Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zex-Rsy6nsGX2D7nOTbXo6_GnoY.roa
File: Zex-Rsy6nsGX2D7nOTbXo6_GnoY.roa (raw, json)
Hash identifier: JPLDu04kpLmDYLcX+Aw2+thr5dCvn0176YmCwz+G8pk=
Subject key identifier: 65:EC:7E:46:CC:BA:9E:C1:97:D8:3E:E7:39:36:D7:A3:AF:C6:9E:86
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1111
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zex-Rsy6nsGX2D7nOTbXo6_GnoY.roa
Signing time: Sun 07 Feb 2021 13:03:25 +0000
ROA not before: Sun 07 Feb 2021 13:03:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 124.6.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4369 (0x1111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:03:25 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=65EC7E46CCBA9EC197D83EE73936D7A3AFC69E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0e:dd:8c:93:87:46:6b:81:9a:20:52:d8:2b:
df:64:b8:e0:db:5d:c7:c7:37:bc:a9:8c:d2:24:ac:
0d:1b:65:9a:9c:66:74:78:ca:0d:ea:81:75:c3:3c:
32:69:2d:d3:ff:25:34:18:e3:e0:3f:7b:81:3b:38:
c7:7b:e6:1a:22:e2:f2:04:48:41:fd:52:de:a4:c7:
c6:52:7a:02:26:0a:58:ad:be:5e:cb:2e:d6:52:dd:
a7:7f:52:9a:01:8b:8f:22:88:e5:3d:fb:8d:f9:fc:
03:12:b2:e1:3c:a8:eb:56:63:b9:17:29:9b:d5:28:
e6:56:f1:e1:9c:34:48:d5:15:66:d2:14:0e:1f:aa:
b9:0d:63:67:50:d9:c4:dd:ce:d2:42:a8:9f:12:35:
8f:a6:ca:85:74:5d:9c:f4:44:39:47:20:63:1d:8a:
4c:42:84:da:2c:47:32:e9:4d:77:35:73:5c:4e:24:
2b:9f:bc:b3:69:3d:bb:db:67:8e:7f:54:d0:fe:ba:
7f:81:96:52:f4:ae:50:66:f0:e3:d2:13:a1:b2:97:
17:29:b7:33:f4:ff:9f:7b:58:82:90:1b:c2:50:cf:
39:6d:84:d9:35:a4:6c:76:cf:08:35:dc:6e:6d:2a:
0c:71:34:2a:95:05:a5:74:e6:10:a9:60:2e:0b:e6:
a7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EC:7E:46:CC:BA:9E:C1:97:D8:3E:E7:39:36:D7:A3:AF:C6:9E:86
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zex-Rsy6nsGX2D7nOTbXo6_GnoY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.20.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:da:4e:08:aa:39:83:0e:04:d8:15:4a:75:73:6b:51:cc:ff:
fa:d1:34:3a:f8:b9:fa:8e:80:30:2a:9c:4c:1b:56:e9:85:7b:
b9:a5:d5:13:9a:09:32:77:c0:9e:e8:10:26:a0:d3:70:c2:fa:
f4:f6:94:24:c9:7f:09:07:c4:75:2c:23:1e:7c:27:8c:23:eb:
e6:c0:41:80:1c:f6:e8:84:21:32:58:05:d3:ed:da:e7:fb:cf:
d8:0e:77:c8:a1:87:00:15:36:15:d5:51:35:b1:10:03:c2:ce:
47:71:f5:28:02:96:65:c1:58:e5:98:c7:76:c0:cc:f1:a8:44:
6c:d6:61:12:97:4d:77:c1:49:50:de:f4:3c:05:fc:7c:61:2b:
4d:1a:87:3c:bf:46:4f:e2:71:32:93:7d:cc:93:69:3d:32:33:
22:be:61:79:c5:27:7d:e8:b4:ff:74:a1:4f:53:16:bc:43:42:
19:0c:40:09:a7:a0:39:39:eb:31:9c:aa:0d:16:50:ef:4b:e0:
9f:db:39:a0:f9:be:24:2f:7c:5d:7b:82:c5:64:3e:e8:12:96:
64:c1:96:fc:8e:c7:cd:0c:c1:eb:21:cd:38:a2:b3:f7:b0:11:
9a:a0:f2:70:fc:b0:9c:f8:9d:80:de:c1:ef:25:91:a2:ee:32:
4b:3d:82:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:49 2023 by rpki-client on console-fra.rpki-client.org