Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9Qg_sTpgCYELtZKVnXA7jHdaUDE.roa
File: 9Qg_sTpgCYELtZKVnXA7jHdaUDE.roa (raw, json)
Hash identifier: A87wKdB815sCPtWwAsAerXmzTsLWk3rdDrVM+MhM8Ts=
Subject key identifier: F5:08:3F:B1:3A:60:09:81:0B:B5:92:95:9D:70:3B:8C:77:5A:50:31
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9Qg_sTpgCYELtZKVnXA7jHdaUDE.roa
Signing time: Thu 15 Sep 2022 02:35:26 +0000
ROA not before: Thu 15 Sep 2022 02:35:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 124.6.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F5083FB13A6009810BB592959D703B8C775A5031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:2f:c1:b2:71:35:9b:fb:35:19:aa:bb:65:
5c:26:c0:b0:a0:b6:4b:7f:b1:9a:5a:9d:5f:26:5e:
68:5e:d3:8d:9d:eb:96:98:21:52:7a:45:ba:b7:b2:
d3:22:1a:79:78:78:8f:a5:74:fc:3e:6d:8a:16:b2:
1e:eb:23:36:51:aa:47:ef:f7:50:54:4e:ee:2b:0e:
71:a8:12:dd:ca:80:f8:70:45:13:f4:0c:dd:6c:d4:
be:6b:dd:99:bc:e5:91:56:b8:00:d7:22:e5:84:46:
38:5c:a5:30:dc:45:3f:34:7f:02:62:a9:ba:ee:77:
d4:0f:b7:69:d1:04:e7:af:93:74:05:50:aa:1c:c4:
8e:bf:bb:b9:05:65:12:71:34:8b:9a:cc:83:ca:e4:
e5:e9:f8:7c:e5:a9:cd:ea:76:bd:de:77:87:e0:ec:
f0:be:fd:1d:8a:84:b9:b2:39:b9:fa:9e:dc:75:b7:
5a:b8:af:33:41:1e:fc:cf:48:18:ad:f8:93:2a:c6:
69:b2:9a:1c:9f:70:f8:0d:dd:3e:98:67:8e:9a:ec:
29:db:4b:2b:bf:31:35:10:63:de:da:f8:2b:35:0d:
46:af:ec:c2:b4:94:14:08:ec:05:14:ad:e9:18:f5:
e1:3b:c9:15:92:f8:0a:d0:4f:02:1e:d2:63:2d:ad:
bb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:08:3F:B1:3A:60:09:81:0B:B5:92:95:9D:70:3B:8C:77:5A:50:31
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9Qg_sTpgCYELtZKVnXA7jHdaUDE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.16.0/22
Signature Algorithm: sha256WithRSAEncryption
16:d1:8c:11:fd:67:fd:c7:ad:ba:c1:e8:f7:2f:0e:9c:08:9a:
c9:2b:07:b2:63:a4:d5:e6:a8:0d:fd:00:94:85:ad:5e:22:f9:
80:e2:52:d3:fc:bd:04:c2:d3:d3:89:e5:89:d6:48:76:eb:17:
fd:c1:fe:6c:7e:d1:e5:fb:ff:97:ad:a4:7b:51:98:b1:27:8c:
c0:6b:f8:18:2a:ef:fb:1d:d6:00:82:93:b4:d1:ab:cb:be:44:
88:e2:d7:84:54:78:43:8b:88:60:46:c0:d3:1c:7c:40:8b:f6:
04:71:8f:da:f6:b5:7f:95:f3:f3:3b:af:e8:53:66:4d:8b:38:
10:f7:00:40:5d:5f:26:0e:9d:7d:50:5a:dc:76:7f:55:08:3e:
3a:79:13:7c:83:9d:75:2a:41:29:21:74:aa:70:7e:44:0e:e1:
4c:f2:f4:ca:51:13:c9:4f:76:ec:a2:a1:34:db:3f:a0:90:1a:
41:fb:7c:c1:91:75:e5:e8:63:de:30:05:55:65:b8:ee:fe:b2:
92:9b:5a:40:06:68:4a:12:46:df:18:0c:21:0e:7c:85:c9:3f:
c0:08:94:14:d0:69:73:33:b9:f1:6f:20:ef:52:77:d9:6a:d7:
4c:3b:93:75:bf:4a:f3:e4:41:e7:27:76:45:a5:94:7e:d0:b6:
b0:84:fc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org