Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ITId7T05-ZiPwss9HIhC5BG1gao.roa
File: ITId7T05-ZiPwss9HIhC5BG1gao.roa (raw, json)
Hash identifier: /A6yFutijtwD8khO8BaAv4oXwHaukw4Q5Mc0BR+/n1g=
Subject key identifier: 21:32:1D:ED:3D:39:F9:98:8F:C2:CB:3D:1C:88:42:E4:11:B5:81:AA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1487
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ITId7T05-ZiPwss9HIhC5BG1gao.roa
Signing time: Wed 22 Jun 2022 02:50:34 +0000
ROA not before: Wed 22 Jun 2022 02:50:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 122.254.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5255 (0x1487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jun 22 02:50:34 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=21321DED3D39F9988FC2CB3D1C8842E411B581AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:77:bf:b1:d9:66:ec:3e:56:dd:9a:ee:10:
71:72:af:1a:b8:c1:6c:87:3b:f0:b2:e4:07:ae:db:
3c:b9:90:64:e0:8e:3a:fd:81:0d:73:49:ac:0d:4b:
70:46:d9:96:ee:f9:b7:83:96:2f:f7:df:f8:a7:89:
07:1b:a5:d2:22:2f:bd:b7:a1:da:16:7e:12:cf:65:
cf:dc:bc:66:c2:39:b6:63:a9:ac:d0:57:80:3a:18:
33:10:85:49:33:00:55:10:3c:dc:d9:c8:17:27:b6:
ff:3c:f2:7f:ea:23:d6:c8:a2:03:35:6e:0d:0d:18:
f2:f0:03:ee:af:65:65:2a:87:1a:39:75:96:84:97:
52:9b:f3:9d:5c:cf:04:0a:53:cd:91:b8:ec:46:76:
3e:4c:36:f2:01:4d:40:20:d2:ae:62:46:40:36:bb:
02:f5:e7:20:58:88:4d:b4:61:d3:05:7b:34:4f:6f:
2b:5a:44:22:95:ba:64:23:45:82:8e:36:01:e6:6a:
20:0e:f9:b3:8d:8b:fe:00:ff:82:8a:bb:46:72:bc:
bd:37:c3:f6:99:5d:91:ac:03:e2:b7:70:d9:8c:73:
d8:66:01:ce:79:05:9a:ae:6d:14:b4:89:11:2f:34:
8b:6c:b7:a9:46:6a:64:52:8b:9a:7d:18:39:2a:dc:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:32:1D:ED:3D:39:F9:98:8F:C2:CB:3D:1C:88:42:E4:11:B5:81:AA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ITId7T05-ZiPwss9HIhC5BG1gao.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.48.0/21
Signature Algorithm: sha256WithRSAEncryption
57:54:91:0d:46:12:b8:a2:67:b2:f4:e3:88:47:49:b4:77:33:
fc:79:bb:b4:e9:d6:81:bf:df:23:cf:0c:e2:c3:d2:ca:91:02:
f0:b6:10:c2:85:0c:6c:52:58:5d:3f:f1:2d:b0:81:57:85:bb:
ec:60:03:27:0c:1b:f2:03:91:58:11:18:1a:6e:63:49:67:99:
da:b3:97:8a:5c:02:3e:e4:be:37:9d:c5:5a:31:78:2e:f1:41:
98:1d:d3:91:84:b8:a2:8f:ff:f2:82:20:5c:c1:b2:bc:9c:af:
b5:4a:7b:91:7b:2d:fe:7b:0f:56:02:d8:de:8b:f2:22:13:dd:
4b:d4:86:cb:7a:4d:d3:ab:fb:97:b5:b5:c6:01:2c:52:03:04:
8a:93:67:b4:9c:e7:dd:57:f1:f9:7c:08:90:80:91:1a:f3:95:
30:8b:cf:a0:3a:37:61:29:67:51:45:f8:4f:dc:2a:23:f2:f3:
a3:fd:1d:4f:f5:d7:5f:99:12:e2:f6:c7:b0:24:1a:9a:e1:54:
4d:6e:9e:b4:2f:41:9b:9e:20:42:a6:c7:e9:ef:06:57:8b:9e:
f6:ce:1e:6e:d4:b5:27:4c:a4:5b:fe:31:05:a2:94:ea:1e:4e:
27:75:f2:f5:94:fe:b3:8d:23:3f:d9:e9:d9:c9:95:cd:8c:72:
a5:8f:f7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org