Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0Z-j3-IvG2hCAGo6cJEE6EcLkn4.roa
File: 0Z-j3-IvG2hCAGo6cJEE6EcLkn4.roa (raw, json)
Hash identifier: Ji0Wpdgc+5+omgbv43lkyUIKaRQmXz9HHi7B5Krz5bM=
Subject key identifier: D1:9F:A3:DF:E2:2F:1B:68:42:00:6A:3A:70:91:04:E8:47:0B:92:7E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1998
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0Z-j3-IvG2hCAGo6cJEE6EcLkn4.roa
Signing time: Sat 22 Oct 2022 06:06:43 +0000
ROA not before: Sat 22 Oct 2022 06:06:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 122.254.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6552 (0x1998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D19FA3DFE22F1B6842006A3A709104E8470B927E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:43:90:1d:7e:d2:f3:84:9e:34:c3:86:e6:
48:12:83:d7:d3:83:f6:cf:53:27:82:ad:f9:80:e5:
39:5c:6f:78:e0:ef:a7:ce:b4:53:b9:1d:af:04:03:
90:17:b4:71:97:a4:19:94:47:32:d5:86:3f:6c:47:
0d:ad:13:a0:1f:df:61:10:25:c8:c9:21:ab:61:a7:
d8:84:83:5e:fe:3a:8b:02:e8:4f:37:6c:b6:d3:a0:
f4:a7:d5:5d:46:d2:aa:3b:d0:bd:2e:e4:df:57:02:
e5:d2:ca:60:49:70:09:0a:d5:4e:45:13:5a:9f:2b:
f0:5d:2c:9b:41:b1:29:90:cb:34:c4:49:e6:73:78:
72:f3:3f:1a:4a:50:e7:76:0f:19:59:9a:f7:08:6f:
c2:75:4f:77:ff:fb:c7:a4:3d:ec:25:7b:e1:d8:ac:
f0:1a:81:b2:4b:4f:5f:29:19:c6:a7:2a:23:16:4e:
c8:70:81:3a:81:56:10:da:9e:68:ab:f7:59:7b:03:
96:73:67:bd:6b:68:da:c0:13:fb:07:74:a3:ac:64:
00:eb:be:23:84:5d:d5:eb:a5:91:88:7d:78:14:d5:
c9:5f:a1:b6:4b:07:d2:c1:6a:2c:24:c1:3f:37:b3:
03:53:05:d2:2b:b5:f3:c1:a9:50:b5:d8:e0:2b:ba:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9F:A3:DF:E2:2F:1B:68:42:00:6A:3A:70:91:04:E8:47:0B:92:7E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0Z-j3-IvG2hCAGo6cJEE6EcLkn4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.40.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:e3:0d:75:6c:93:3f:00:52:78:76:aa:fd:7f:dd:fb:cb:c1:
c3:36:da:02:b7:94:ca:8b:67:17:73:22:92:6e:36:e3:51:53:
da:a0:bd:bc:35:8e:ac:7b:29:f1:ed:1f:d8:32:16:2e:cf:3c:
73:33:ee:09:eb:48:37:f0:0f:3a:fa:fb:dd:fa:24:56:77:26:
14:3e:79:5c:95:42:07:04:a1:18:57:66:d6:b4:74:a8:59:ed:
ae:29:bf:97:8f:15:9a:ea:86:47:53:2c:1a:19:37:99:58:d6:
53:d1:32:1f:11:37:40:a0:40:0b:de:dd:18:3e:27:06:58:b0:
59:12:d6:1d:68:9e:86:88:ab:40:66:43:0e:d8:31:34:37:8d:
f6:b8:20:d3:30:14:40:4f:6f:f2:49:4a:12:9a:05:ff:ee:13:
ea:82:22:f5:38:2a:c0:7b:65:1c:fa:54:0e:60:5c:5f:44:8c:
78:eb:50:93:ea:06:80:8e:ee:ab:b3:4e:e8:cc:13:d9:e8:e2:
58:ea:55:73:7c:09:ae:62:91:65:b1:02:90:60:08:c8:ca:50:
ce:1d:c3:dc:2f:d2:d7:6f:92:83:d4:d7:9b:d1:7b:86:e4:95:
4c:e4:82:86:43:df:09:d6:bf:9d:22:fd:bd:8f:af:18:24:18:
37:d1:52:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org