Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L_92ANpEtvlBz-OD3x6oaAq3gls.roa
File: L_92ANpEtvlBz-OD3x6oaAq3gls.roa (raw, json)
Hash identifier: 8kR1adAJQ9mfLRIVLXqEzCTnVzG1Ms4QFSFH7dPDlyc=
Subject key identifier: 2F:FF:76:00:DA:44:B6:F9:41:CF:E3:83:DF:1E:A8:68:0A:B7:82:5B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B81
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L_92ANpEtvlBz-OD3x6oaAq3gls.roa
Signing time: Tue 29 Sep 2020 10:08:30 +0000
ROA not before: Tue 29 Sep 2020 10:08:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 122.100.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2945 (0xb81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:30 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2FFF7600DA44B6F941CFE383DF1EA8680AB7825B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:87:98:cb:be:b7:5d:ab:dc:c6:a5:d0:98:
b8:bb:8c:ba:a2:86:fd:b1:48:5c:73:1a:a1:33:03:
58:42:d9:dd:9d:f0:bf:26:e4:cd:a1:63:e6:0c:4f:
db:1f:8e:09:4f:43:95:6c:6c:9d:0a:b3:df:73:79:
49:04:51:ad:d1:a9:c1:0e:ee:d5:d3:2c:21:08:45:
38:8f:69:c0:24:bb:50:94:6b:f6:28:e3:e5:18:32:
b7:1c:98:06:af:75:ff:de:99:6a:30:ca:f6:c4:ab:
9a:66:76:27:37:c4:0a:9d:13:62:8a:cb:53:81:7c:
03:82:86:15:ca:c0:80:f1:b3:84:a8:34:a8:62:75:
76:7c:da:76:fa:e0:cc:4d:1a:5d:88:eb:76:e7:5f:
61:e3:c3:79:36:d5:ab:7c:3b:ae:8d:a0:78:79:f9:
45:43:78:fd:09:a7:08:0f:df:81:da:e9:1b:6b:bc:
80:5c:e0:01:ee:52:11:1c:e4:8a:91:f7:07:65:6e:
18:d6:b9:20:6c:7e:4a:0a:03:2a:e5:11:48:40:80:
26:ff:29:13:13:17:c9:79:d2:36:a5:46:7a:a6:b2:
ac:5c:57:7d:48:90:25:b9:66:1b:0a:32:24:29:a2:
e4:8a:da:db:fd:16:c6:87:47:d0:f2:2c:c9:ba:c5:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FF:76:00:DA:44:B6:F9:41:CF:E3:83:DF:1E:A8:68:0A:B7:82:5B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/L_92ANpEtvlBz-OD3x6oaAq3gls.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:eb:b9:3c:1a:53:27:59:0d:b6:e3:c7:39:8d:bf:5d:c0:47:
fc:21:b4:57:46:f7:47:46:d8:fa:ce:36:02:aa:64:38:36:af:
02:15:94:07:58:cb:31:de:9a:63:f3:5c:59:b2:42:41:df:1d:
ad:c1:4a:02:5a:7d:c7:ee:0b:25:84:0f:13:32:1f:9a:fc:2e:
b1:82:41:27:b2:0c:4c:3b:be:3f:54:88:4a:55:f4:21:d1:8d:
cc:96:f3:91:42:fb:4f:8f:03:b5:c6:55:16:e3:6c:ea:49:d3:
09:e1:ea:ce:10:47:73:58:1a:d2:49:04:7f:2f:ab:e3:58:e2:
a5:f0:d4:60:9c:4f:79:97:ae:25:c2:67:b6:a1:07:c8:b8:ce:
10:3b:fe:ef:37:7e:95:2b:d8:6a:59:1a:05:df:4d:97:b8:0a:
6b:61:57:9e:58:11:f6:a7:ae:10:3a:d0:38:6c:c6:1f:c3:24:
74:2b:69:c1:9e:8c:46:26:e9:79:77:c4:a3:04:ea:f4:37:77:
8e:ad:37:04:15:92:d3:69:cd:f7:a4:51:79:67:37:24:52:5c:
b7:20:1b:8b:72:fc:30:dd:55:05:c0:86:95:83:47:3b:2d:c1:
d6:7c:82:3b:35:1b:b4:88:fc:76:01:a2:fe:a5:01:05:e2:82:
c3:87:99:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:36 2023 by rpki-client on console-ams.rpki-client.org