Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KmFvT2M9jMborZdUaVULpmT4GiY.roa
File: KmFvT2M9jMborZdUaVULpmT4GiY.roa (raw, json)
Hash identifier: mcDk2GGjlCIy+rMP/hywdy8YzBNr/J1ktC16kz12b/0=
Subject key identifier: 2A:61:6F:4F:63:3D:8C:C6:E8:AD:97:54:69:55:0B:A6:64:F8:1A:26
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 196F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KmFvT2M9jMborZdUaVULpmT4GiY.roa
Signing time: Sat 22 Oct 2022 06:06:31 +0000
ROA not before: Sat 22 Oct 2022 06:06:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 124.6.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6511 (0x196f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2A616F4F633D8CC6E8AD975469550BA664F81A26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:11:bc:0c:80:19:72:2f:87:01:10:39:6f:91:
df:b1:e0:3e:75:cc:0d:19:b1:54:10:f4:e7:ae:9d:
78:02:11:82:0c:aa:cb:ea:70:70:bb:fc:47:80:8b:
f2:c6:03:7d:8b:8c:40:fa:5e:96:b1:c6:42:c6:f4:
47:f4:ad:fa:af:5c:ba:bd:7d:f2:b6:aa:7a:5d:8f:
cc:d1:6e:91:04:bc:e7:06:e5:9b:4f:f3:74:cd:cb:
6c:9d:fa:11:e2:c2:a6:1d:40:1c:98:11:49:ef:73:
cc:6e:94:09:be:21:6a:a9:8c:6a:48:73:71:aa:4e:
5f:d5:ce:f6:e3:66:0e:19:60:8a:e0:68:d8:9d:f4:
5c:cd:58:23:86:2c:eb:9a:61:03:d1:68:62:f3:57:
0c:a9:55:a9:cd:75:0a:72:f8:f8:f1:2f:4a:a0:7c:
e1:6e:5a:40:96:99:2e:9c:2a:b6:d5:e2:a1:7d:58:
7e:0d:7a:69:7c:de:e0:0e:87:bb:59:ff:a4:af:c3:
f0:ff:15:b4:f7:88:6a:dd:65:f7:1c:0d:9f:cb:6d:
a6:91:ff:8b:d2:a7:a3:64:e4:ed:2f:36:b0:40:71:
42:82:d6:48:22:0c:5b:a2:ae:36:97:a0:d4:a5:a9:
eb:82:03:0e:85:64:50:ec:04:a1:7e:09:d8:0c:00:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:61:6F:4F:63:3D:8C:C6:E8:AD:97:54:69:55:0B:A6:64:F8:1A:26
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/KmFvT2M9jMborZdUaVULpmT4GiY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.12.0/22
Signature Algorithm: sha256WithRSAEncryption
58:fa:f0:ae:01:81:1b:41:ac:5a:91:b0:06:02:ab:c7:a9:ab:
d0:d3:9b:ff:ef:ce:25:9b:a5:de:02:95:d4:cf:c0:99:5f:6f:
a2:40:d7:69:c1:dc:f0:72:f1:2a:d9:8a:b8:c0:57:09:11:5c:
22:b8:39:50:2b:03:78:34:cf:e2:0a:50:b5:91:97:16:2c:c7:
b6:71:e3:d8:cc:e1:77:ff:9a:33:d3:ac:6f:f3:37:c4:31:60:
dd:fa:79:ed:92:14:85:1c:e3:d5:8f:80:20:e6:62:93:50:60:
5a:f6:ed:49:1f:95:db:b2:b3:ec:c1:63:57:0c:aa:71:be:a0:
43:66:25:94:58:1e:7a:b3:ec:2f:9c:95:d5:08:5b:7f:75:f3:
cd:77:42:b5:00:bd:35:c8:7d:21:13:1a:f1:5c:54:c8:df:73:
7d:4b:e5:5a:da:79:fc:f5:4f:92:b5:1c:6b:f0:b8:1e:eb:40:
6c:ec:8d:78:67:85:b6:ba:4f:a0:cd:80:4e:c9:9b:11:c9:a5:
a6:3a:cf:b6:da:6a:62:c4:91:8a:8e:35:b2:8b:88:11:2b:ce:
95:ea:70:38:67:c7:6d:8d:ee:47:48:50:eb:4e:80:f3:f1:3b:
97:8c:1e:f9:d8:a9:55:a4:38:bd:27:fc:26:3c:94:07:c0:42:
3b:a0:ae:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org