Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GeWlLV8al5MkscXekFz-gH7iYww.roa
File: GeWlLV8al5MkscXekFz-gH7iYww.roa (raw, json)
Hash identifier: ol+0HMYTQy4nEpafmROMqK0pDG7sT/ShlcKlnR/QyrQ=
Subject key identifier: 19:E5:A5:2D:5F:1A:97:93:24:B1:C5:DE:90:5C:FE:80:7E:E2:63:0C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 110F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GeWlLV8al5MkscXekFz-gH7iYww.roa
Signing time: Sun 07 Feb 2021 13:03:22 +0000
ROA not before: Sun 07 Feb 2021 13:03:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 124.6.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4367 (0x110f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:03:22 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=19E5A52D5F1A979324B1C5DE905CFE807EE2630C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f4:bc:da:21:95:36:ed:c8:96:4a:77:79:3d:
e4:a0:00:b8:00:8c:e3:70:31:5e:67:56:c5:91:02:
5d:7c:54:9f:c3:8a:37:31:52:c5:a1:4a:2a:84:bf:
e0:30:ba:52:4f:94:7a:70:87:3b:d5:8a:34:4d:12:
5d:3b:94:d1:c4:26:7c:7c:f3:49:f5:d1:bf:23:c9:
35:f9:e1:6f:4b:7a:e4:7c:82:59:5d:ec:45:64:b5:
3b:d5:40:fe:de:e3:36:83:88:9e:3c:a8:74:30:83:
20:51:b4:c0:5c:39:34:38:21:d3:6a:cd:99:30:b3:
f6:6e:b1:92:28:21:12:85:c7:4c:46:f0:02:e5:8c:
e2:8d:58:68:4d:58:40:e2:86:f4:2a:a7:b9:61:c2:
96:a2:59:ae:00:d1:4e:86:8a:b3:fc:c2:30:30:4f:
2f:57:c0:05:81:2d:cf:13:74:11:bc:1b:50:e5:37:
d9:92:d0:0f:f1:dc:a1:4a:d2:5d:02:55:43:80:ca:
62:83:01:6d:c6:63:d4:ab:9c:ff:41:b8:06:b0:8e:
99:b2:78:54:29:05:0c:82:ec:27:a1:70:a5:a4:b4:
c6:8c:d7:32:4c:46:f0:2d:c9:3a:91:de:21:6a:18:
a9:7c:1d:6a:3a:ed:46:34:85:b9:b0:fb:bb:b4:85:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E5:A5:2D:5F:1A:97:93:24:B1:C5:DE:90:5C:FE:80:7E:E2:63:0C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GeWlLV8al5MkscXekFz-gH7iYww.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.8.0/22
Signature Algorithm: sha256WithRSAEncryption
47:c3:52:31:f6:ce:2b:14:a4:47:ca:43:71:66:1a:1a:cc:e4:
8e:31:db:c1:12:12:07:be:9b:04:3b:33:27:42:e1:90:13:b7:
ea:b2:79:d2:a8:40:ce:16:81:92:ba:a8:bb:63:41:8e:67:2b:
74:48:55:fe:76:f4:06:6c:61:8b:1e:bb:64:ea:86:d7:63:ec:
f0:de:ac:a1:f1:de:07:29:e5:d5:49:b5:5b:34:f9:35:30:fb:
42:fd:a7:2e:06:f8:87:16:6c:13:cd:dd:74:e0:67:b2:6c:83:
ef:6a:54:79:a4:60:79:bf:93:88:89:46:49:a5:8d:19:2f:1f:
29:bf:bf:92:9f:e4:a4:8e:01:25:5e:9f:41:44:fb:db:0c:6e:
2e:d9:33:1a:36:f2:04:17:ea:2a:de:37:9f:54:08:08:1a:d8:
ac:8e:38:f2:a9:13:d5:ff:37:90:3b:00:5a:89:3d:0b:73:9c:
32:42:de:85:48:05:7c:73:a1:e9:03:7e:a5:14:a0:72:d9:08:
eb:34:eb:90:44:77:0a:ae:bb:95:bb:32:59:74:76:af:e9:8d:
0b:8e:7e:20:64:9b:10:6f:32:d8:12:42:ce:ef:26:b7:6a:21:
86:4b:87:d0:ae:fe:37:a4:30:86:45:6a:0d:0b:f9:1c:94:1c:
d2:c6:d5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:10:15 2025 by rpki-client