Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9flvN1ITL5n-NyXOJdc39XwrULU.roa
File: 9flvN1ITL5n-NyXOJdc39XwrULU.roa (raw, json)
Hash identifier: p94Ik3ZRvX7YzMHGbmvAFUH13tgGgFXBDn3Xuojjm0s=
Subject key identifier: F5:F9:6F:37:52:13:2F:99:FE:37:25:CE:25:D7:37:F5:7C:2B:50:B5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F53
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9flvN1ITL5n-NyXOJdc39XwrULU.roa
Signing time: Sun 07 Feb 2021 12:33:42 +0000
ROA not before: Sun 07 Feb 2021 12:33:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 122.100.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3923 (0xf53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F5F96F3752132F99FE3725CE25D737F57C2B50B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:39:e0:e5:db:21:9b:dd:97:02:dd:9a:97:
9c:8f:44:2a:55:2d:a3:a8:6e:b1:86:36:b9:02:70:
ae:de:75:a6:ba:90:98:68:e2:8c:60:3e:8b:30:03:
e6:8c:85:b7:ee:36:4b:72:17:fd:d0:00:e8:dd:93:
28:4a:61:b3:97:61:52:54:44:ab:2a:d1:14:3a:61:
65:fa:36:16:63:40:8d:29:0d:bb:5f:ab:a8:c3:bd:
f5:64:04:6f:b7:bf:a8:f0:91:f0:d1:a9:d0:bc:94:
46:3a:b8:15:5d:9d:4c:0f:af:b2:5b:55:ea:a6:64:
e4:05:64:3b:e4:b8:0d:6a:d1:af:ef:b7:88:46:21:
e5:1f:72:f3:3f:89:77:e3:97:42:82:4c:70:49:fa:
36:27:ba:99:19:d7:44:b4:d8:ec:37:72:4c:f2:10:
d3:8f:e2:8c:c7:5d:4c:41:e3:78:44:d4:37:52:21:
a1:5e:ac:d2:03:cd:23:3e:a0:93:7c:6e:db:91:12:
16:d8:31:c5:12:bd:1e:cd:7a:6e:ab:4e:c1:1f:b4:
73:6a:af:9d:21:7c:4b:81:85:a6:f0:36:9f:3b:c1:
65:f5:df:4a:c8:e0:1c:da:7a:39:36:1d:b3:c7:e7:
09:77:83:26:fc:a9:d2:32:1f:44:85:c7:1f:3c:9f:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F9:6F:37:52:13:2F:99:FE:37:25:CE:25:D7:37:F5:7C:2B:50:B5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9flvN1ITL5n-NyXOJdc39XwrULU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.88.0/22
Signature Algorithm: sha256WithRSAEncryption
20:e0:16:e3:7c:6b:00:12:30:eb:5b:f3:fe:a9:6e:58:f7:c1:
37:5d:25:66:74:7b:29:40:54:22:5c:f1:3f:99:a9:60:73:c4:
79:3e:2b:8b:29:bd:9e:f1:bf:a3:1a:cc:c6:bb:69:95:56:33:
28:cf:05:49:6e:4a:5a:59:86:32:82:36:8e:94:51:88:bd:36:
4f:af:d9:36:5f:c4:42:cc:00:70:30:bc:43:97:98:b2:4a:ed:
1f:e3:11:5b:bd:09:f9:fd:98:ad:8a:fb:8e:d2:07:6d:35:17:
a1:7d:07:8c:b4:e7:e7:d2:c2:ff:c8:a4:25:06:f3:81:d7:9b:
97:19:c6:a1:f9:5f:5f:4d:2c:71:4f:c9:4a:1e:da:ef:1e:49:
81:93:b7:0d:b7:e1:42:42:0c:0e:bb:94:65:ae:99:58:34:93:
46:a6:3f:47:47:72:7a:eb:f8:2e:dc:bf:a0:9b:92:7b:b1:56:
f5:92:c8:e2:71:71:81:e5:0f:de:6f:1a:b4:6a:10:1d:f7:56:
8f:15:3e:0b:de:ea:cd:d2:e6:91:c2:40:66:a3:27:37:f5:c6:
e4:5b:f6:b8:7a:9e:c3:20:f8:87:c3:12:64:41:93:0c:ad:9c:
70:d7:f0:75:4a:9e:18:b8:1b:73:20:c9:d8:40:b7:3d:c2:e5:
3e:61:8b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org