Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZTMPq0xD821jF0tmemXveXUSMm0.roa
File: ZTMPq0xD821jF0tmemXveXUSMm0.roa (raw, json)
Hash identifier: LT8+FY4IBXvz4eDSsNRDiRHMuJjmjbf3aNZwZeyHe3g=
Subject key identifier: 65:33:0F:AB:4C:43:F3:6D:63:17:4B:66:7A:65:EF:79:75:12:32:6D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1267
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZTMPq0xD821jF0tmemXveXUSMm0.roa
Signing time: Wed 29 Sep 2021 02:54:31 +0000
ROA not before: Wed 29 Sep 2021 02:54:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 122.254.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4711 (0x1267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=65330FAB4C43F36D63174B667A65EF797512326D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:27:a2:04:b7:59:b0:77:24:2d:c7:88:8d:b2:
2c:cb:07:b7:ca:55:2a:f2:aa:06:96:92:8f:62:36:
ea:82:d6:9c:f7:5a:2a:95:b7:12:be:a7:a2:d8:10:
57:07:f8:f5:ff:1a:74:dc:ef:d2:6a:05:bd:f1:85:
91:91:be:ef:d6:90:94:b7:20:b9:17:67:ca:fe:b1:
6f:a7:dc:e2:50:25:61:f3:28:2d:bd:32:91:2c:d3:
eb:e9:52:a5:34:99:98:cb:71:a3:52:45:8a:1c:99:
9b:27:d7:05:e2:e3:34:fe:d2:fb:81:09:38:a7:19:
c8:61:cb:e5:66:38:f9:89:86:82:47:00:1e:ed:06:
46:50:44:76:9e:c7:85:e0:ac:b2:3d:94:b7:91:59:
7a:42:cd:4c:44:26:97:16:14:be:66:43:32:5e:ca:
ab:2f:7e:3a:87:1c:11:3b:bf:68:ad:04:79:7f:f1:
d9:5d:98:b6:e9:f2:c5:42:1b:1a:7a:11:48:ce:10:
9f:75:7c:15:66:fe:69:02:6a:fb:9e:99:f1:1e:22:
9a:7f:2c:81:27:27:c5:96:31:30:f9:53:39:4c:4e:
e5:08:b2:f9:3f:3f:8e:ad:b7:f1:c0:b9:b3:95:ef:
ca:4c:c5:b5:aa:b4:68:28:84:6b:c7:86:d4:91:09:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:33:0F:AB:4C:43:F3:6D:63:17:4B:66:7A:65:EF:79:75:12:32:6D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZTMPq0xD821jF0tmemXveXUSMm0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.32.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:c1:5b:0d:4b:b8:2c:e2:2a:b7:d7:f8:00:76:ce:5d:bc:c2:
08:e8:94:c6:88:ed:bf:6d:2e:59:23:65:a3:d1:d6:d1:9f:41:
d9:43:91:7f:5e:98:31:38:76:38:e7:ab:63:4d:21:26:70:e0:
fa:5f:c9:30:45:13:6f:8f:e3:92:4d:c7:4d:d0:a3:35:4d:7e:
2d:03:64:20:53:fe:66:44:be:6b:72:50:bf:46:ef:de:7b:7c:
29:d4:32:ea:bb:96:c9:95:0d:a3:87:63:a7:59:0c:6d:99:8f:
c3:20:31:76:ee:d2:d6:eb:a4:cf:a2:27:8f:4a:8e:4a:54:d1:
0f:99:eb:a0:35:eb:04:0e:36:e0:01:f4:fe:cd:a1:29:fc:eb:
2a:7d:8c:c1:95:9a:37:24:ee:e9:d3:23:63:d8:31:ae:98:d8:
9d:67:ed:51:12:bd:bb:c7:dd:71:63:80:d0:82:e4:c7:2b:e2:
4e:d9:45:3f:78:39:c1:d1:68:96:4a:d2:5b:7b:8f:75:ef:de:
23:c3:f7:72:82:b8:de:0e:29:67:c9:73:6d:f9:2a:57:e7:e4:
8e:6d:14:e5:ee:6d:36:d2:4f:61:39:85:2a:75:28:f4:dc:86:
e4:5a:ad:b7:4e:07:eb:27:aa:d6:34:9c:42:ce:07:c3:37:80:
df:3e:fb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org