Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0eMQTN1bnyyzaYevzK6NQ4oic28.roa
File: 0eMQTN1bnyyzaYevzK6NQ4oic28.roa (raw, json)
Hash identifier: S9XCv4o3qjz3QXaY0gM/D+OmDCcbkhYnel4oCEQyCpM=
Subject key identifier: D1:E3:10:4C:DD:5B:9F:2C:B3:69:87:AF:CC:AE:8D:43:8A:22:73:6F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0eMQTN1bnyyzaYevzK6NQ4oic28.roa
Signing time: Thu 15 Sep 2022 02:35:48 +0000
ROA not before: Thu 15 Sep 2022 02:35:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 122.100.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D1E3104CDD5B9F2CB36987AFCCAE8D438A22736F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:af:85:cb:5f:c4:19:61:72:44:57:39:96:
e3:65:a9:25:19:88:8f:30:74:4a:b5:ed:2c:d3:0a:
d6:de:52:06:37:86:d8:57:40:82:9b:22:d4:63:5d:
a6:aa:e3:10:b5:61:de:f8:58:24:aa:11:5c:ef:80:
c9:27:0a:df:8e:84:80:11:a0:37:2d:f1:16:87:eb:
42:40:35:d4:15:93:16:d0:c3:3a:0f:34:ba:3d:37:
33:4e:65:71:a0:31:5a:2f:98:81:e2:82:a0:e3:a0:
b9:8a:a2:c6:c2:62:b6:73:60:49:53:d5:b6:be:8c:
a1:c7:90:4f:f0:b7:04:00:52:7c:bf:0b:7a:5d:b8:
6c:50:87:dd:62:5a:07:97:02:ef:63:61:f5:cd:88:
41:de:d0:6e:13:08:02:d4:65:ae:89:2a:dc:2f:03:
15:b2:36:36:28:72:05:90:40:c6:bb:30:b7:b7:7c:
5b:4f:8a:4c:70:b1:66:9f:8d:db:72:61:24:eb:d1:
05:74:bb:63:bf:fa:71:a7:ce:f3:b1:f6:0f:60:b5:
9f:d6:10:5a:0e:10:bc:82:60:e1:a6:70:9f:39:62:
c5:26:b2:26:d4:31:f0:30:4a:d7:60:8d:c6:a7:5e:
b0:6a:a8:0f:42:c6:d4:b4:b5:0f:c8:24:80:b8:e7:
79:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E3:10:4C:DD:5B:9F:2C:B3:69:87:AF:CC:AE:8D:43:8A:22:73:6F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0eMQTN1bnyyzaYevzK6NQ4oic28.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.96.0/19
Signature Algorithm: sha256WithRSAEncryption
85:4d:68:48:0f:4d:f1:42:72:46:5e:07:f4:f0:d5:cc:d5:25:
b0:a5:3a:08:c9:2b:42:4e:42:f8:62:dc:dc:72:73:27:82:4a:
ce:6f:60:b0:6e:fc:05:21:bf:9b:b6:84:1a:c8:d2:a0:c7:7c:
10:4d:1f:00:72:2a:9a:a7:12:c0:14:4b:63:34:67:15:30:17:
6b:fb:cb:81:73:08:72:12:40:16:bd:d3:cd:e3:98:dd:57:36:
98:b1:9f:e3:8c:a0:ce:4e:fc:08:ab:69:6c:17:38:a0:43:8b:
63:09:00:d9:37:5d:76:de:26:f5:93:0a:34:85:a8:31:7f:2a:
1e:45:d5:a7:e2:4d:f5:98:8e:93:25:d0:df:b6:6d:bc:5f:a4:
bf:df:05:d0:ae:e1:c1:4e:bd:6c:76:a3:ec:6a:f6:31:d2:c9:
8f:c7:4b:21:18:9f:0e:98:07:a4:ff:39:8b:2a:16:fa:57:66:
5c:11:3d:48:e6:20:f1:14:3c:c3:98:76:89:e9:9e:ac:08:84:
35:25:d2:13:e9:47:fe:a1:4d:b4:bc:e6:d1:4a:23:66:67:08:
2c:60:71:d7:6a:7d:af:47:d0:44:56:ae:9b:76:0e:86:ef:ad:
42:31:b0:39:ac:72:b6:a9:3b:37:9b:54:11:69:13:51:01:4b:
27:13:19:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org