Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/au0H5X3D_uHficJOSEmOqwsXQyc.roa
File: au0H5X3D_uHficJOSEmOqwsXQyc.roa (raw, json)
Hash identifier: CrxGYBkaRSc1CF33AimjO81YIIjo6UkfvQdFYbUUbBI=
Subject key identifier: 6A:ED:07:E5:7D:C3:FE:E1:DF:89:C2:4E:48:49:8E:AB:0B:17:43:27
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0EE5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/au0H5X3D_uHficJOSEmOqwsXQyc.roa
Signing time: Sun 07 Feb 2021 12:30:43 +0000
ROA not before: Sun 07 Feb 2021 12:30:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 123.0.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3813 (0xee5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:30:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6AED07E57DC3FEE1DF89C24E48498EAB0B174327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:1d:16:63:80:bc:c1:1f:f0:6c:a1:be:9e:
7f:5e:10:fe:9b:72:05:54:23:96:2f:ff:e3:f1:c6:
35:92:63:6b:92:93:06:5d:74:21:64:c7:64:5a:11:
50:3f:00:b4:c7:f8:e4:94:98:26:6e:c8:cb:77:4c:
a3:7f:61:0f:1d:6f:6c:c6:e3:b7:29:32:56:84:67:
38:46:fa:5e:3b:38:7c:20:c6:d8:ac:43:4e:16:bf:
52:f1:29:4e:15:0f:fd:0a:3b:cd:5a:84:0f:1c:57:
74:ad:bd:5c:e9:1f:3f:b8:dd:6f:33:1e:20:04:22:
3c:ef:12:e2:5c:97:28:08:11:30:91:43:eb:9f:a4:
a1:e7:ed:7d:7b:00:1b:0f:13:00:aa:2e:65:23:03:
9a:4d:5b:38:43:05:b4:4e:38:7b:76:d8:41:55:1c:
20:c9:e0:53:b0:32:fe:5f:32:14:36:ac:db:f7:96:
0f:2c:c8:08:eb:7d:bd:85:32:c3:5a:d7:de:66:bf:
6d:1e:d3:0f:06:9a:a3:be:f3:cd:f2:ef:16:6b:c2:
db:07:d5:d9:35:75:c4:2b:b3:7d:0f:b5:b2:55:5f:
3b:47:84:c0:17:b0:f5:4e:5c:21:c4:9b:30:23:48:
91:c4:70:2a:b9:60:87:91:08:39:90:41:11:dd:f4:
a9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:ED:07:E5:7D:C3:FE:E1:DF:89:C2:4E:48:49:8E:AB:0B:17:43:27
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/au0H5X3D_uHficJOSEmOqwsXQyc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.32.0/21
Signature Algorithm: sha256WithRSAEncryption
65:89:d0:f7:89:21:ae:30:5e:0d:25:2a:72:cb:31:0e:dc:46:
28:30:c9:f1:36:8c:46:0f:e1:58:e9:bc:8c:3f:f0:81:53:e0:
0e:9e:44:d1:5e:cf:45:2d:12:6d:1a:75:39:73:44:f0:b5:45:
7c:df:f4:3f:b1:26:33:3d:e8:e7:3a:09:3c:3c:2a:bf:cd:1e:
2c:c1:95:b0:89:9f:6a:d3:af:8f:80:f9:9f:d5:6b:d7:6d:a2:
e8:c4:c1:ef:e9:49:0c:59:cd:46:dd:01:28:e0:a3:11:19:92:
77:3b:12:52:e6:da:0e:e6:ce:49:b2:f4:5c:15:25:b2:a0:df:
ce:72:f0:c4:d8:45:4b:71:a1:e2:4d:80:16:c9:26:81:11:b4:
bd:e0:59:23:86:a8:47:ca:f5:2b:1d:7b:53:cd:65:e6:20:69:
69:48:99:d8:88:b4:0f:c3:9d:fe:1c:5a:ac:89:67:2f:e0:43:
08:fa:a1:b1:a3:82:32:9d:06:6a:af:2a:51:61:b3:f0:ea:82:
d6:0c:4f:f8:1b:36:06:4b:31:af:4a:3e:ed:c9:9b:2c:86:65:
32:46:77:ff:fe:e3:7f:71:56:2c:b1:39:4c:d5:a6:30:6d:7c:
12:88:99:03:02:16:f7:ad:35:de:46:4f:48:15:d5:c5:be:ca:
bf:41:3d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org