Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DN7x2xx27c8L4Y7hYJNlV_TPOAc.roa
File: DN7x2xx27c8L4Y7hYJNlV_TPOAc.roa (raw, json)
Hash identifier: EkELpz14jxrsa0dKvSKnOqVmWiyq4tv44dS9s+pqMXE=
Subject key identifier: 0C:DE:F1:DB:1C:76:ED:CF:0B:E1:8E:E1:60:93:65:57:F4:CF:38:07
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 112B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DN7x2xx27c8L4Y7hYJNlV_TPOAc.roa
Signing time: Sun 07 Feb 2021 13:14:05 +0000
ROA not before: Sun 07 Feb 2021 13:14:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 124.6.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4395 (0x112b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:14:05 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0CDEF1DB1C76EDCF0BE18EE160936557F4CF3807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:e0:76:a1:49:c0:84:b5:c8:65:2b:0f:02:
00:24:43:90:fe:41:9b:e7:fc:b9:9f:01:54:d9:27:
de:c1:ce:6b:26:d2:d8:4d:70:fd:06:79:9c:49:a7:
cd:86:a8:4b:13:e5:c2:21:e5:09:dd:7f:64:1e:a6:
e4:cb:25:36:2b:d2:87:a2:aa:80:d8:70:69:9f:59:
4a:d7:f2:fc:71:e9:f5:b3:c2:30:29:01:43:2d:ae:
4d:82:8e:e1:42:d9:ea:37:32:0b:90:39:eb:d3:3d:
d8:ef:00:d2:bf:cf:25:ff:a7:97:82:40:5b:dd:37:
1d:c2:ec:d2:2a:f9:e2:1e:fa:2f:95:db:65:3c:4d:
0f:64:3d:22:2d:2d:7c:6b:05:10:b6:d9:c8:85:e9:
94:59:ce:c6:e1:f8:a9:5e:b2:66:57:e3:57:10:f1:
1c:91:2b:d2:90:48:f6:73:78:2a:b7:a1:41:da:cc:
51:ae:39:60:0e:04:0d:f8:67:5d:cd:35:f0:a4:90:
d6:54:fb:7c:c1:7b:ff:4b:93:b8:7e:69:f8:27:18:
46:86:a0:f5:a6:b1:9b:b9:87:1f:28:a4:aa:f1:c8:
df:68:90:a3:4d:e8:bf:31:c8:97:97:d3:5f:8b:d2:
cc:c7:48:32:5b:a7:11:5a:d2:71:d9:72:70:37:84:
8b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DE:F1:DB:1C:76:ED:CF:0B:E1:8E:E1:60:93:65:57:F4:CF:38:07
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DN7x2xx27c8L4Y7hYJNlV_TPOAc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.12.0/22
Signature Algorithm: sha256WithRSAEncryption
94:62:17:34:6d:4c:8b:1e:51:dc:e2:ef:5e:ed:a9:55:e9:c2:
d5:61:6b:40:62:46:70:a7:38:38:66:c7:81:4f:ee:c2:8b:b4:
c7:34:01:f4:5b:15:7a:79:81:f7:1f:b9:b4:63:89:1a:a6:c9:
f1:2b:1a:89:9c:e1:ef:81:4f:e2:f6:a1:68:f9:4b:b8:a8:1f:
6a:0f:77:0c:89:b1:3e:bb:c9:1a:5c:94:fa:d2:c8:9d:97:c8:
bc:78:84:8c:c7:92:a8:48:ba:cd:9b:74:d2:bb:ae:e8:09:ae:
9f:f7:94:7b:ea:0e:39:75:86:26:fc:9e:a3:5b:1e:c1:3f:3a:
b3:a9:68:22:7e:5e:65:c0:24:6d:6c:53:e5:8c:09:51:58:3f:
89:e1:16:40:82:bd:51:74:c3:de:0d:e4:2d:17:ae:6f:42:6d:
b1:aa:47:e5:1c:05:82:96:78:d3:84:ad:8e:fd:26:b3:55:a5:
53:4b:5a:0a:05:0e:a5:a6:d5:d0:97:21:6f:71:5c:7e:49:42:
2c:3a:e2:6f:30:2f:d2:3f:16:0f:64:2c:92:59:37:07:cb:ef:
b3:e3:61:a4:27:f5:c9:ee:48:c2:33:07:06:59:22:27:41:5c:
5f:34:5b:e5:1a:09:27:7d:f9:d7:13:ea:c5:57:ab:d1:f8:2a:
42:ec:27:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org