Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c0gPVhmDLDGktIjZzlcp0p5qxSU.roa
File: c0gPVhmDLDGktIjZzlcp0p5qxSU.roa (raw, json)
Hash identifier: e1rgw5+43jHTG4wgC1MXYtz9plUeuEL5QpRN5OGIY6Y=
Subject key identifier: 73:48:0F:56:19:83:2C:31:A4:B4:88:D9:CE:57:29:D2:9E:6A:C5:25
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B28
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c0gPVhmDLDGktIjZzlcp0p5qxSU.roa
Signing time: Thu 02 Feb 2023 07:14:44 +0000
ROA not before: Thu 02 Feb 2023 07:14:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 122.100.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6952 (0x1b28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 2 07:14:44 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=73480F5619832C31A4B488D9CE5729D29E6AC525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:10:29:23:32:6f:fc:d1:87:6a:79:6a:d5:00:
dd:20:2d:c8:d2:2c:d6:a3:5d:85:38:09:12:46:84:
33:66:64:bb:3f:8c:56:0e:2b:27:fa:0f:39:af:81:
e8:8b:d4:87:22:58:2a:1e:94:7d:eb:d0:df:0e:6c:
59:6a:56:16:2a:12:ec:80:56:b9:0a:98:2f:b0:c5:
cb:65:80:da:c2:20:30:89:8b:49:23:6b:a9:1f:dd:
ad:c3:3b:d7:c3:9f:61:d8:da:b6:20:79:0e:a5:de:
a2:67:54:df:04:d9:7c:33:86:5c:bb:2d:65:26:b2:
42:70:74:c5:8a:2c:ba:79:49:32:33:d5:01:07:16:
d5:56:af:90:97:26:8d:d5:e1:da:aa:bc:fa:5c:7c:
37:6c:fc:2d:2b:e6:d0:8c:c9:97:6f:6a:16:3a:07:
f7:52:7f:e1:b4:40:10:30:30:df:68:9c:a6:72:01:
f8:72:e0:bd:3f:78:89:ec:61:33:82:6f:c2:45:c4:
b1:30:a4:80:75:64:b1:ca:e9:8a:5e:7d:84:db:44:
57:2f:06:90:29:4d:b8:29:73:16:c2:51:ef:b3:ed:
78:f7:f0:9f:da:66:eb:6e:ff:93:8a:00:37:29:47:
e4:74:8e:b1:d0:72:47:2c:8a:e0:29:52:bc:66:50:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:48:0F:56:19:83:2C:31:A4:B4:88:D9:CE:57:29:D2:9E:6A:C5:25
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c0gPVhmDLDGktIjZzlcp0p5qxSU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.64.0/18
Signature Algorithm: sha256WithRSAEncryption
75:80:d9:20:43:e3:05:bc:94:6b:d7:1f:25:d8:a9:e2:ea:00:
b2:bb:f4:17:97:04:04:b5:aa:7d:fb:88:fb:4e:89:fd:16:72:
84:89:b3:c3:16:a0:0c:1b:26:50:ab:9d:9c:4f:eb:9f:bb:ab:
56:a7:0d:60:e5:af:fe:98:81:44:5c:d0:0b:a9:63:0f:96:a9:
a5:b6:bc:d5:29:5a:a4:b1:5d:c6:9d:95:38:35:ca:58:95:a4:
d1:15:e3:f5:88:41:28:7f:23:13:08:47:f6:58:1e:0e:1d:9c:
ed:a8:21:b8:4a:cf:30:f1:25:ba:a0:81:43:b5:f1:2a:13:24:
9e:6b:24:ff:2c:ca:88:94:39:60:ec:e8:e7:66:ed:e1:6a:fa:
f6:26:6c:68:01:49:59:29:4d:ec:fb:b7:26:bb:20:2b:7e:83:
a7:f1:f6:a7:44:0a:f0:e8:d3:f5:78:ed:1f:e5:80:22:f4:ac:
07:9e:0d:fd:aa:40:f5:68:64:85:f0:5d:79:37:3d:ce:fa:6e:
07:a0:70:83:b0:39:47:c0:2b:43:9b:ca:26:12:d3:68:41:23:
ca:52:d7:2a:87:60:b4:46:6a:e4:82:20:f5:65:0d:4c:78:7c:
77:46:6a:e6:9a:db:0d:79:75:ad:57:41:a1:eb:6e:22:59:cf:
ae:14:a1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org