A9F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ysK_0GJVZKB2EXmOp84Bb6O6v9Q.roa
Signing time: Tue 29 Sep 2020 10:07:25 +0000
ROA not before: Tue 29 Sep 2020 10:07:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 122.254.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2719 (0xa9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:25 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CAC2BFD0625564A07611798EA7CE016FA3BABFD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:1b:b0:d2:22:1e:13:9a:44:d6:6d:1e:89:
e5:7d:b5:14:02:6c:3a:37:ce:55:35:10:74:c2:52:
c7:4b:46:22:ee:06:40:a1:51:25:d1:29:aa:d4:3f:
1a:07:cf:a3:fe:dd:82:39:80:a0:8c:29:86:31:fa:
13:79:e6:6f:93:a4:84:5c:52:ea:fa:1a:12:c2:65:
c2:50:de:20:cd:f9:85:1b:91:7c:41:76:45:5c:bb:
6f:5f:1c:c5:0c:b5:95:62:cf:80:88:83:b4:c1:bf:
8d:d2:8c:e9:5f:48:2e:d3:73:59:f2:16:65:41:9c:
b4:3b:e6:d9:1e:64:34:e9:39:e3:86:ce:06:49:a7:
f3:9c:39:ec:d0:2b:b4:80:79:00:1f:16:86:91:62:
97:b8:a5:d3:13:11:07:26:bb:73:dd:b3:56:ab:80:
2e:28:87:98:65:78:e5:06:c2:20:34:ed:9d:73:6e:
39:d5:1e:61:fb:89:b9:07:63:6e:74:67:50:ad:c3:
9e:04:1f:da:75:56:8b:a7:e9:f0:5c:46:21:f6:e7:
ae:bd:f6:98:92:1b:c2:53:de:fb:49:5e:0b:6b:e4:
ba:d2:d4:11:2a:cf:41:ef:0d:2f:98:d6:63:d6:78:
06:a7:a4:4f:ad:01:a6:bc:97:cb:6c:2f:41:19:f0:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C2:BF:D0:62:55:64:A0:76:11:79:8E:A7:CE:01:6F:A3:BA:BF:D4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ysK_0GJVZKB2EXmOp84Bb6O6v9Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.40.0/21
Signature Algorithm: sha256WithRSAEncryption
33:88:ca:92:1e:35:89:a3:ba:e8:db:3c:cc:af:26:e3:dc:05:
0b:0a:c4:91:6d:af:92:d3:eb:d4:99:3d:56:b1:42:d1:6b:be:
fc:f6:62:4b:62:fe:b5:6e:8e:95:be:96:ae:c4:4a:74:8b:b2:
23:26:ee:b0:b7:e6:10:3f:a9:25:db:f2:35:43:39:d1:9b:20:
b0:d3:24:50:ab:3c:7e:6e:f7:ad:4d:48:7d:a3:fc:fe:ad:5b:
d3:e5:89:c4:14:10:bc:ff:33:f2:f1:0b:15:9e:23:28:56:62:
dc:49:e4:af:43:36:19:96:46:48:56:ef:82:fd:50:ff:a0:63:
ce:d4:15:d7:4e:ff:1c:48:ca:55:f8:06:09:dd:cf:2b:c7:40:
dd:4f:b8:1d:8c:72:0c:57:64:07:25:9d:85:8b:13:df:2b:86:
55:04:29:ce:c6:3b:52:bc:e0:41:87:63:9a:51:ec:18:9b:2b:
6e:f9:f9:cc:ec:f2:83:86:7c:ad:7d:39:8f:d3:c9:35:94:c5:
2a:3e:99:a0:45:68:f7:ea:af:da:21:27:19:e9:35:54:bf:e2:
f3:97:fe:14:fb:47:06:26:f7:89:1e:40:09:ba:d8:59:90:f0:
b4:2c:db:ee:9d:25:f9:0d:c6:e1:e5:04:11:cc:a2:03:ce:1b:
6f:2a:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org