Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cqRPjtr8CHwA5GLCkQAc33pMau8.roa
File: cqRPjtr8CHwA5GLCkQAc33pMau8.roa (raw, json)
Hash identifier: MC1pb+kDaSNprghMxSelJdzeKT9Kut+zWZkECbJhFbo=
Subject key identifier: 72:A4:4F:8E:DA:FC:08:7C:00:E4:62:C2:91:00:1C:DF:7A:4C:6A:EF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cqRPjtr8CHwA5GLCkQAc33pMau8.roa
Signing time: Thu 15 Sep 2022 02:35:16 +0000
ROA not before: Thu 15 Sep 2022 02:35:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 124.6.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=72A44F8EDAFC087C00E462C291001CDF7A4C6AEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:56:1f:e6:44:52:30:c0:e6:e9:2d:3b:bf:
80:d7:19:71:d7:3d:2a:e6:96:b6:77:47:63:f3:db:
42:77:86:d6:c6:72:53:ac:7f:6b:89:c2:79:21:f0:
42:87:7e:0d:12:b6:68:68:80:b2:78:34:75:77:a2:
aa:25:d2:6b:8c:d3:de:44:7c:d6:37:89:f1:9a:da:
c9:f7:16:86:ba:89:91:fe:6d:39:32:d0:84:39:ab:
0d:64:68:a8:6b:d8:65:40:67:6b:f5:62:99:2c:66:
17:fe:2b:4f:c8:56:55:cf:d1:bf:ed:f2:4d:3a:4b:
95:6b:7c:70:a4:15:5c:64:dc:e6:1c:c7:61:9b:07:
1c:f9:3a:fd:05:73:51:9a:bf:1e:5c:c0:5f:ec:3c:
3d:62:75:df:d6:b6:8c:45:b3:b5:6c:21:61:29:8f:
96:48:be:47:ae:22:fc:bd:76:59:9f:ee:87:f9:64:
67:68:b5:8d:d3:ad:4a:1d:7f:03:36:83:40:55:fb:
39:31:6c:cd:83:30:e0:31:b1:0c:5d:eb:34:8c:67:
88:b8:0f:3a:89:c4:4c:8a:9a:73:a2:13:14:32:a7:
92:cf:e0:d1:1e:a7:5d:45:86:02:7c:b7:39:54:42:
48:c3:08:6f:89:cc:e1:c2:2a:97:c1:75:d4:3a:b7:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A4:4F:8E:DA:FC:08:7C:00:E4:62:C2:91:00:1C:DF:7A:4C:6A:EF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cqRPjtr8CHwA5GLCkQAc33pMau8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.8.0/22
Signature Algorithm: sha256WithRSAEncryption
32:5d:cc:c2:26:c9:b9:11:95:a9:04:a6:b7:1f:20:c6:52:98:
3b:be:df:00:d1:46:33:a7:8c:4d:04:cd:15:d4:54:38:d2:2a:
68:d4:d4:75:84:fe:b2:07:6e:c6:49:7d:f0:62:b4:51:17:58:
1e:4f:b8:52:57:ba:df:58:35:a2:5c:81:a0:a2:9d:fa:3e:35:
00:8b:0d:36:6f:d8:5d:92:26:3f:cd:f4:14:16:34:7d:a4:8c:
6c:11:dc:25:84:e0:6d:0e:bc:05:f5:a8:82:76:d2:47:6f:a3:
db:e2:e5:dc:6c:e6:97:8b:b7:eb:f3:99:a9:cd:80:12:2d:f7:
75:33:52:e6:93:f2:41:79:2a:12:00:6a:b4:e0:7a:1f:65:dd:
f4:ef:0a:d9:eb:cb:d8:eb:0a:45:ec:c0:c9:64:e1:40:38:42:
36:b9:0b:6b:2d:58:cb:91:63:d7:f6:06:f7:ba:6d:99:4b:d1:
53:61:76:db:8a:05:0e:2d:9c:df:e5:e4:2f:2b:81:73:01:a3:
83:93:d9:9d:27:e0:37:a1:cf:fe:ee:40:02:9d:d6:2a:ff:8b:
71:18:87:e5:54:f7:17:13:23:2e:cf:a8:9d:36:60:73:fd:81:
62:d2:17:fa:63:ad:02:e9:cf:bb:4f:9c:6a:77:66:ea:20:b9:
27:e4:90:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org