Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LVwW9GSA3Krg_qGZV6MRJe0ywaA.roa
File: LVwW9GSA3Krg_qGZV6MRJe0ywaA.roa (raw, json)
Hash identifier: GOxHV1jHhn/MnB0Wd5EI3g3MA4plj/p5iheTg1tFRCo=
Subject key identifier: 2D:5C:16:F4:64:80:DC:AA:E0:FE:A1:99:57:A3:11:25:ED:32:C1:A0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LVwW9GSA3Krg_qGZV6MRJe0ywaA.roa
Signing time: Thu 15 Sep 2022 02:36:18 +0000
ROA not before: Thu 15 Sep 2022 02:36:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 122.254.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2D5C16F46480DCAAE0FEA19957A31125ED32C1A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:39:03:49:30:be:ad:5f:38:9b:e6:e8:e4:b4:
84:46:99:2c:d6:5b:25:d2:2b:65:95:3c:f2:3a:4a:
70:c7:a5:2d:7e:85:c6:8b:79:67:22:ff:5d:e8:2f:
39:33:6a:2a:62:fa:77:30:0c:79:2a:d2:6b:92:e9:
37:27:6e:a9:9b:65:a0:7f:5f:93:eb:90:f1:bc:db:
18:a7:af:fc:2a:86:46:3b:ce:f3:c2:94:41:2f:87:
95:e0:89:f2:09:16:d6:50:8b:79:8b:48:af:92:00:
2b:1b:c5:78:7f:86:24:e8:fc:e1:97:14:43:94:4a:
97:73:f2:26:75:d4:73:f1:4e:10:e1:78:5e:73:d7:
01:57:a2:04:36:2d:c5:16:10:b2:e1:5e:3e:5b:9c:
5e:cc:6b:69:b6:16:88:1f:1a:1e:c4:1d:61:a5:bf:
8d:fd:2e:a4:3d:89:c5:5d:e2:fd:0c:86:ee:d0:71:
e6:39:7e:c2:a0:10:38:54:8f:45:6b:f4:e6:3d:fd:
67:65:db:51:a6:16:06:d2:5a:81:d2:b5:cc:71:20:
5f:61:92:ec:31:45:1a:df:50:df:e7:53:46:a3:a7:
41:64:d7:4b:f1:61:be:8a:07:ca:71:71:65:cb:74:
fd:c0:f5:62:5b:1f:23:8f:e6:60:94:a3:73:bb:76:
52:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5C:16:F4:64:80:DC:AA:E0:FE:A1:99:57:A3:11:25:ED:32:C1:A0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LVwW9GSA3Krg_qGZV6MRJe0ywaA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.32.0/21
Signature Algorithm: sha256WithRSAEncryption
59:d3:6c:8a:6b:19:db:ea:a1:8c:b8:d8:e2:11:a6:38:33:02:
20:ba:53:ea:df:46:1b:50:62:d1:40:0d:dd:87:93:6c:8d:33:
20:59:11:1b:7b:81:5e:93:20:28:99:d7:a8:74:04:af:4c:68:
cd:34:13:68:fb:26:b9:3d:1c:30:33:6b:a4:29:c1:7d:07:07:
a4:72:7c:09:4a:17:db:ea:c5:8f:84:59:4e:6a:52:58:b3:8c:
f6:92:7b:d4:2e:72:00:47:08:bb:59:59:88:67:0b:b6:b1:10:
e8:8f:a6:bc:fb:03:39:d0:9f:76:01:b6:68:58:93:b3:94:86:
28:20:a8:fd:dc:a5:15:18:65:d3:d5:83:fd:62:f5:9f:62:6e:
ee:4d:fa:cd:f7:05:2c:4f:69:7e:c5:02:5b:41:03:95:a5:54:
81:69:c0:f6:2d:b8:1e:6f:12:36:fb:21:51:a6:ab:ee:2a:6d:
74:8c:47:05:7a:5d:24:0e:47:bf:50:72:11:4e:ca:4f:c1:49:
72:83:64:b1:82:18:00:6d:c4:52:d8:ea:19:44:94:66:a5:18:
96:ce:85:e5:9e:44:dc:73:19:2d:ac:1b:39:ad:3d:23:18:d1:
c4:b5:75:68:8d:1e:17:c7:83:f4:e5:91:00:5e:c1:6a:9f:66:
17:f3:65:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org