Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5yjEtxGo5YPgA38fbjqLAsI4pX8.roa
File: 5yjEtxGo5YPgA38fbjqLAsI4pX8.roa (raw, json)
Hash identifier: 6lwmtvdXFBXI/6fdyFwGPSAmm0Dj+AFVM+1nc/3Nn48=
Subject key identifier: E7:28:C4:B7:11:A8:E5:83:E0:03:7F:1F:6E:3A:8B:02:C2:38:A5:7F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1914
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5yjEtxGo5YPgA38fbjqLAsI4pX8.roa
Signing time: Sat 22 Oct 2022 06:06:05 +0000
ROA not before: Sat 22 Oct 2022 06:06:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 122.100.72.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6420 (0x1914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E728C4B711A8E583E0037F1F6E3A8B02C238A57F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:81:54:99:3e:aa:ee:93:a9:28:e9:c9:c7:
1e:c2:bf:ec:a1:4e:bc:56:52:00:03:82:a8:bd:12:
93:16:6c:02:ea:a4:3b:e2:68:e9:36:45:f1:be:e8:
ae:9f:09:8e:2f:03:fe:de:e5:73:e8:3f:bc:09:d4:
76:8c:8e:80:bc:93:5e:aa:00:8a:a4:d4:30:6b:70:
63:be:e6:c5:92:82:a1:92:b9:57:de:a9:e6:5b:e9:
70:af:3a:9d:92:37:05:d3:e5:df:4f:4e:ec:45:85:
b8:83:08:42:45:61:46:14:e3:8b:4a:da:03:d0:54:
7d:a5:4a:7f:ca:61:15:79:50:b4:1f:b4:93:a9:9c:
3f:60:05:76:59:83:ea:89:4a:1f:78:f0:ee:1b:da:
cc:8a:f0:bf:28:30:19:b7:d3:31:9d:3b:e2:1e:1b:
f4:3d:83:c9:b4:b4:4e:9c:0b:1b:bb:26:b9:11:09:
47:29:40:f0:5c:53:3b:7a:c7:b8:b4:2f:61:2f:a3:
d8:71:e9:68:25:78:04:36:e3:48:59:b9:2c:5e:fb:
63:f2:08:e6:c2:dc:2d:1a:b4:8f:90:ce:44:16:d7:
01:63:01:95:72:b8:f9:67:83:47:15:a4:89:f3:9e:
63:6a:a8:b1:98:08:c7:10:32:d9:7f:cb:2b:9a:53:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:28:C4:B7:11:A8:E5:83:E0:03:7F:1F:6E:3A:8B:02:C2:38:A5:7F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5yjEtxGo5YPgA38fbjqLAsI4pX8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.72.0/21
Signature Algorithm: sha256WithRSAEncryption
10:a3:6a:96:0e:ed:98:2e:52:df:ed:d3:28:09:95:6c:99:0c:
58:67:d7:bf:0c:4f:ac:da:12:a8:93:b4:91:c4:1e:10:1f:ce:
e3:6d:e1:de:e2:5f:78:b4:54:bc:7e:5d:82:49:62:35:1c:83:
e2:19:fc:79:6b:73:7e:86:09:7d:73:94:86:6e:b7:20:2c:80:
c1:68:ea:4d:27:96:bf:f3:b2:d7:47:c6:b4:81:8d:3e:19:c5:
a3:44:38:85:07:d1:41:ed:a2:e7:6a:61:c7:84:54:a9:14:07:
62:52:ba:a7:b8:40:c3:35:43:3b:87:09:38:fc:69:6e:13:d4:
85:a1:c1:61:5a:14:4a:0d:df:15:2d:53:2c:da:e3:8c:65:3f:
cc:33:15:86:a5:f5:39:2c:b0:14:d3:b5:08:ed:c3:05:85:e9:
e1:72:ca:74:6c:b0:00:14:4a:58:0a:6b:76:8d:67:1e:0a:3e:
e5:d7:5c:ca:ef:b1:37:4d:37:6c:cb:0a:e0:ae:8b:c7:26:2f:
cb:52:3a:72:86:60:f4:bb:96:a2:c9:3a:21:9f:75:0c:ed:0d:
a5:ff:ef:99:9a:b9:c3:a6:a9:ec:4e:e0:c2:c9:bd:9e:3c:c4:
8d:71:72:3f:e3:9f:a5:77:49:67:8f:65:f5:5e:fa:06:97:be:
ea:3c:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org