Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Egiw8HxyyOeGSPlO1D-5JEuCkp8.roa
File: Egiw8HxyyOeGSPlO1D-5JEuCkp8.roa (raw, json)
Hash identifier: +kFa9aXbm9H0xNDZiBQpypsRra4uCU6YMg2Y9CNHcyg=
Subject key identifier: 12:08:B0:F0:7C:72:C8:E7:86:48:F9:4E:D4:3F:B9:24:4B:82:92:9F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F4F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Egiw8HxyyOeGSPlO1D-5JEuCkp8.roa
Signing time: Sun 07 Feb 2021 12:33:38 +0000
ROA not before: Sun 07 Feb 2021 12:33:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 122.100.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3919 (0xf4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1208B0F07C72C8E78648F94ED43FB9244B82929F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:ae:52:33:ac:91:a1:ab:e9:dd:67:9b:c7:
eb:3a:7d:b1:7b:67:b8:d7:d0:fd:e2:b4:c0:4f:d5:
1b:2b:c8:b5:53:b8:80:b2:7b:3a:19:70:55:06:d1:
e9:e4:4a:3e:63:64:db:46:bc:a7:8b:15:b9:53:03:
aa:ad:96:6d:c3:8a:b6:9a:9e:dc:59:b3:b7:cf:32:
97:03:c5:0e:3e:60:7c:ce:9b:1b:c3:97:37:ac:36:
43:87:05:88:36:3e:42:c9:c5:75:04:85:a9:bd:ba:
85:71:11:c0:4b:19:ab:e6:e6:a9:f7:32:51:b8:79:
28:27:d0:72:32:49:c4:d9:6b:97:a1:fd:63:ab:3d:
f1:84:18:56:82:a0:94:9f:21:27:86:54:24:a7:36:
39:51:fb:da:8c:79:eb:15:ae:41:7c:ec:d0:cc:cd:
28:15:30:5f:ba:61:94:b1:ab:bd:71:47:ba:e4:41:
bd:e6:60:04:cc:12:aa:a0:17:bf:ae:2b:64:f7:44:
13:d7:06:21:5d:fb:ee:27:78:c7:64:2f:d3:1c:9c:
d1:49:06:3d:fb:f3:32:7c:89:b6:a9:ce:9f:7d:0c:
64:94:fc:58:1c:d2:18:e4:a7:12:bc:37:5b:35:70:
2e:4c:6f:99:d1:75:86:b4:32:be:bd:07:e3:29:71:
5b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:08:B0:F0:7C:72:C8:E7:86:48:F9:4E:D4:3F:B9:24:4B:82:92:9F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Egiw8HxyyOeGSPlO1D-5JEuCkp8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.76.0/22
Signature Algorithm: sha256WithRSAEncryption
27:3d:8f:79:a4:46:96:a2:65:af:19:c6:79:26:29:53:38:81:
51:a0:33:00:af:1f:3c:d5:ee:c2:35:4d:10:63:29:a5:c8:90:
8f:35:ad:fd:89:c2:21:4f:a0:c2:d8:6c:d6:d3:35:dc:99:75:
4f:67:60:73:80:7b:43:69:d5:63:8b:8e:fa:59:95:34:c6:e0:
ff:27:e8:37:fd:c8:29:d0:c0:5b:63:f6:9b:29:40:42:1a:25:
34:73:0e:d3:51:d3:52:c0:46:bb:eb:ae:bb:76:29:35:ae:1d:
26:59:82:9c:8c:30:dd:e2:76:87:85:af:b2:bf:11:68:e8:b4:
93:b2:76:72:c9:72:22:e6:d5:bc:fc:b2:aa:57:c4:f4:aa:ee:
0d:d6:86:2e:f8:1d:0f:5b:d0:68:e1:e0:77:70:de:b3:e5:b2:
13:ad:3c:af:fa:6a:87:1a:51:9d:25:30:99:7c:c9:85:05:9e:
ed:8d:fc:bd:31:0c:17:ce:4e:fb:f4:cc:3d:b9:a9:6f:92:1f:
0a:15:e6:1a:3b:69:52:5b:ba:9e:c7:f0:4e:e6:23:c1:b3:b2:
3a:24:4a:e5:72:94:4b:50:91:8a:0c:6b:ca:bc:c1:33:50:51:
50:da:05:99:37:f1:74:36:d0:5d:83:b0:a6:3c:27:11:11:45:
6f:b8:1d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org