Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WTncTbGlqB1KnkCZ_R_TVdVPuzU.roa
File: WTncTbGlqB1KnkCZ_R_TVdVPuzU.roa (raw, json)
Hash identifier: 2qpd9twGq8ihHdRIXdfhoQCgbliCFMQEpOb9QUj1rbE=
Subject key identifier: 59:39:DC:4D:B1:A5:A8:1D:4A:9E:40:99:FD:1F:D3:55:D5:4F:BB:35
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10E7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WTncTbGlqB1KnkCZ_R_TVdVPuzU.roa
Signing time: Sun 07 Feb 2021 12:49:37 +0000
ROA not before: Sun 07 Feb 2021 12:49:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 122.100.64.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4327 (0x10e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:49:37 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5939DC4DB1A5A81D4A9E4099FD1FD355D54FBB35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:14:8a:27:2b:91:09:dc:99:12:3a:e1:72:
e2:57:ed:83:ba:5d:cc:ea:59:f9:c1:48:cd:57:59:
d1:84:d6:be:3c:81:a4:26:9f:db:96:8b:97:3e:59:
0c:71:c5:37:86:a1:1c:ec:47:02:f5:17:62:aa:3d:
bd:7f:e0:01:6a:bb:14:4c:71:75:25:f6:38:c9:02:
be:64:56:f8:38:f9:44:28:be:cc:33:16:a7:70:3b:
2c:74:51:e8:53:f0:5a:53:e5:63:92:0e:fd:d6:16:
0d:1f:83:00:d0:46:77:a5:52:be:38:e7:e9:14:9b:
ae:5d:f1:08:59:e9:5e:9c:30:e3:a8:b2:bc:e4:ca:
a0:e7:b6:f5:77:32:c0:a6:7f:7e:24:a5:ff:56:c0:
85:41:c4:96:16:f0:2c:54:16:70:ab:d4:93:2a:30:
9c:59:78:db:0b:7f:e1:74:93:c6:c9:4f:24:03:98:
b1:de:68:ed:7e:04:d4:7f:b6:88:4f:f0:55:00:48:
64:04:f0:70:9f:ea:8a:0a:da:b7:f1:dd:9b:c2:7d:
35:52:b4:d3:1a:81:cb:1a:7b:9c:67:c8:0a:7e:1c:
c6:9b:41:fb:50:f9:3e:c7:9e:96:40:0a:dd:c3:41:
bc:ba:49:9a:9e:90:fa:f5:63:b9:e7:b9:a5:df:3d:
7c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:39:DC:4D:B1:A5:A8:1D:4A:9E:40:99:FD:1F:D3:55:D5:4F:BB:35
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WTncTbGlqB1KnkCZ_R_TVdVPuzU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.64.0/18
Signature Algorithm: sha256WithRSAEncryption
2e:9f:09:ab:13:61:db:c1:12:dc:c2:c5:58:8d:f3:d8:ff:bf:
a9:f7:b5:f6:cc:67:5b:b3:31:fd:5a:37:8b:3e:f8:0c:76:9b:
35:2d:28:d0:be:d7:df:86:db:76:b3:92:9f:c7:0b:48:27:57:
e1:81:61:67:48:33:ec:15:5b:79:e1:7f:c3:78:d0:89:4e:84:
e4:18:e9:48:b5:e5:36:82:cd:f1:ee:dc:0f:09:17:77:0d:f6:
7d:4d:40:e7:01:6b:1d:d1:98:d7:99:24:62:a7:1c:ce:8e:54:
ec:e7:c3:28:2f:68:dc:c4:58:64:23:3e:a3:d9:2e:cb:8a:13:
68:fb:a5:55:10:d3:c5:9f:33:c6:ea:ca:d0:74:ff:0d:d1:56:
71:4d:a1:c1:23:d4:85:c0:10:26:21:6c:82:58:be:f6:9b:b8:
e5:b9:b5:e8:e0:50:f7:13:3d:d8:bd:59:53:77:9b:6d:83:97:
49:0f:c2:ef:b6:05:50:95:7c:d7:4c:24:00:c5:c7:7c:f4:d3:
e1:33:12:9e:b7:a7:08:2f:13:47:7f:fe:b8:65:0d:e1:2a:28:
64:1a:b5:de:57:52:5d:8d:e8:09:2b:71:a5:ec:58:7b:a4:34:
2a:b4:42:54:53:84:21:17:94:0e:3e:45:23:fa:e7:47:b4:21:
cf:8f:59:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:37 2023 by rpki-client on console-ams.rpki-client.org