Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_O0IJhDndSdjD_a0bqd7ZOM0qGg.roa
File: _O0IJhDndSdjD_a0bqd7ZOM0qGg.roa (raw, json)
Hash identifier: LoZs/P55ZVlL7CUq6nukPA5uxEUL/JfLnA2tpSSTfts=
Subject key identifier: FC:ED:08:26:10:E7:75:27:63:0F:F6:B4:6E:A7:7B:64:E3:34:A8:68
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DFC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_O0IJhDndSdjD_a0bqd7ZOM0qGg.roa
Signing time: Fri 01 Sep 2023 10:15:32 +0000
ROA not before: Fri 01 Sep 2023 10:15:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 122.100.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7676 (0x1dfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FCED082610E77527630FF6B46EA77B64E334A868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bb:cf:d6:c5:f8:d0:b2:28:a4:1f:e4:36:25:
cc:90:db:77:e8:c8:f7:99:f7:a1:4a:76:b8:b2:34:
5a:be:9b:c7:e0:47:31:68:f3:95:7f:e7:c3:1c:d7:
54:fe:36:02:b3:23:73:18:ab:b2:63:aa:fa:09:39:
62:de:87:e9:d6:cd:70:d8:eb:a4:57:06:0e:31:ee:
10:5d:2a:17:fb:18:f6:74:fc:1b:cc:fc:e0:e4:78:
d6:63:4a:e7:66:f1:ad:3f:77:ff:8c:74:70:92:50:
46:a4:32:13:d7:92:ee:19:a2:1e:d2:18:6f:20:a1:
d3:cd:27:56:c6:07:14:80:da:05:af:69:0e:4a:dc:
a9:6d:57:3e:b6:01:f0:0f:92:62:a3:52:ad:fe:74:
51:e1:7b:07:94:f4:7a:a0:cc:2d:74:79:72:37:58:
a2:3a:61:48:50:54:06:ec:16:b6:6e:1d:cc:68:a6:
90:f6:d7:6b:22:0b:0f:51:4a:4a:95:e1:dd:66:bc:
3b:c5:ae:51:26:77:84:73:0c:09:05:23:46:9d:19:
14:6f:fd:5f:3e:3d:41:7a:f7:71:a5:c8:d9:8b:94:
62:ff:df:f5:6c:36:ef:85:0a:b7:ea:b3:76:98:90:
91:d8:f5:cf:14:1d:0b:67:c9:50:af:17:b4:16:f7:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:ED:08:26:10:E7:75:27:63:0F:F6:B4:6E:A7:7B:64:E3:34:A8:68
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_O0IJhDndSdjD_a0bqd7ZOM0qGg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.64.0/18
Signature Algorithm: sha256WithRSAEncryption
08:b1:17:f6:01:fc:09:4e:88:cb:b7:64:92:87:7c:71:5a:7c:
86:ad:36:64:21:0d:4e:c4:32:4d:2a:0a:bd:30:4d:76:29:f6:
7b:fc:0f:4c:9a:b0:e8:c3:6c:75:c6:43:ba:e0:8d:a7:84:64:
e2:e9:ad:67:cc:43:34:3b:ae:ef:1d:fa:02:6c:2a:ec:0c:14:
c1:62:d2:57:0c:3b:15:1c:bf:5f:12:cb:e3:e7:d8:d5:2b:1f:
a9:19:e0:1a:98:b5:f3:6b:9c:4b:08:8b:68:a0:1c:55:d8:8d:
0c:d1:1d:79:e5:c8:6c:8b:97:3f:33:bb:36:6e:af:60:f5:4e:
6e:3d:bb:93:89:a0:a8:38:ba:ef:2a:26:83:21:83:d4:2f:bc:
6c:65:81:e1:b8:b6:75:cf:ad:ac:5e:1d:78:20:c7:59:7e:bc:
c5:7e:35:be:47:ad:f5:e9:b4:62:a5:ff:55:3e:f8:43:53:a1:
da:bc:6e:e9:9c:41:36:a2:a1:53:40:64:c8:40:6f:75:43:8c:
e0:f3:27:a0:00:76:8f:75:bf:7c:8b:9b:9b:31:7f:47:0a:15:
30:3b:04:8b:e5:4f:34:e9:a5:e6:ae:e0:a9:0c:4d:db:10:44:
c4:db:f9:09:9f:30:98:02:f3:14:c8:2e:4a:a3:80:50:16:fa:
2b:a4:bb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:07:30 2025 by rpki-client