Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dBoC0Z5N7qQrNZELCZXQev9rx6M.roa
File: dBoC0Z5N7qQrNZELCZXQev9rx6M.roa (raw, json)
Hash identifier: e0K7GyG/ArtSV6KiIoBW0w+KgUjGDgTRJLTjENlxK7Y=
Subject key identifier: 74:1A:02:D1:9E:4D:EE:A4:2B:35:91:0B:09:95:D0:7A:FF:6B:C7:A3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E3A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dBoC0Z5N7qQrNZELCZXQev9rx6M.roa
Signing time: Fri 01 Sep 2023 10:15:48 +0000
ROA not before: Fri 01 Sep 2023 10:15:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 124.6.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7738 (0x1e3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=741A02D19E4DEEA42B35910B0995D07AFF6BC7A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:b2:3e:e0:d6:ba:65:5f:65:5c:7c:c0:a3:
db:36:c5:77:9e:13:04:1e:ba:15:20:a2:8e:9e:32:
34:3f:df:9b:c4:1b:5e:af:b2:58:61:ea:d6:83:f5:
1f:a6:7b:ef:a1:44:0b:83:bd:08:4e:15:ca:ec:66:
6d:cd:a6:2c:96:ae:5a:ba:89:30:3f:c0:49:bf:57:
2e:06:60:1d:9f:b7:18:dd:9e:bd:68:fa:2d:d9:45:
93:24:fb:6e:64:0a:bf:a1:1c:8e:50:74:b0:91:15:
53:eb:12:51:59:85:77:bb:e2:82:70:0a:4f:df:c4:
7a:d8:a4:a7:66:82:f2:81:00:69:c3:37:57:3e:8a:
9b:d0:a4:99:20:3c:b8:62:79:e3:ff:90:d1:64:26:
a6:82:59:a1:d4:74:98:8f:38:cb:3f:d5:24:8c:e2:
da:ba:13:03:92:02:cd:8d:90:3b:7f:7f:1a:83:e6:
37:b1:f9:1c:8a:af:2f:03:41:bf:cd:89:0c:da:7a:
20:20:c7:81:07:ed:cd:73:0b:71:6f:9b:46:07:8d:
c9:17:08:e0:5b:e6:e9:da:1f:e2:4c:18:49:5f:d7:
a7:05:66:23:84:95:0a:1b:08:83:23:76:d2:41:6c:
ff:d5:ca:d3:7f:c7:7a:6c:1c:18:80:00:6a:2b:b5:
39:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1A:02:D1:9E:4D:EE:A4:2B:35:91:0B:09:95:D0:7A:FF:6B:C7:A3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dBoC0Z5N7qQrNZELCZXQev9rx6M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.28.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:0f:e7:8e:11:bd:b7:1e:f9:3e:37:eb:2c:e6:ac:f6:eb:fd:
cf:04:30:f4:69:08:23:12:4d:df:c8:db:5a:c3:ba:a8:ee:47:
bc:ee:99:ba:bf:7c:c8:c0:1b:25:15:52:54:49:79:e8:88:98:
93:9e:bf:6d:12:dc:c1:8b:2a:53:4f:e8:79:5f:2e:ee:70:75:
7c:fb:2f:67:22:e1:3d:d8:a2:9d:6f:6a:da:cb:90:39:1d:06:
e1:31:77:e1:72:1e:32:3e:db:ec:16:fd:cd:d5:b7:3c:8f:a8:
95:17:7e:9b:75:f9:33:3b:ed:f4:f6:bf:04:49:44:e4:ad:aa:
a5:eb:6d:d6:18:36:76:3f:a7:f3:63:53:67:47:25:67:10:45:
ab:0c:f9:b5:a1:98:54:30:a7:c1:3d:f4:24:a2:56:58:2a:3a:
3b:4e:82:5b:dc:79:09:87:80:97:16:8d:04:d5:21:c3:54:48:
c8:d9:63:0e:98:67:b2:c9:74:be:ad:b3:c7:2e:e4:6d:ed:ab:
b2:37:56:cd:af:05:3d:4f:1d:43:0b:2b:80:7d:6b:28:28:80:
6e:1c:03:38:4f:0f:0f:04:85:c0:25:23:38:20:9a:f1:14:83:
fc:ad:22:82:69:3e:57:99:a4:e6:ac:d6:c6:a0:9f:e7:56:6d:
e3:14:d0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:08:04 2025 by rpki-client