Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F_uebrtNDiRDBtosPAjLhaiF2HY.roa
File: F_uebrtNDiRDBtosPAjLhaiF2HY.roa (raw, json)
Hash identifier: 9aWxlqdeW1gvHAwN1yCk/3BPiygvF0arMO2LByRzSyo=
Subject key identifier: 17:FB:9E:6E:BB:4D:0E:24:43:06:DA:2C:3C:08:CB:85:A8:85:D8:76
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F4D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F_uebrtNDiRDBtosPAjLhaiF2HY.roa
Signing time: Sun 07 Feb 2021 12:33:37 +0000
ROA not before: Sun 07 Feb 2021 12:33:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 122.100.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3917 (0xf4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:37 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=17FB9E6EBB4D0E244306DA2C3C08CB85A885D876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:ce:46:ae:10:93:2c:0b:14:6f:29:9a:a5:
12:99:3b:2c:9e:7c:3f:74:8a:76:86:0a:87:7d:c8:
dc:88:8b:4b:4e:b1:b5:1d:f3:34:14:8c:ba:c2:d6:
04:e0:e5:50:ed:2b:36:ab:3e:33:0e:20:34:cc:e2:
bf:1a:62:b6:75:be:57:b2:34:37:c9:e7:e5:5b:30:
dd:bd:79:c3:a4:53:1b:f8:b8:88:7d:60:4d:8b:6f:
82:a2:d8:b8:f8:4d:f6:2b:f0:0b:f0:bb:ac:80:88:
fa:d5:f6:36:6b:33:13:d9:da:88:0c:0d:8b:9a:73:
d9:ef:66:58:2b:aa:cc:fb:db:e3:db:20:85:52:a7:
da:12:08:86:88:e3:99:cf:c5:90:f3:2c:24:cc:1a:
01:de:1e:d9:21:73:2f:13:1a:f9:66:81:69:47:fd:
18:67:79:ca:7e:6f:d3:0e:2f:5e:f9:23:fa:52:27:
49:8e:84:37:7d:1f:cb:f5:1d:0b:dc:3c:a3:13:7c:
4e:5f:06:05:b6:eb:b5:01:70:c6:21:04:b3:61:04:
71:1e:67:f8:75:fc:e9:d1:af:6f:a6:7d:4f:07:98:
3f:16:97:c6:3d:37:a1:a3:27:f8:ae:b9:26:61:80:
bf:42:0a:9a:5a:18:3b:54:29:b7:f5:a1:86:53:d8:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FB:9E:6E:BB:4D:0E:24:43:06:DA:2C:3C:08:CB:85:A8:85:D8:76
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F_uebrtNDiRDBtosPAjLhaiF2HY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.72.0/22
Signature Algorithm: sha256WithRSAEncryption
15:9b:0b:5d:8f:5c:d8:8c:87:e1:6b:90:f9:43:a8:92:fb:45:
a8:d1:e4:24:a1:0e:c0:a0:9c:58:57:61:6a:ee:ac:dc:f0:c1:
33:7b:28:6f:ea:a4:b8:63:68:ee:4f:25:43:23:d5:68:cd:02:
64:5b:a2:58:ee:ff:4f:c6:d7:56:ea:4c:3e:0b:14:6e:a1:7b:
d2:60:9c:25:a2:14:b4:3a:7b:ce:66:20:1b:de:85:9d:c9:46:
12:17:b9:3c:a7:36:a3:46:52:c7:84:de:b0:ca:84:5a:09:8f:
c6:5c:a5:f3:6a:3a:19:aa:57:ac:d7:30:7a:d0:19:c3:eb:29:
57:ba:da:49:10:5e:fb:8a:03:67:b8:92:93:02:62:3a:91:26:
02:50:4d:c4:05:c0:fa:4e:ee:ed:5d:61:e3:3d:c3:ef:c4:81:
4f:b5:40:eb:64:65:bd:34:1f:01:8c:48:d9:dd:53:e9:a6:b6:
49:ff:c1:9b:39:75:bd:e2:97:23:8b:b8:1d:18:d4:2c:d4:d4:
63:ec:d6:0e:88:14:78:32:1e:09:55:5f:0a:d0:e8:4a:2f:fb:
0e:76:b5:af:53:86:90:06:68:34:c0:bb:5a:64:5a:99:04:67:
37:60:32:9b:a7:de:2d:8e:05:57:da:19:e2:85:e7:f1:d3:35:
da:fd:b9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org