Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/I77MzVXg3U4S8qfHJzdkzWa3htI.roa
File: I77MzVXg3U4S8qfHJzdkzWa3htI.roa (raw, json)
Hash identifier: IhtbyQs1nPnZgaohoicH/46X+OSoFOnddTMpALGO8bA=
Subject key identifier: 23:BE:CC:CD:55:E0:DD:4E:12:F2:A7:C7:27:37:64:CD:66:B7:86:D2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/I77MzVXg3U4S8qfHJzdkzWa3htI.roa
Signing time: Thu 15 Sep 2022 02:36:17 +0000
ROA not before: Thu 15 Sep 2022 02:36:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 122.100.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=23BECCCD55E0DD4E12F2A7C7273764CD66B786D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:29:03:58:32:ab:ed:e7:9e:e7:73:e3:58:
46:47:76:f7:dc:99:a4:84:3d:3c:5a:cd:b3:ca:00:
68:d2:fd:24:eb:4b:dd:1d:c3:59:bd:10:c7:07:c2:
01:51:9b:67:ec:77:6b:81:02:93:57:ae:76:31:65:
83:f4:b0:77:56:7f:fc:51:0b:3c:cc:50:21:6a:9c:
7a:d9:50:b2:bb:9c:4e:df:bd:05:00:33:79:07:a2:
9d:bb:0a:6b:3b:8b:b7:e2:69:40:71:80:25:78:47:
08:51:83:92:fc:43:c7:a0:29:15:88:f3:c3:9a:e1:
54:57:71:01:ae:63:eb:e3:1c:1c:af:2f:ed:2a:06:
5a:b0:de:cf:90:d1:c3:1c:8a:53:b0:47:cb:b7:ec:
68:f9:88:fa:56:42:1b:b7:5c:e8:94:aa:2d:a8:dc:
f4:11:35:2d:8b:c1:27:72:8d:d5:6c:0b:d3:11:61:
2a:9b:60:df:45:2d:e4:40:bd:33:09:87:71:53:d1:
67:d5:ae:59:0b:5e:e0:0a:43:98:1a:f1:04:53:44:
95:93:a9:2c:ee:e9:73:77:b2:f9:c4:45:41:35:d8:
35:01:96:ff:65:ee:55:f1:e0:70:54:51:8d:26:7a:
a0:11:be:ac:3d:33:44:08:29:7c:10:fd:3d:96:d4:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BE:CC:CD:55:E0:DD:4E:12:F2:A7:C7:27:37:64:CD:66:B7:86:D2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/I77MzVXg3U4S8qfHJzdkzWa3htI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.64.0/21
Signature Algorithm: sha256WithRSAEncryption
98:fe:02:4f:68:12:8b:cd:65:ab:c5:df:7c:b6:1a:75:29:21:
f2:4d:7c:51:52:80:ba:ea:7d:9b:43:00:86:01:98:3a:3b:77:
7e:71:e8:1c:c7:5a:a2:f1:9f:90:99:d8:c2:98:6a:a1:00:13:
86:a1:0e:04:08:60:94:c5:3d:bc:1d:9b:f9:ab:f6:fd:6e:5a:
d4:86:ce:a2:bd:e0:c5:a4:bd:cf:72:da:ca:dd:a3:5a:18:69:
8a:50:7b:87:1d:5c:c5:99:3c:ad:8f:a8:c3:66:ef:58:bd:d2:
5e:92:a7:c5:a2:26:1e:c0:35:b1:c1:db:7c:98:64:0e:4c:60:
ae:0d:3a:55:a1:4d:26:b0:5a:0f:18:a7:0c:12:01:fc:a4:89:
d8:28:40:c5:53:d7:a2:4b:84:96:97:a7:d3:79:a0:43:33:e3:
d8:39:e9:b8:62:1a:05:87:4d:ef:3e:e2:43:42:e2:99:7d:5f:
02:22:88:4a:e5:4a:b8:0b:49:7e:f0:d8:d0:f5:86:27:9d:d7:
78:9d:c6:31:11:81:ee:5c:03:3a:43:1f:8d:e2:ca:a1:0a:e5:
c3:db:7f:e2:78:58:28:29:0a:15:c9:54:37:ec:f6:10:e6:62:
2c:19:0d:90:61:87:88:6c:9b:51:03:9a:ec:c4:cc:f2:5e:c9:
0b:b2:e7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org