Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8Pu1SQ5sKY1D4qe4NFbujBsmRYc.roa
File: 8Pu1SQ5sKY1D4qe4NFbujBsmRYc.roa (raw, json)
Hash identifier: br3UqMzloj1pRbV7IrpwVixtckEWUi/D+a7fkkuzvjw=
Subject key identifier: F0:FB:B5:49:0E:6C:29:8D:43:E2:A7:B8:34:56:EE:8C:1B:26:45:87
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8Pu1SQ5sKY1D4qe4NFbujBsmRYc.roa
Signing time: Thu 15 Sep 2022 02:35:15 +0000
ROA not before: Thu 15 Sep 2022 02:35:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 122.254.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F0FBB5490E6C298D43E2A7B83456EE8C1B264587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:69:43:3f:a0:1f:40:39:f7:fb:a1:b9:56:
7b:03:df:bc:d5:d3:27:7a:52:07:54:9b:54:25:ab:
74:c8:9b:0d:e5:ea:53:70:f7:91:e6:e8:93:53:df:
a4:2a:89:ba:73:56:7c:85:6a:c3:3f:23:fa:6b:81:
00:b4:5d:78:6d:fb:f7:52:16:8e:cc:f3:0d:1d:52:
2a:9a:6a:41:a5:97:ac:d1:72:53:27:29:04:3d:20:
ee:36:7c:12:c2:b4:94:1a:3d:a2:c8:52:17:9b:0e:
6f:32:ce:b9:39:8f:7f:5d:16:3f:82:e5:0a:28:2e:
74:37:b8:eb:51:3d:85:fa:8e:ce:1e:72:8f:13:87:
99:19:21:b7:8e:ea:2e:6f:81:5b:fe:62:27:2d:88:
43:7d:d7:fa:6f:4b:13:b5:5a:6c:cd:fd:ad:7f:9f:
86:a1:9e:c9:51:cc:0d:fe:3f:68:37:02:be:83:7e:
86:43:ae:34:93:20:6f:52:68:40:66:3a:08:4d:0a:
3e:68:05:2a:72:08:d7:a1:61:05:0a:88:3d:ba:32:
83:28:72:e5:67:0e:c9:ff:15:6b:f7:f9:dd:29:0b:
7b:31:2b:a1:61:86:0d:96:40:38:db:9b:df:c9:0c:
81:2f:90:3b:dc:53:ef:03:ed:55:4c:78:d6:58:16:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FB:B5:49:0E:6C:29:8D:43:E2:A7:B8:34:56:EE:8C:1B:26:45:87
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8Pu1SQ5sKY1D4qe4NFbujBsmRYc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.16.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:6c:02:dc:b3:1d:02:fe:06:37:65:07:c0:08:87:bc:c6:1b:
74:b0:3d:98:18:f0:d2:5c:e8:b1:fd:2d:9f:89:b1:ee:43:6a:
45:14:5e:3a:d3:9e:13:24:62:fd:47:e2:b1:05:cb:16:86:a6:
a9:a4:b9:5b:95:d8:60:43:80:06:0f:34:fe:b2:f1:26:0d:98:
58:7a:24:b5:e6:62:de:66:d3:fd:0c:d5:86:8a:46:11:df:06:
0b:ff:ca:7b:1c:3f:22:f4:0f:da:71:e8:93:b9:9d:68:20:a3:
c5:10:93:f6:4b:fb:4b:32:83:69:6b:50:14:33:01:8a:2a:8e:
a5:15:be:d7:6a:df:69:18:bd:80:59:2f:4d:63:ae:e9:17:18:
3f:f3:ab:e7:2d:e0:57:df:fd:96:40:45:f8:85:63:b3:fb:4d:
50:66:59:41:85:24:14:01:e6:45:d1:09:92:06:b2:d2:8f:a7:
32:cd:66:96:c5:79:1f:64:00:17:65:49:8b:81:48:0a:55:0e:
19:cd:ef:cd:20:a6:53:77:51:33:e2:99:6b:3b:59:e2:50:a4:
dc:33:e3:c6:1e:58:e2:9d:be:07:b0:70:0f:c0:93:ff:f0:ff:
3c:e0:77:c3:77:ac:8e:d1:6a:3f:4b:28:d6:f8:a1:8c:4c:b2:
39:0e:88:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org