Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S0WzsvglOzfaBh3QipAHVaBHoUk.roa
File: S0WzsvglOzfaBh3QipAHVaBHoUk.roa (raw, json)
Hash identifier: vJfv5KjRqkhoW6PrJhlVSX4Vv1xPDXUnQOjj1GKXWy8=
Subject key identifier: 4B:45:B3:B2:F8:25:3B:37:DA:06:1D:D0:8A:90:07:55:A0:47:A1:49
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S0WzsvglOzfaBh3QipAHVaBHoUk.roa
Signing time: Thu 15 Sep 2022 02:36:21 +0000
ROA not before: Thu 15 Sep 2022 02:36:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 122.100.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4B45B3B2F8253B37DA061DD08A900755A047A149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d8:6a:07:bc:21:ae:b5:82:24:29:81:b8:bb:
e0:eb:a7:01:d1:64:61:d1:3b:a3:b1:88:e2:62:b4:
bf:4d:05:72:47:dd:16:83:0d:53:80:a1:78:4d:d6:
5c:98:a2:c7:c6:f9:c5:a3:bd:a6:42:52:ed:d1:65:
a4:0e:f4:20:30:a8:77:68:4a:ac:68:b3:19:bf:02:
45:73:82:8c:31:b7:ee:cb:44:4e:06:1f:1a:96:16:
b7:94:df:fb:ca:99:bb:3e:34:ea:82:20:0e:06:e2:
b9:7a:68:97:1c:84:d0:50:20:81:89:72:d5:e6:17:
24:7f:be:37:b1:f5:89:a3:f0:ac:30:e0:df:79:a6:
6d:f8:46:a4:f3:02:a5:26:51:0e:0a:11:08:87:46:
e2:2b:7c:33:8b:e0:0a:32:f4:75:06:a6:9d:d9:bf:
54:5d:11:fe:4f:8a:28:a7:cc:f6:5f:d1:02:be:5b:
c3:d8:47:a3:cd:0f:66:44:d9:cd:6c:ff:83:a8:0a:
d8:ff:4d:b4:b4:31:a3:61:ea:56:ba:30:3e:f5:a9:
08:7d:37:07:d5:16:b6:7c:2b:04:2f:ec:3b:05:c5:
bb:34:d2:0c:0e:99:68:62:94:e1:77:4a:8c:6e:39:
ad:58:c9:05:c5:1a:5b:9b:61:53:34:ed:81:9a:55:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:45:B3:B2:F8:25:3B:37:DA:06:1D:D0:8A:90:07:55:A0:47:A1:49
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/S0WzsvglOzfaBh3QipAHVaBHoUk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.96.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:71:ad:58:cc:b2:25:8f:b5:81:be:60:1c:45:e4:01:f0:fc:
58:9b:e8:a5:6f:88:81:20:68:8f:f8:fe:ad:f9:47:5a:fe:3e:
bc:53:8c:0a:f1:97:df:a5:0b:6f:6b:2a:d4:ea:6f:43:cb:41:
d4:0a:35:11:f0:7a:76:4f:cd:0c:70:a7:28:8e:76:5b:68:20:
26:31:7d:cc:cf:52:71:8e:f8:3a:1f:cd:ee:05:72:bb:5a:65:
cb:6c:c5:b6:b3:60:30:fb:40:4b:1f:6e:50:2c:29:be:f9:c8:
ef:b3:74:f5:c9:9e:21:5c:a5:5a:a8:45:a6:76:82:27:d2:02:
9e:28:fb:2c:ef:e3:f3:57:26:4d:c2:bd:9c:2e:0f:e9:81:51:
1f:a3:31:10:b6:66:83:68:80:cc:87:5c:af:a3:32:f5:19:4d:
e0:6e:26:a9:91:d0:3a:07:76:fc:4f:a4:f9:aa:55:3f:fb:db:
ed:6e:e4:4a:07:33:a8:9b:d2:0d:86:74:6d:5a:c8:5f:e1:87:
21:bd:4a:3c:01:44:bf:f0:da:4e:b9:9a:29:47:8d:96:7c:72:
2c:b8:81:f2:cd:d2:46:27:f5:ce:6f:4b:95:90:9c:79:23:fc:
fc:58:bc:d3:92:ef:1f:f1:01:6a:13:ee:6f:cf:0e:b1:8f:c7:
07:e3:00:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org