Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aBGCH3XqezN5SJ4eTk0ROMZfNc8.roa
File: aBGCH3XqezN5SJ4eTk0ROMZfNc8.roa (raw, json)
Hash identifier: k7Ssyfl3PJXXVTiCOHWj8WG9NiD3dnbDhpOCXX7X1do=
Subject key identifier: 68:11:82:1F:75:EA:7B:33:79:48:9E:1E:4E:4D:11:38:C6:5F:35:CF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0EE7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aBGCH3XqezN5SJ4eTk0ROMZfNc8.roa
Signing time: Sun 07 Feb 2021 12:30:45 +0000
ROA not before: Sun 07 Feb 2021 12:30:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 123.0.40.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3815 (0xee7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:30:45 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6811821F75EA7B3379489E1E4E4D1138C65F35CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:bf:96:55:0a:d7:30:46:fe:c1:4f:9f:17:
43:58:7e:f8:5a:2d:a3:8d:bb:31:73:24:48:85:0d:
3c:b9:38:82:a0:a2:dc:a2:f4:a6:84:08:fe:39:bf:
eb:d7:ac:75:f0:b5:39:5c:41:05:34:0a:7d:a3:8f:
7a:5d:f0:95:a7:11:13:b1:d8:2b:23:d8:00:28:97:
c5:af:eb:bf:54:ae:de:ec:ff:1c:24:c6:eb:93:39:
e8:d4:13:e9:78:9f:b6:17:37:31:5b:38:55:0f:b1:
1b:c8:d0:e1:a5:db:fd:af:c7:8c:2b:b4:8e:e4:c1:
7c:49:be:1f:13:a6:cc:01:37:3c:93:5b:54:8e:d8:
9c:c1:46:2d:b9:61:ec:37:4c:96:2f:ca:dc:65:09:
5b:4c:57:b4:7d:9a:2d:97:b2:c0:7d:c4:4a:1a:90:
cd:1b:0f:37:b6:5e:4f:a8:b6:47:04:7d:87:a1:f3:
1a:db:48:08:87:3c:1d:ef:82:8f:d0:1f:36:74:f3:
6c:42:67:75:a1:10:11:6d:ca:78:39:dc:2e:08:1c:
77:00:bf:3f:2c:3c:2f:db:29:54:bf:2e:09:99:2c:
01:03:ae:2d:e0:7f:ad:b4:ca:7e:48:76:e5:95:0b:
5c:0e:72:88:5c:83:c9:89:be:dd:43:09:c7:30:03:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:11:82:1F:75:EA:7B:33:79:48:9E:1E:4E:4D:11:38:C6:5F:35:CF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aBGCH3XqezN5SJ4eTk0ROMZfNc8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.40.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:95:6e:2e:ee:69:bb:8f:9a:4d:f9:a0:23:1e:13:77:47:c0:
cb:bd:16:fe:33:45:e7:cb:74:49:88:db:90:9a:9c:81:2d:bc:
04:87:ad:e0:40:c6:94:b1:74:f5:04:82:39:32:9f:1d:fa:a4:
08:5b:17:3b:78:f4:c8:41:9d:68:50:92:14:96:0d:9d:97:11:
66:fa:50:12:72:d8:80:8e:57:14:30:4f:e1:c3:71:44:2c:ce:
e0:fd:12:0f:10:3f:4e:18:a4:fe:8f:60:c5:79:c1:9e:41:02:
3c:01:a8:d9:e7:7c:21:4b:a5:cc:3f:04:88:a7:52:85:c9:a0:
bf:7f:b4:9e:ad:b2:13:b0:94:87:a2:1c:b4:aa:aa:58:a3:96:
de:24:79:89:68:7c:22:70:8f:63:bc:d8:5c:2f:a2:9a:ff:cc:
5c:83:02:45:cd:1f:6c:df:9f:8a:97:60:88:6f:22:3b:12:e4:
20:68:98:62:1c:cd:ae:45:28:14:5a:62:a9:0f:1f:6f:32:13:
55:47:33:11:29:0b:76:7c:8e:10:58:5f:96:81:7a:90:cf:5e:
dd:b3:c4:2a:59:b2:b7:52:f5:2e:eb:5b:f4:67:e8:28:37:29:
53:54:a9:42:4c:7a:f2:6b:10:c8:22:04:0c:7c:91:dd:51:bc:
fa:4c:21:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:38 2023 by rpki-client on console-ams.rpki-client.org