Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Va5W_dTl1lyekyd4-S1y5bGMl_A.roa
File: Va5W_dTl1lyekyd4-S1y5bGMl_A.roa (raw, json)
Hash identifier: 8ixvB3xQZ9NFOiH8S8eYSYGesF9QPR2jz0ljHAZGuLo=
Subject key identifier: 55:AE:56:FD:D4:E5:D6:5C:9E:93:27:78:F9:2D:72:E5:B1:8C:97:F0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Va5W_dTl1lyekyd4-S1y5bGMl_A.roa
Signing time: Thu 15 Sep 2022 02:36:34 +0000
ROA not before: Thu 15 Sep 2022 02:36:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 122.100.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=55AE56FDD4E5D65C9E932778F92D72E5B18C97F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:54:96:90:ba:59:43:6d:56:23:6b:fe:b3:
26:25:9a:40:d9:f5:9e:28:ce:08:37:f6:0f:59:59:
0e:4d:57:43:b1:a0:df:68:77:d1:96:fa:0e:fb:7c:
ca:b5:27:0b:51:fd:1d:8e:a4:64:d4:88:40:eb:3a:
51:8f:ea:19:95:3b:80:9b:e5:4a:e8:f7:4d:ba:38:
43:16:b6:c7:60:5c:84:e7:b0:70:a9:77:f1:0b:31:
9b:7b:7b:36:97:1e:30:d1:03:b8:31:20:c5:20:9f:
49:b0:71:86:1e:ec:eb:c1:25:6b:26:7e:75:4c:18:
a1:e3:4d:84:ff:7b:a0:42:e6:45:a2:dd:2a:15:da:
2f:66:88:66:6b:80:b0:80:ed:6c:5c:2e:6d:c7:b6:
9c:3f:b2:98:49:a7:ba:11:39:1f:77:5e:51:61:01:
0e:88:46:1c:f7:89:4e:74:87:1b:6f:d3:fd:90:cb:
af:5e:f4:ca:e5:14:d2:fb:fd:07:91:c2:89:08:b5:
30:d0:3f:7d:9e:f1:f7:43:55:03:28:b8:c3:63:57:
39:41:6a:33:d3:fb:5b:22:e5:ac:76:d4:2e:46:31:
cd:b7:a2:17:b8:85:03:e8:91:90:ab:c8:9c:8d:63:
16:8d:bf:e9:d0:ff:15:40:78:c5:59:8b:09:a4:9c:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AE:56:FD:D4:E5:D6:5C:9E:93:27:78:F9:2D:72:E5:B1:8C:97:F0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Va5W_dTl1lyekyd4-S1y5bGMl_A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.76.0/22
Signature Algorithm: sha256WithRSAEncryption
00:94:83:24:45:b1:1f:f6:0d:e1:d3:78:55:cf:5a:47:dd:98:
ad:12:de:c9:e6:bf:7c:d2:7c:1c:76:4e:0b:57:19:48:49:e3:
35:77:24:80:2d:f5:82:80:09:f0:a5:d4:42:cc:ff:eb:b5:eb:
80:be:0a:da:76:a7:a9:ba:8a:9e:30:ce:92:16:92:c6:fe:12:
4f:2e:64:64:19:d0:17:d5:3c:23:d0:9f:51:35:1b:35:b7:88:
6c:b0:7a:c7:7b:6c:f8:65:9b:fb:4f:8f:e1:8c:9e:61:77:39:
1f:ca:a0:7b:79:81:c1:e9:28:f8:e8:6f:f2:d7:9c:d3:a6:d9:
97:05:5d:82:ba:42:bb:3b:b9:85:f5:39:18:fb:9c:38:db:51:
1c:ef:b4:89:32:13:83:32:a7:2e:39:96:db:8f:7d:a9:80:b5:
83:1b:19:ba:64:cc:f5:cf:55:72:85:8c:71:fb:05:76:01:3d:
d6:47:4f:b5:7b:54:e2:b8:d2:b1:4a:07:3b:30:f2:bb:ac:2a:
5f:d0:81:eb:c4:ef:a8:35:8e:3b:e5:f5:1d:39:51:11:b1:7c:
f2:a9:2d:31:56:52:e5:51:fe:71:6a:20:4e:c2:f5:0f:08:ae:
19:80:48:47:1b:60:6d:14:88:7b:c7:ee:1d:50:cb:9e:d1:c8:
aa:21:6f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org