Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CIolhpuJLS_-sZ9fGQct7Lg1qcQ.roa
File: CIolhpuJLS_-sZ9fGQct7Lg1qcQ.roa (raw, json)
Hash identifier: 5dUZE0d6TNLZ/FBGT6K1wyJY+uHcOfdGAMwAnT0D8Q8=
Subject key identifier: 08:8A:25:86:9B:89:2D:2F:FE:B1:9F:5F:19:07:2D:EC:B8:35:A9:C4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BCA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CIolhpuJLS_-sZ9fGQct7Lg1qcQ.roa
Signing time: Tue 29 Sep 2020 10:08:50 +0000
ROA not before: Tue 29 Sep 2020 10:08:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 122.100.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3018 (0xbca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=088A25869B892D2FFEB19F5F19072DECB835A9C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:42:5e:40:8d:49:23:67:bb:60:b2:96:fd:
7e:f9:3d:ee:50:74:5a:fa:44:3d:ec:29:d0:34:41:
42:c3:f0:3c:c2:03:d2:a7:05:05:d9:ea:21:11:2a:
f8:9b:d8:de:11:92:fd:55:97:af:1f:f4:72:52:19:
30:2f:fb:92:04:b4:94:1d:5c:02:8e:1e:c5:0e:e2:
0d:f7:cb:2e:3e:54:fd:41:c7:ec:ed:aa:1a:f4:e6:
7b:77:52:4f:fd:56:4a:d9:c0:77:d1:92:01:a1:ff:
9f:ae:dc:a2:d0:d4:c5:a1:39:7e:ad:2f:45:41:5d:
3f:b7:0b:90:65:26:4e:8f:12:82:3a:98:7e:c2:5a:
2e:90:db:8c:3b:06:be:2e:e5:32:3e:7d:b0:98:ab:
6c:7a:d2:0c:fd:7c:38:8f:d5:60:bf:bc:1e:16:94:
1d:5b:0f:25:c8:d4:77:1b:f8:0c:25:f5:1d:c0:b0:
37:68:6c:64:9f:e5:14:a8:90:40:92:37:16:cd:16:
79:39:5f:20:51:7d:ee:26:ef:36:ab:cf:4d:18:5a:
3b:43:f2:45:4a:19:10:c9:1b:0a:bb:9e:eb:09:0d:
ba:e2:f2:ce:f3:3a:fb:3d:3a:4c:98:c5:ca:4e:ab:
f3:82:04:de:8f:6b:e6:28:f0:ab:fe:ad:64:9e:c7:
6a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8A:25:86:9B:89:2D:2F:FE:B1:9F:5F:19:07:2D:EC:B8:35:A9:C4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CIolhpuJLS_-sZ9fGQct7Lg1qcQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.76.0/22
Signature Algorithm: sha256WithRSAEncryption
31:12:68:de:a4:81:16:8d:cc:c3:56:ee:9c:aa:ab:05:8e:f7:
85:69:28:06:6e:85:2a:12:ea:fe:39:18:ba:1e:58:f2:51:99:
40:32:6c:e1:93:fc:72:19:a8:9c:88:c9:09:86:93:73:37:a6:
80:23:ef:eb:9b:b8:6b:82:21:28:b8:e8:8b:bb:41:12:43:8d:
b2:9d:b7:a2:77:26:f1:6c:fb:aa:a2:46:9e:78:32:fe:25:3e:
4d:48:00:76:1c:0c:ae:03:8e:3e:8c:fe:ee:a2:b3:8f:eb:ef:
7a:59:0c:81:56:5a:c6:a2:8a:8f:74:a4:27:b7:fe:23:31:14:
77:71:a3:02:47:f5:23:40:92:51:2c:9b:76:fc:5d:2f:b0:06:
89:6e:dc:cd:54:a4:58:a1:a8:38:4f:36:67:e9:92:f8:d5:ca:
75:ca:46:c0:a5:cb:13:05:1c:ea:bc:ca:a5:83:e2:24:c8:e9:
1c:e9:f5:f7:74:9c:cd:dd:db:3c:41:be:34:a4:37:65:da:cf:
8e:36:89:ba:55:74:0a:48:6c:ca:0e:de:3c:ed:d1:6b:23:76:
fd:ee:00:c7:46:6e:fc:40:f1:69:ec:9c:9f:19:bc:c6:2a:ac:
10:01:b7:97:a4:3d:4e:8f:91:8c:e8:61:33:44:e2:7c:be:40:
0b:07:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org