Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CL_pmtr_9mm6UNcg52Wp8bdsdHo.roa
File: CL_pmtr_9mm6UNcg52Wp8bdsdHo.roa (raw, json)
Hash identifier: otiKwq49R+osvMpxLw1DAXWR7gwEBgFG03N1Sm1iNoU=
Subject key identifier: 08:BF:E9:9A:DA:FF:F6:69:BA:50:D7:20:E7:65:A9:F1:B7:6C:74:7A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1948
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CL_pmtr_9mm6UNcg52Wp8bdsdHo.roa
Signing time: Sat 22 Oct 2022 06:06:20 +0000
ROA not before: Sat 22 Oct 2022 06:06:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 122.254.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6472 (0x1948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=08BFE99ADAFFF669BA50D720E765A9F1B76C747A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:2e:d9:6a:0b:b9:e3:ca:35:9c:db:19:51:
5b:20:c6:cd:f8:5e:0e:6c:6c:d6:24:51:ea:37:e7:
99:d4:42:37:8d:2c:de:4f:7a:3f:c3:71:b2:04:f6:
a4:8d:f0:bf:b6:3d:df:be:13:b6:4c:17:d4:f2:ad:
b9:e9:aa:c6:f4:12:54:29:5d:a1:a2:fc:96:a1:92:
17:de:a6:f4:6c:b7:8a:db:82:99:e4:11:65:39:ef:
a5:aa:07:2d:72:7d:44:ab:a3:4e:6b:19:0f:83:c1:
ca:2f:c3:7b:c0:b5:3c:7c:80:f9:47:f1:28:4d:fe:
25:6e:51:6d:c5:42:31:be:2b:c6:9f:87:b8:42:67:
82:6a:dd:1a:96:e3:8b:1f:63:f2:26:72:6b:97:3d:
ab:f9:65:a9:96:ba:c4:22:d0:a9:d6:be:93:8e:10:
78:3e:ee:13:37:eb:f4:15:7e:7c:eb:ab:b1:d1:cc:
15:d7:50:a5:4f:65:65:04:09:3b:ea:e0:29:22:41:
66:08:cf:b2:eb:ef:78:98:d7:1d:22:2b:93:2a:b2:
0b:40:9e:59:fa:d6:23:57:7b:3f:26:ab:a4:3d:7b:
f0:11:23:05:69:61:df:1b:a6:ad:6e:6c:61:97:78:
91:70:62:7a:1e:57:5b:69:16:ce:19:fc:bc:9a:16:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BF:E9:9A:DA:FF:F6:69:BA:50:D7:20:E7:65:A9:F1:B7:6C:74:7A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CL_pmtr_9mm6UNcg52Wp8bdsdHo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.0.0/21
Signature Algorithm: sha256WithRSAEncryption
57:c4:ad:2c:71:84:b0:c6:b3:94:01:cc:c1:62:9d:b9:dd:55:
1b:a4:b3:11:2a:96:1a:ce:85:a3:d0:d9:07:78:85:e4:c0:83:
2b:ae:91:f7:92:29:46:0d:4d:10:4a:63:ef:7b:0c:e1:c6:d9:
ea:3b:84:41:89:30:be:07:68:15:8d:65:f7:61:b1:3e:a4:65:
34:69:05:e5:50:92:0c:ef:c4:d1:84:de:61:32:50:7d:a2:b5:
3a:18:d0:1f:cc:b0:ba:83:cc:3f:71:97:5b:a5:18:d9:45:6e:
fe:5c:b7:f6:d4:1a:bd:58:35:76:7a:e3:9d:00:68:38:df:b4:
62:37:de:58:ec:fc:a9:fa:1b:50:cd:2a:67:e7:5d:49:88:84:
5d:66:00:0a:50:1a:93:1d:73:6d:81:bb:d6:3c:9f:51:40:34:
74:6f:cd:81:b1:f3:b2:49:29:e9:43:50:3a:3e:f2:0e:ee:e5:
e4:24:34:5d:29:09:32:2b:c5:96:14:7c:46:eb:9c:45:de:01:
33:03:6f:df:d3:c3:57:01:be:f6:07:88:c7:21:80:92:9e:4a:
72:88:40:9d:18:c7:e6:fd:41:6b:9c:32:6d:31:2d:bd:78:58:
0f:2d:5d:73:18:88:bb:dc:9b:5f:b1:56:79:0e:05:c8:5a:3c:
73:b6:4b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org