Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/36E0SPdp75J32qgzVd53tr_c-Qo.roa
File: 36E0SPdp75J32qgzVd53tr_c-Qo.roa (raw, json)
Hash identifier: r1MOh7cnNFTqa5Iehb0DqHuc6k0GRpP+vm3T/qGmciA=
Subject key identifier: DF:A1:34:48:F7:69:EF:92:77:DA:A8:33:55:DE:77:B6:BF:DC:F9:0A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1936
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/36E0SPdp75J32qgzVd53tr_c-Qo.roa
Signing time: Sat 22 Oct 2022 06:06:14 +0000
ROA not before: Sat 22 Oct 2022 06:06:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 124.6.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6454 (0x1936)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DFA13448F769EF9277DAA83355DE77B6BFDCF90A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:2a:2e:e3:57:78:f5:aa:14:c0:bc:07:14:
e7:87:77:91:27:07:43:20:a1:b3:92:33:77:da:c9:
7a:9d:84:bd:cd:59:56:2f:a0:a5:05:ab:b1:ea:33:
6a:c2:40:57:95:a2:4e:f5:ed:10:13:1e:47:96:43:
3d:9a:58:64:f0:a1:01:65:4b:9f:b0:89:00:43:21:
4e:1d:cc:f2:b5:60:78:bc:f1:4e:27:9b:09:dd:7b:
11:d2:74:f4:a1:ae:ea:33:bd:83:2d:3b:aa:e2:27:
8e:e2:f3:b6:05:f3:89:ab:0d:29:cd:67:da:66:7a:
5d:c2:b5:21:aa:58:ef:c3:6c:e9:1e:0e:5c:fb:52:
4c:f1:9e:c2:1b:d9:f3:d5:b2:ea:76:13:1f:84:1e:
f9:13:9c:60:0c:47:05:1c:26:cf:f1:f6:12:b9:19:
58:f4:01:cf:5d:9d:26:78:7b:bf:ef:af:3a:ac:a2:
0f:b6:4c:ec:41:09:62:ef:81:c2:f5:f5:61:b6:35:
73:93:42:40:72:19:f2:18:8b:58:5e:b5:7f:01:fe:
2e:f4:d2:d6:5e:f1:75:e1:5d:30:60:dc:b9:90:2f:
e9:b5:08:6d:f7:5d:c1:15:e7:36:df:ec:1c:29:99:
30:ed:cc:79:b7:5b:79:b6:a9:6c:dd:77:3c:3d:d2:
1b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A1:34:48:F7:69:EF:92:77:DA:A8:33:55:DE:77:B6:BF:DC:F9:0A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/36E0SPdp75J32qgzVd53tr_c-Qo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:cb:29:b1:95:22:37:bd:03:73:7f:53:33:36:eb:f2:b7:2b:
d1:22:1c:19:d1:c8:42:ed:16:89:3c:c9:50:29:d9:fc:11:97:
71:ba:55:43:bd:ee:d3:16:fc:2f:9c:ec:39:8a:4e:fe:0e:69:
70:ad:8e:70:76:0b:b1:6b:44:b2:54:6b:d2:82:a1:48:9a:af:
f6:f6:32:b0:14:df:42:bf:4b:18:1f:00:26:66:15:1e:c9:93:
e9:12:64:3b:47:a6:c8:18:72:40:e7:58:8f:04:1f:70:a7:9b:
be:d2:1d:5b:b8:3e:a3:7e:07:4f:05:eb:ca:ef:6f:3a:d9:7e:
23:95:a5:c0:4a:5e:ed:4d:ee:99:b9:b3:c7:46:62:e4:d3:eb:
94:64:bc:49:3c:d6:8f:91:54:ad:c8:ba:b0:1c:ea:4c:81:e9:
4f:6e:59:f8:be:a2:37:6a:3b:d7:94:91:90:12:7c:ae:f3:23:
2a:4a:6d:81:94:e0:7c:69:22:7c:b5:e7:75:69:be:3b:e5:93:
9a:2f:57:11:52:f9:38:8b:2b:3a:67:e6:b8:1f:85:15:be:74:
e2:41:d9:b1:3c:12:2b:29:f2:65:a7:06:f9:25:eb:ff:0c:a3:
f2:84:a6:92:00:60:af:75:78:9e:2c:db:b5:d2:43:03:1f:42:
9a:f7:69:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org