Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RxPYYYU2FgaIcz0G9wSeypm09ug.roa
File: RxPYYYU2FgaIcz0G9wSeypm09ug.roa (raw, json)
Hash identifier: 7ZgqdxYrSCFKEA8G74HymtmQLDGwEO7GOvdgHni+b/I=
Subject key identifier: 47:13:D8:61:85:36:16:06:88:73:3D:06:F7:04:9E:CA:99:B4:F6:E8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1760
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RxPYYYU2FgaIcz0G9wSeypm09ug.roa
Signing time: Sat 22 Oct 2022 05:36:33 +0000
ROA not before: Sat 22 Oct 2022 05:36:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 124.6.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5984 (0x1760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:36:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4713D8618536160688733D06F7049ECA99B4F6E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:e6:76:9d:70:54:5e:1f:c7:73:6d:a5:c7:
6a:e6:79:6d:e7:cb:83:53:4d:87:2b:4d:b8:9a:62:
26:c6:e7:d7:b7:ec:30:2e:97:f2:71:ae:e3:7e:2e:
9c:84:91:91:03:de:02:c2:ed:77:2b:0d:e1:b9:4a:
13:96:3a:8d:82:de:1f:4b:79:79:ce:de:c8:55:e4:
13:6f:5b:d5:1c:21:bb:60:1d:ad:bd:68:e7:ab:85:
0c:3f:8c:c5:c6:c9:a5:35:e3:4d:25:77:86:ff:b9:
b0:96:4c:e0:86:cb:76:f7:b6:14:19:9c:07:1e:69:
28:ea:8b:62:ff:78:07:6e:d2:84:26:5d:94:02:db:
06:28:a5:ab:a4:39:df:79:28:54:63:e9:d2:dc:07:
7c:ed:65:ec:c3:d4:95:34:6f:6f:16:7f:c0:51:ce:
0c:d8:5f:45:86:83:31:20:81:80:dc:0a:0f:b7:91:
3c:eb:76:03:65:45:d1:1a:9d:fe:34:21:7b:1c:9d:
a3:c2:1e:e9:5f:a3:04:4f:58:de:7e:87:cd:b1:ac:
a2:27:d3:bd:3e:be:e2:cc:0d:7e:a3:c9:17:09:97:
d4:f1:dd:4d:f0:88:f1:cb:54:45:06:cb:da:74:c0:
aa:e9:86:a7:5f:35:f5:da:c6:b0:b8:7c:c1:08:d9:
58:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:13:D8:61:85:36:16:06:88:73:3D:06:F7:04:9E:CA:99:B4:F6:E8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/RxPYYYU2FgaIcz0G9wSeypm09ug.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.0.0/21
Signature Algorithm: sha256WithRSAEncryption
15:90:37:f5:6b:41:d7:50:1d:25:8f:14:72:6d:20:d1:de:f1:
52:33:fb:ad:5d:08:af:86:9c:a4:f5:fc:66:12:fa:22:42:a6:
78:ef:69:69:fe:60:7a:64:cb:ec:f7:a4:e3:27:0a:b5:6b:72:
a3:09:d0:3f:4c:0e:fd:cd:f9:50:99:a7:00:d7:9e:b4:ed:90:
8c:b6:10:c1:72:8b:e1:a6:2a:82:d1:ec:28:13:c4:2d:e1:0a:
d0:ea:fc:23:14:c5:82:83:60:49:57:a5:5f:64:25:f6:c2:58:
73:04:db:81:76:50:fc:cb:3a:9c:b0:74:89:99:21:73:32:d3:
96:c0:95:37:61:0f:b8:e4:aa:ea:a8:ff:e9:77:e4:f8:88:f5:
2e:9f:e9:c6:e5:1c:ac:95:ef:ea:e0:90:94:d0:70:5c:57:19:
73:d6:77:51:c6:76:db:a9:89:dc:be:6e:86:ba:b8:aa:92:1b:
6e:ba:60:79:17:b3:bf:7f:1e:c6:88:54:cb:ba:eb:9d:93:9f:
9f:e3:34:fd:5a:c5:65:98:1a:68:c9:b4:42:fa:67:7e:fd:c2:
fd:d2:c8:38:90:4b:ce:55:bb:40:d2:7d:d2:52:f1:0a:d1:64:
5b:ad:e9:27:08:41:8a:9c:70:57:f1:f3:6d:32:6d:25:49:62:
6a:20:ef:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org