Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zBOUGgxEit7KADgUYprLzrSCAlk.roa
File: zBOUGgxEit7KADgUYprLzrSCAlk.roa (raw, json)
Hash identifier: UaSeSDNRRsDWZN9m0sYG6MaJLMuM6+m558kBjiqzs3w=
Subject key identifier: CC:13:94:1A:0C:44:8A:DE:CA:00:38:14:62:9A:CB:CE:B4:82:02:59
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B3C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zBOUGgxEit7KADgUYprLzrSCAlk.roa
Signing time: Tue 29 Sep 2020 10:08:11 +0000
ROA not before: Tue 29 Sep 2020 10:08:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 124.6.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2876 (0xb3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:11 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CC13941A0C448ADECA003814629ACBCEB4820259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:05:7e:60:93:a1:c7:d2:6d:44:fe:bc:fa:
bf:be:05:3f:cd:be:59:fe:2a:cd:a0:08:da:6b:87:
bd:55:9d:13:7f:19:ef:fb:5f:52:fc:5a:e9:50:f8:
7e:c4:13:9b:32:07:c8:1f:ce:12:d4:01:3d:e0:3d:
98:7e:e6:15:2e:33:95:17:99:e5:89:fe:da:29:26:
28:95:8d:8f:8d:12:02:35:20:f4:44:fd:d1:d5:05:
18:05:b1:79:dc:9c:44:7c:65:93:01:71:b4:77:83:
e7:d6:58:93:a6:b8:fa:db:9c:ed:a1:63:b2:cb:8c:
ea:02:95:00:65:b6:8a:a6:f5:d0:79:a0:ab:25:9f:
0b:8b:39:40:e0:92:4e:b5:ca:41:bf:a8:9b:ed:af:
62:a3:53:08:24:63:de:5e:cd:5d:69:d9:4b:af:a0:
2d:eb:fc:20:f3:eb:b8:72:0e:f0:e1:5b:e4:a6:17:
b4:f6:cf:1f:f0:58:79:97:18:4c:41:cb:6c:c8:86:
bd:8b:a3:0e:fa:c3:ed:cb:ff:12:cb:88:87:fb:d3:
34:8a:0a:83:06:55:23:d6:0f:bf:2d:77:5c:63:8f:
8f:ea:ef:67:8e:74:ed:bf:c1:a7:67:56:b6:f5:25:
73:52:db:90:79:d1:12:76:39:ec:bf:98:32:80:ab:
cd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:13:94:1A:0C:44:8A:DE:CA:00:38:14:62:9A:CB:CE:B4:82:02:59
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zBOUGgxEit7KADgUYprLzrSCAlk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.28.0/22
Signature Algorithm: sha256WithRSAEncryption
70:e4:80:b7:13:af:a4:00:bd:46:7f:74:0e:e5:aa:49:11:32:
66:2f:90:46:6f:33:2a:3f:c5:7f:5a:0e:90:b4:e1:f3:b9:94:
d8:65:14:73:44:e1:44:bc:21:64:69:f7:32:81:03:a8:c7:09:
2e:f9:1a:9b:28:9a:53:c3:26:da:c1:fa:18:91:06:6c:14:c7:
2e:87:e2:8f:2f:2e:c9:f1:b2:87:17:7f:6f:3e:f6:b8:e5:6e:
9a:8a:19:9b:df:6d:36:6d:32:62:b9:10:ba:d6:3f:3a:0a:66:
b9:dd:87:cc:1b:84:c5:cc:83:82:8a:92:68:40:ff:45:90:12:
79:a0:5f:0a:ec:10:3c:9c:db:33:88:54:02:b1:b8:90:0e:ab:
47:ac:62:b8:8f:fa:fd:f3:49:31:d1:2a:94:61:49:4f:8f:d5:
06:03:cb:eb:39:07:2c:ed:e6:61:af:3f:2e:67:0c:be:22:e5:
34:68:32:dd:ee:62:d1:66:40:7f:bf:7c:9d:28:ac:6b:f7:21:
2f:37:49:b6:3f:99:01:2c:86:0b:a6:0b:10:32:c1:c1:5b:79:
23:60:84:5c:5c:25:a9:f2:df:2e:b7:1a:f6:3d:e5:14:0b:06:
e1:93:02:9e:93:04:c0:80:77:8f:d0:7d:91:db:55:0c:74:dd:
c3:39:13:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org