Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F-aoU_dHPFbH22xROrScQrO2LhE.roa
File: F-aoU_dHPFbH22xROrScQrO2LhE.roa (raw, json)
Hash identifier: z7DBYBFvlX7HvfKaKOPgqS0QKX+f95mYsvIhRqqY340=
Subject key identifier: 17:E6:A8:53:F7:47:3C:56:C7:DB:6C:51:3A:B4:9C:42:B3:B6:2E:11
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 151A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F-aoU_dHPFbH22xROrScQrO2LhE.roa
Signing time: Fri 21 Oct 2022 08:11:16 +0000
ROA not before: Fri 21 Oct 2022 08:11:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 122.100.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5402 (0x151a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 21 08:11:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=17E6A853F7473C56C7DB6C513AB49C42B3B62E11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:ca:86:d7:dc:e5:16:b0:b2:66:11:17:86:
24:d2:c0:a5:31:78:f5:35:55:d0:5d:4b:e4:b5:16:
74:7b:6d:bf:37:76:66:da:6d:01:3c:bc:d6:b3:59:
2e:d5:36:f6:32:f6:04:25:a9:b4:9c:88:32:04:ee:
40:59:21:95:f9:ad:9f:f6:54:89:fa:d6:27:77:bd:
7c:fb:ab:9a:19:d6:13:f8:f5:3d:60:e4:0e:2a:34:
28:4c:6c:b0:65:d4:9c:d4:fd:79:67:cd:21:4a:6a:
57:e9:13:99:a5:37:59:d2:b4:b1:f8:15:3b:7b:31:
e6:33:b0:2d:8f:81:05:0e:21:30:bf:3e:56:0c:77:
29:b7:65:1f:42:e0:8e:f0:c5:d6:52:56:b7:59:a7:
01:4e:9c:c0:17:5b:2d:d0:54:d7:0e:90:39:64:c1:
3c:7e:a7:1c:a9:cb:fb:d1:9d:ba:1a:17:94:87:ac:
f8:f9:f5:5c:cd:9d:55:c0:5b:99:61:ca:b1:d5:ac:
3f:5b:51:db:ce:e2:fd:ad:e5:13:31:67:25:7a:61:
bc:4a:ea:aa:7a:5b:75:76:84:c0:bb:4e:6b:a8:1f:
c0:c9:f3:8a:2d:db:38:fe:56:e2:03:af:a8:92:3d:
43:30:e5:f2:58:56:b9:7d:a4:8d:73:d2:0c:62:03:
61:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E6:A8:53:F7:47:3C:56:C7:DB:6C:51:3A:B4:9C:42:B3:B6:2E:11
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F-aoU_dHPFbH22xROrScQrO2LhE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.68.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:e9:d3:34:3f:04:dd:9d:9b:f4:a7:79:2f:ac:b9:e2:cf:3b:
e0:f3:c0:bf:99:38:10:fc:71:bd:9e:78:ff:95:d3:f2:76:f2:
86:e6:51:bf:6b:ee:15:68:1e:fb:6c:af:10:73:20:06:77:c3:
5d:5e:dc:40:ab:9f:c7:7e:f7:42:b3:9e:0b:2d:48:8f:67:71:
c6:eb:d7:70:20:d9:a1:d3:1b:27:5d:51:44:0d:90:69:c0:f2:
5f:da:3c:51:36:97:8a:43:d6:5f:67:e0:b8:2e:81:9d:5a:ea:
32:60:de:fd:20:a0:4e:78:15:1f:54:33:78:c2:60:e9:d5:1d:
64:75:cd:83:26:bc:34:ee:b2:d8:15:04:d0:af:00:c4:de:c4:
60:8f:b0:f0:9d:b0:81:cf:d3:ec:56:b4:5f:8b:bc:04:a9:96:
3e:4a:16:71:44:da:af:1d:1f:7e:bd:fe:ee:bc:f1:32:2c:f5:
bf:a6:d3:17:b8:8f:5e:ed:ba:2f:64:d1:1d:c2:81:6f:21:c4:
72:46:58:d3:07:81:d1:67:3d:bf:88:f6:24:72:f1:b9:75:d5:
51:76:39:ca:b7:be:06:1a:91:96:17:d9:09:2a:f1:fe:c1:a8:
c7:9d:0e:ba:75:b3:ce:2f:37:47:fd:47:48:fa:83:1b:ae:4d:
78:f6:a7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org