Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HTqex6Uj0CR_wLkkMZazN6okCMQ.roa
File: HTqex6Uj0CR_wLkkMZazN6okCMQ.roa (raw, json)
Hash identifier: z4rInqaJS8s9LE9DClXGdCA3iO+bVty/2vSMfsYPgYE=
Subject key identifier: 1D:3A:9E:C7:A5:23:D0:24:7F:C0:B9:24:31:96:B3:37:AA:24:08:C4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BCC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HTqex6Uj0CR_wLkkMZazN6okCMQ.roa
Signing time: Tue 29 Sep 2020 10:08:50 +0000
ROA not before: Tue 29 Sep 2020 10:08:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 122.100.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3020 (0xbcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1D3A9EC7A523D0247FC0B9243196B337AA2408C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f9:70:92:02:01:f3:dc:7b:16:95:e0:c2:71:
74:8b:24:c2:61:6e:80:d9:1e:ba:4c:dd:dc:be:7c:
62:c1:dd:09:4e:d2:fe:e5:2d:4a:c1:04:56:9d:b7:
e6:09:cd:3d:53:d5:fc:b7:65:96:58:83:8a:09:dc:
43:9e:be:bd:dc:41:fd:d6:5b:a1:c3:cd:e0:80:9b:
1a:39:85:29:a0:cd:6e:e8:11:da:80:4d:72:61:f1:
58:cb:c6:e9:0b:15:4f:22:78:32:7c:7c:dd:05:43:
fd:7b:5a:a0:98:33:4a:05:8f:8f:51:ef:95:01:a9:
c1:e4:b1:ee:bd:a8:ca:7a:b0:54:d6:f5:fe:85:49:
16:a9:39:0f:01:b2:dc:63:d5:e6:92:ea:9e:70:0c:
e5:ff:a2:5f:88:8b:bc:ed:f0:e2:86:cf:e2:c9:88:
6c:fe:2c:f9:d2:5e:61:0f:40:6d:53:78:c6:39:82:
4d:55:a2:79:b0:68:07:7d:4f:c2:1f:f4:94:56:83:
a0:08:9f:7a:d5:86:19:34:81:c4:24:7b:de:97:5a:
b5:c1:1e:f1:32:55:55:7f:85:01:53:3a:86:18:d4:
ed:aa:d4:24:27:93:1c:5c:ed:6c:22:a9:16:ba:7f:
19:fe:7e:fd:0a:51:d0:fc:36:4a:f4:4c:c7:08:c9:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3A:9E:C7:A5:23:D0:24:7F:C0:B9:24:31:96:B3:37:AA:24:08:C4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HTqex6Uj0CR_wLkkMZazN6okCMQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.95.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:45:3a:67:91:88:f1:cb:f3:4f:f1:2c:1c:03:dd:5c:c8:aa:
1f:56:ba:13:3f:d6:fc:41:87:6f:65:2e:09:f3:01:69:30:2f:
30:a4:53:ca:a4:87:fc:a2:44:f3:d7:97:17:0f:b3:37:7a:ac:
88:85:7c:71:58:5b:6d:21:c5:d3:eb:54:86:7c:d4:6a:b7:2e:
73:0d:2b:dc:f5:ac:a2:98:97:0b:ad:4f:cf:8f:4c:4e:e7:d9:
3b:82:b1:89:f0:86:4e:97:b2:b7:1f:d9:ed:38:c8:d6:0c:a1:
7d:80:a2:9a:39:3b:fb:4c:69:de:c3:f7:44:9b:6c:72:1c:b4:
d4:35:83:56:1f:a8:50:f6:f2:55:e4:bd:bc:fb:45:e0:ad:70:
8c:4f:50:f3:bb:06:b7:42:69:80:11:ed:2f:b6:a7:8f:9e:ce:
23:5a:b7:04:6b:ae:a8:27:dc:17:7b:ee:13:da:3a:c0:22:92:
35:35:87:e8:c6:6a:bb:16:31:da:c9:26:c6:4d:14:bf:33:ff:
c7:61:73:4b:da:f4:23:e6:da:5a:4b:f0:c5:9f:fb:af:43:f1:
0d:a4:1c:f0:7d:bf:f2:5d:73:6d:c7:40:5d:ea:3b:6f:45:cc:
1a:d1:cc:59:1a:a7:5c:55:3e:f0:59:fc:d3:fb:4b:d8:8d:f3:
cb:ff:7a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org