Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/X7GIrj8oyquRQXxFAaF9e8oylJ4.roa
File: X7GIrj8oyquRQXxFAaF9e8oylJ4.roa (raw, json)
Hash identifier: YU+X7W39gzoPLJfJtL+JXsOkriLdaTkBiLj4Ne9weDQ=
Subject key identifier: 5F:B1:88:AE:3F:28:CA:AB:91:41:7C:45:01:A1:7D:7B:CA:32:94:9E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 126B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/X7GIrj8oyquRQXxFAaF9e8oylJ4.roa
Signing time: Wed 29 Sep 2021 02:54:33 +0000
ROA not before: Wed 29 Sep 2021 02:54:33 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 122.254.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4715 (0x126b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:33 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5FB188AE3F28CAAB91417C4501A17D7BCA32949E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:5c:24:55:34:87:70:ea:54:15:6c:0c:b2:
31:c0:01:50:0b:c5:f3:f1:85:26:d9:16:0f:75:b6:
ab:00:04:e8:70:0d:c1:90:64:7f:fb:8d:fe:dc:24:
05:8d:ab:5e:b6:80:2a:a6:1d:6e:48:b3:ed:77:ea:
2c:b1:93:55:f6:fb:ce:a0:8c:f5:e2:23:75:22:66:
a8:1c:c7:52:86:6e:72:5c:c8:4b:51:ad:1e:fc:a4:
5d:f2:07:2c:2d:c6:f0:4a:08:1a:08:94:03:22:43:
76:dc:17:52:d4:41:6c:30:eb:59:25:0e:e6:a9:7e:
b3:8c:6a:37:72:ab:f4:ad:f2:b3:41:2c:75:7d:98:
c5:26:d7:d3:e9:06:b5:06:30:27:61:ae:ba:42:1d:
31:4b:9a:0b:99:59:3c:4c:69:cc:43:9c:97:df:ea:
e3:72:dc:72:c3:7c:f0:e6:a9:9a:d1:90:fc:5c:16:
80:94:31:06:f7:71:38:99:31:c5:89:8b:8a:b6:ef:
c8:f8:2c:b1:04:c8:94:be:c5:88:1f:51:54:cc:0b:
34:a8:30:bf:50:31:73:41:dc:69:38:db:95:86:e4:
12:52:e8:97:3b:a7:f7:7c:68:06:72:4b:7a:38:20:
c2:a6:f3:3a:f6:7d:57:a8:bf:de:8c:85:1d:bf:77:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B1:88:AE:3F:28:CA:AB:91:41:7C:45:01:A1:7D:7B:CA:32:94:9E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/X7GIrj8oyquRQXxFAaF9e8oylJ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.8.0/21
Signature Algorithm: sha256WithRSAEncryption
33:e0:fb:7b:a0:41:a5:0b:8c:b0:03:48:41:31:26:e4:34:ab:
9a:c5:5c:69:ae:74:f8:9e:8b:e4:d2:21:f1:65:28:3c:e8:4b:
1b:6e:04:01:cd:19:19:8f:47:64:ea:fd:d3:1d:95:b5:21:91:
4f:2d:93:f0:67:29:8e:24:59:4e:1f:2b:ca:4c:ee:13:20:58:
49:50:25:f6:2f:6b:01:33:8a:db:63:91:5b:da:19:ac:a0:d9:
cf:73:a4:69:3a:48:b0:23:79:fe:67:63:2e:1d:69:67:b3:1d:
05:a9:9b:be:8d:db:ba:b8:c7:8b:b0:cf:d1:ac:1d:a5:24:db:
8c:f8:3b:b0:3a:2c:86:a7:90:dd:e7:ff:d5:8a:7a:3a:0a:91:
e3:e0:5e:74:f1:2e:4f:23:d2:f3:3e:06:ad:a0:f1:b4:0d:b3:
d5:09:e4:57:64:96:fc:a3:ba:21:01:32:77:32:57:15:14:6c:
f5:08:41:35:d8:ea:80:63:38:88:b9:20:6c:15:89:9d:f5:6a:
20:80:71:4e:c0:a1:c8:81:9d:fa:3f:9a:43:b5:98:e5:64:8b:
11:ab:00:32:69:6c:3a:e8:d9:69:30:ef:d0:69:4a:a2:a5:bf:
31:a6:c0:1c:3a:7a:e7:db:f1:98:c4:38:b4:95:6e:7a:5c:4d:
64:0c:6e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org