Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HKuyXsHRgX3hRx7vF2gRktM1EfE.roa
File: HKuyXsHRgX3hRx7vF2gRktM1EfE.roa (raw, json)
Hash identifier: x8ic280/stXCIcQsNeqvAePqPBtB8ZBylEsWHECJeB4=
Subject key identifier: 1C:AB:B2:5E:C1:D1:81:7D:E1:47:1E:EF:17:68:11:92:D3:35:11:F1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HKuyXsHRgX3hRx7vF2gRktM1EfE.roa
Signing time: Thu 15 Sep 2022 02:36:27 +0000
ROA not before: Thu 15 Sep 2022 02:36:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 124.6.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1CABB25EC1D1817DE1471EEF17681192D33511F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:95:0b:29:1c:91:ff:5f:88:3c:ef:59:c4:
f6:41:47:53:2d:6f:e4:94:6e:9b:d2:8c:b7:00:f7:
c3:af:b7:86:e8:68:10:34:69:25:cf:55:87:f7:11:
a6:7e:30:87:cc:74:7c:d9:bb:da:c2:be:e8:49:06:
95:75:dd:09:d6:04:d0:bd:75:dc:0f:82:ab:34:da:
55:2d:14:e1:65:2a:94:22:59:c4:4c:f5:55:b4:0e:
01:45:b3:50:62:a9:ef:39:1e:f0:ae:0e:e5:0c:58:
1a:c1:40:5b:25:ec:e4:e7:c8:30:27:07:63:33:d5:
53:2e:7a:c9:a2:80:58:d9:4f:7c:65:3f:1d:a7:05:
2d:12:d6:dc:e1:c6:81:2a:03:7c:e8:70:4b:ee:4a:
da:36:49:46:38:67:69:3f:de:a5:f9:f1:54:e4:2b:
bd:d7:f1:c0:29:89:05:ea:d2:36:94:8c:77:2f:18:
e5:80:42:21:7b:9c:4f:28:fe:88:b6:33:ca:f3:46:
c7:50:db:1c:b9:d6:76:00:07:3b:d2:1a:6e:e1:38:
db:be:c0:a8:05:cb:c0:13:b9:13:1c:ef:16:ce:94:
40:50:ea:36:e0:40:ee:76:97:bd:4c:db:29:11:79:
c9:10:0a:1d:b4:0a:20:95:34:26:08:5a:b6:a9:9d:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AB:B2:5E:C1:D1:81:7D:E1:47:1E:EF:17:68:11:92:D3:35:11:F1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HKuyXsHRgX3hRx7vF2gRktM1EfE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.8.0/21
Signature Algorithm: sha256WithRSAEncryption
22:ed:7c:52:9a:ea:c6:0f:97:c5:e7:c3:07:39:aa:59:3f:98:
20:1f:cb:b1:d9:06:d3:d4:2c:80:43:5e:ab:98:38:bd:c4:18:
2b:f2:94:55:bf:3b:ca:f5:fe:0a:d0:c5:4a:69:fa:73:8b:e0:
11:b1:c8:84:cf:fe:2e:1e:84:90:7d:3c:6b:0e:b0:09:ac:95:
43:22:21:a7:73:69:0a:45:f3:8d:05:ad:fa:f8:c8:ca:b0:2c:
79:3e:25:e6:81:b2:1e:c5:9d:8e:70:5c:16:16:4f:be:52:20:
a3:c6:cd:e5:a7:11:d7:90:76:c1:3d:34:c5:e7:91:41:06:4c:
c5:eb:16:3e:5d:ca:33:2b:ca:91:8a:b2:ae:d2:ad:49:3d:ef:
a0:b0:10:e9:4f:e3:8f:ee:e5:19:3f:b5:d9:60:12:41:e0:81:
b2:6b:1e:11:21:af:37:61:4a:92:f8:2f:84:6b:e9:39:a0:10:
57:db:91:49:61:a0:8c:c1:c1:e1:16:6f:b2:b0:54:29:de:c4:
42:df:22:a6:31:27:0e:f1:ce:79:df:b8:c7:a1:cf:08:b4:12:
9b:dd:ec:e1:37:1e:16:4e:63:22:dd:80:4e:31:e3:ce:52:24:
63:e7:9d:06:2a:eb:d8:43:5d:b6:70:77:bb:5a:dc:8a:07:15:
73:c7:06:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org