Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6QWTHpbCww114eqegUi0ZRm2cGk.roa
File: 6QWTHpbCww114eqegUi0ZRm2cGk.roa (raw, json)
Hash identifier: 9dqaf5th2suioLgNrqpQqKu14sA1ZWF814gDMDGst44=
Subject key identifier: E9:05:93:1E:96:C2:C3:0D:75:E1:EA:9E:81:48:B4:65:19:B6:70:69
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1037
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6QWTHpbCww114eqegUi0ZRm2cGk.roa
Signing time: Sun 07 Feb 2021 12:43:37 +0000
ROA not before: Sun 07 Feb 2021 12:43:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 123.0.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4151 (0x1037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:43:37 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E905931E96C2C30D75E1EA9E8148B46519B67069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:1a:f4:29:31:2c:ae:60:14:27:df:3b:6c:
d4:8e:22:8b:77:74:c0:c7:fc:b7:53:c7:51:b3:6e:
a1:4a:74:2a:3b:ee:b4:e1:3f:2b:5b:c1:09:da:06:
de:fe:df:8a:95:63:47:e5:3d:24:3c:e7:d8:e8:5b:
ff:ee:58:5e:c2:49:3d:a4:67:4f:1c:0d:bd:45:5e:
59:68:f3:59:21:31:d5:fa:84:53:81:62:bc:53:15:
58:37:42:73:f2:1e:5d:d5:5d:28:5a:9f:f6:c9:aa:
74:e3:ae:9a:01:2f:5d:bd:af:3b:2e:20:a9:dd:c4:
47:2e:27:f9:1e:af:cd:96:ed:24:f8:50:d4:29:c4:
21:53:de:4b:d6:71:ff:ff:76:16:f6:a2:4b:73:db:
7b:16:07:11:ae:d2:88:2e:35:c7:dc:64:e6:52:60:
fe:52:6e:3b:bc:5f:ce:c6:47:75:8d:02:41:cb:a2:
a7:10:5c:80:77:48:0f:55:44:0d:23:84:b3:3a:e8:
fb:54:18:db:0e:98:ec:1b:79:64:13:e5:aa:ea:1b:
da:0b:19:f2:a5:b1:ff:aa:fc:77:e5:5e:b7:63:30:
22:0d:27:65:e0:d2:a9:b8:e9:8a:e9:4b:c3:e8:ed:
cb:32:8f:80:d5:d4:e2:b1:1e:26:a2:dc:00:a4:64:
7d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:05:93:1E:96:C2:C3:0D:75:E1:EA:9E:81:48:B4:65:19:B6:70:69
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6QWTHpbCww114eqegUi0ZRm2cGk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.44.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:3b:76:b9:b9:60:dd:70:a6:d2:2b:25:95:44:3a:cc:30:b1:
81:07:94:d1:ff:a7:cd:31:0f:8a:74:44:ae:f0:d9:fe:50:19:
c2:ec:48:08:0a:66:e2:f1:e6:da:61:d2:84:d6:5f:21:c6:1b:
92:b7:35:0f:87:c2:c4:73:a7:76:61:f6:6a:95:2c:84:80:e1:
4b:54:58:a5:db:0e:f8:74:ae:96:3c:be:3f:19:00:60:c2:07:
3d:b6:db:46:c1:0f:d0:85:66:f6:61:5e:a6:c2:b8:ea:3e:dc:
4f:6e:2f:b3:c0:a8:4e:04:80:2d:0f:94:f5:6f:16:bf:3f:2e:
62:8b:26:ca:6f:8e:17:77:3c:38:b8:51:50:38:46:34:a2:c9:
eb:98:41:7b:b8:78:be:1c:06:48:1a:a9:d2:4a:d2:fb:86:b1:
01:f6:61:8b:5a:43:00:85:05:6d:69:07:ab:ad:22:87:ea:39:
54:c5:0a:13:bb:cf:45:09:cc:0c:73:08:e4:a1:6a:fd:91:84:
ac:6a:de:b5:61:34:1d:79:72:3e:d4:74:75:8f:ec:d5:44:96:
a8:44:b6:e5:38:bf:99:b7:8e:53:09:e6:c1:d0:7b:b4:8c:15:
cf:87:2b:da:42:d2:96:bb:3a:9c:9b:19:54:84:7a:ee:34:0f:
60:9f:ae:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:33 2023 by rpki-client on console-ams.rpki-client.org