Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MKQAscFvmUgGnMK-3y8NtCKeZlk.roa
File: MKQAscFvmUgGnMK-3y8NtCKeZlk.roa (raw, json)
Hash identifier: y8eqC8mxLCJs9c3Ap2SYdIGKwf/vWsvLqsH6EptswjQ=
Subject key identifier: 30:A4:00:B1:C1:6F:99:48:06:9C:C2:BE:DF:2F:0D:B4:22:9E:66:59
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B8F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MKQAscFvmUgGnMK-3y8NtCKeZlk.roa
Signing time: Tue 29 Sep 2020 10:08:34 +0000
ROA not before: Tue 29 Sep 2020 10:08:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 123.0.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2959 (0xb8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=30A400B1C16F9948069CC2BEDF2F0DB4229E6659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:3c:39:08:1a:98:c9:58:0b:57:d9:1d:95:
01:49:41:dc:38:2c:66:08:4c:85:b1:94:b4:85:32:
cb:50:f4:86:94:ad:ef:55:9c:40:94:90:ed:43:c0:
22:db:97:04:f7:f4:82:a3:c7:4d:50:9c:cc:70:08:
7e:ba:a6:e1:c6:dc:91:76:f6:3c:e5:fb:a3:bb:47:
0d:0b:67:03:86:62:b6:a3:e6:18:34:1a:87:de:56:
3f:15:aa:c5:4b:64:ee:8f:fd:0d:58:d5:8b:6e:74:
1f:8c:36:d1:f9:9e:ab:45:43:99:3b:f9:67:25:86:
28:69:e5:84:b9:7f:58:a3:b2:c6:89:c5:d9:96:3d:
7c:e3:6e:16:f9:17:cc:fc:ef:d0:81:b5:0d:2b:32:
b2:ed:c2:f8:65:94:0a:40:82:98:15:01:b2:1b:cd:
1a:15:4a:3f:2c:42:3f:21:66:d4:1e:5a:26:bb:bf:
1e:5b:e0:2b:dc:44:55:88:2e:17:5f:79:80:79:b7:
71:51:42:0d:75:05:e8:12:34:2a:a2:c6:f8:d2:1d:
8e:cc:48:7b:83:94:8c:ef:06:53:56:42:ab:1e:7d:
d0:24:c0:15:d3:c4:cc:ab:27:c8:68:39:39:b1:ff:
27:24:44:42:f8:28:a3:6c:26:78:6b:d2:88:88:aa:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A4:00:B1:C1:6F:99:48:06:9C:C2:BE:DF:2F:0D:B4:22:9E:66:59
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MKQAscFvmUgGnMK-3y8NtCKeZlk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.44.0/22
Signature Algorithm: sha256WithRSAEncryption
94:08:af:69:8d:14:dd:4f:4e:99:8e:31:f8:87:0f:11:e1:f7:
b1:82:48:58:8d:c1:83:03:60:58:5c:56:4b:48:e6:3d:ae:55:
d3:3a:b7:07:e7:26:55:06:b0:f7:b5:63:ba:5c:d8:f1:68:2c:
6a:92:42:c9:6b:81:10:12:cc:ee:fc:7b:b7:93:25:59:01:7d:
79:10:92:41:fc:78:74:3b:66:c2:5c:8f:37:1b:21:3c:43:2a:
64:dc:b2:a2:d9:a4:6a:99:d3:60:9c:c5:fb:ce:52:97:1b:7e:
01:7d:3b:68:de:76:69:bc:5a:ac:23:6f:ab:50:8d:be:6f:44:
88:60:38:24:47:71:d6:36:09:eb:60:b1:6f:5f:ba:ae:d9:eb:
f2:a8:e4:85:5f:4d:da:24:a6:30:9e:cf:29:f7:13:54:7b:68:
44:86:9a:b4:82:fe:a4:64:cd:a9:e4:e3:84:b9:9b:3a:4d:fc:
be:b5:af:de:8b:18:44:75:81:ac:8f:e7:86:5d:b9:01:a8:ae:
39:84:07:a2:6e:9d:07:9e:68:cc:16:60:6d:73:68:cf:b4:ac:
2a:27:9c:be:09:26:52:ea:e1:ac:84:8d:f4:e9:ba:c9:d0:08:
14:ca:94:1c:69:f3:5d:dc:b3:49:ed:5a:d0:3e:20:c6:ab:4f:
01:67:dc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org