Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-J_-vNRv5bJVjH3TFINO4aVV_8Y.roa
File: -J_-vNRv5bJVjH3TFINO4aVV_8Y.roa (raw, json)
Hash identifier: 0RZZVnSbHceo1gABkWjocrzeOBLq81hjw70Y6WzMgxo=
Subject key identifier: F8:9F:FE:BC:D4:6F:E5:B2:55:8C:7D:D3:14:83:4E:E1:A5:55:FF:C6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-J_-vNRv5bJVjH3TFINO4aVV_8Y.roa
Signing time: Thu 15 Sep 2022 02:36:30 +0000
ROA not before: Thu 15 Sep 2022 02:36:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 124.6.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F89FFEBCD46FE5B2558C7DD314834EE1A555FFC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:25:7b:a0:68:70:e2:10:c5:a1:98:f6:fc:
bc:19:f8:de:d1:a3:ca:d2:b1:1b:64:42:2a:5c:e0:
c0:68:34:f4:ff:d8:1c:14:71:e2:72:ed:55:b0:79:
33:76:a3:08:5d:30:07:11:2a:26:89:fb:b0:18:d5:
78:e7:3c:19:4b:e1:96:63:52:a7:57:c5:48:fe:89:
33:68:28:58:fb:88:32:a5:7f:08:f1:e6:5d:09:d9:
63:cd:1d:9f:2d:b7:6b:f4:7b:b4:6a:34:97:d1:90:
02:af:12:e2:42:8b:85:ca:07:24:cc:cd:30:64:9d:
78:b6:ad:46:03:40:d9:ec:c0:b4:3d:5f:f8:01:64:
3c:6e:e5:16:07:ab:8a:d1:a3:c9:fa:f2:0b:a6:13:
f7:5b:7a:00:57:66:85:7b:59:d3:73:46:2b:1e:d0:
3b:46:e6:1e:ae:af:3b:7c:93:d3:46:da:54:69:08:
5d:7f:13:aa:9f:96:e9:dd:9d:b3:bd:41:70:ae:14:
1d:5e:81:5b:4c:13:a4:ab:64:31:dd:ee:1e:cf:3e:
b4:23:2f:bb:f8:f9:8f:1b:1d:e2:21:1c:e9:0a:f5:
e9:78:3a:cd:cd:a7:c3:88:5a:d3:e3:32:90:83:40:
60:d8:4c:99:e4:79:11:cf:b7:d3:b3:c1:bd:bf:00:
c7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9F:FE:BC:D4:6F:E5:B2:55:8C:7D:D3:14:83:4E:E1:A5:55:FF:C6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-J_-vNRv5bJVjH3TFINO4aVV_8Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.0.0/21
Signature Algorithm: sha256WithRSAEncryption
04:bf:47:cf:7c:e5:c7:15:f7:26:74:84:d6:bd:b1:44:95:2a:
c6:7b:ab:06:b9:3d:fc:a5:75:fc:02:00:f9:90:ff:a2:91:8f:
32:15:a2:5d:55:dd:74:3c:b8:20:5d:36:55:3f:bb:96:0a:10:
4b:45:e3:94:34:52:af:ea:e3:82:3e:6f:35:74:8e:9f:78:83:
91:e3:41:73:18:aa:fc:5f:2e:08:64:bb:ac:33:49:aa:cc:95:
6d:50:f2:da:10:90:7b:b8:82:91:25:11:26:da:ee:b7:9a:07:
42:0b:4b:02:bb:c3:47:48:fe:e7:34:da:35:2b:6d:9e:b7:ec:
2f:b7:8d:27:77:49:e4:63:d4:ba:dc:e8:3b:2d:61:a6:d0:5a:
98:47:c0:1b:32:ba:0d:05:ee:36:68:f6:33:f7:aa:ee:23:3c:
e9:cb:49:62:9b:b3:f7:b8:b7:9b:9c:20:27:7c:6a:b0:d0:bf:
07:8f:d5:98:2e:a2:7e:32:ca:20:c8:50:24:20:c8:2f:03:93:
9e:8c:6c:7a:b2:3e:5f:45:58:e0:d9:0b:46:38:9c:a6:b9:60:
9a:34:46:d1:e8:81:82:22:3c:72:82:1e:85:ac:c5:c1:ac:fb:
8b:41:62:c1:19:80:77:ca:e7:1e:86:d0:5d:8f:9f:50:1f:2b:
f9:54:33:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org