Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gEGpiGQ-OSZByY6ctscFv2E6fxo.roa
File: gEGpiGQ-OSZByY6ctscFv2E6fxo.roa (raw, json)
Hash identifier: 9iPzfwC51U2yV/P2WpIOSqCwkSWYApv+/7/mmY3K+mA=
Subject key identifier: 80:41:A9:88:64:3E:39:26:41:C9:8E:9C:B6:C7:05:BF:61:3A:7F:1A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gEGpiGQ-OSZByY6ctscFv2E6fxo.roa
Signing time: Thu 15 Sep 2022 02:36:36 +0000
ROA not before: Thu 15 Sep 2022 02:36:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 122.100.110.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8041A988643E392641C98E9CB6C705BF613A7F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:72:ea:ce:66:2d:49:eb:6c:78:a9:58:2a:
80:7b:40:bc:1d:2c:7d:fd:4e:6a:36:da:e9:09:a8:
1a:63:7c:17:b2:cd:56:83:3b:97:0e:d1:58:2e:61:
c9:2a:11:49:26:1b:b6:6e:b9:8a:4a:62:f5:45:70:
0e:fb:4c:ca:50:a1:9b:8c:7b:6f:91:5c:1f:bf:d5:
35:6a:30:84:eb:45:c3:4a:22:6c:70:cb:ad:01:e6:
9f:33:06:0d:f7:ec:79:a1:44:97:7a:58:c2:3f:02:
8f:73:b4:67:00:0f:13:c6:ba:b6:ae:78:25:0b:a1:
7d:7b:82:e5:70:05:b8:e9:84:df:dd:4f:b9:85:87:
6e:49:b1:34:cb:4d:42:19:ab:54:90:85:db:41:55:
b6:f5:0a:29:bd:bf:8b:44:9e:11:d0:55:4a:e0:4c:
dc:ed:e2:42:18:c4:6a:bc:c3:de:09:11:98:6d:50:
55:48:8d:67:40:96:73:c1:94:7b:8b:92:3e:4a:4b:
3a:05:4b:5d:ff:2e:9b:0d:85:49:02:62:4d:05:18:
19:63:92:5f:f4:f6:94:e6:92:b8:1e:20:fc:80:43:
61:74:e4:44:86:d1:bc:c0:4f:1b:53:4a:d7:66:24:
9f:2f:96:70:71:3e:a7:62:5b:55:97:d4:2b:b9:f8:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:41:A9:88:64:3E:39:26:41:C9:8E:9C:B6:C7:05:BF:61:3A:7F:1A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gEGpiGQ-OSZByY6ctscFv2E6fxo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.110.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:da:b6:e7:ec:00:98:bd:b4:fa:6f:d7:39:e7:a1:8d:80:88:
10:00:85:a3:60:ac:ce:f3:f3:8f:df:46:92:df:49:1e:6a:cb:
52:08:a8:37:51:7b:b6:a2:2d:f8:f3:ed:d1:4c:c7:74:c5:45:
6e:b1:7c:69:da:54:38:76:9b:37:15:c7:f8:30:10:ce:8c:10:
3e:cb:4d:88:c1:ca:2a:1b:11:ca:14:b0:bf:aa:b6:1c:61:36:
d2:52:80:9b:99:15:ab:6c:86:39:7d:73:25:cb:91:28:6d:da:
94:84:eb:da:32:6f:4e:90:ab:cd:46:40:a7:1d:bf:c3:7b:6c:
6f:96:5b:ca:6f:b8:f7:af:91:4e:6a:9a:0a:1f:58:87:2d:b8:
91:07:2f:f8:81:d9:b9:44:3b:90:27:2e:7a:60:b3:d2:9c:1a:
c3:e5:6a:84:87:bd:24:95:6b:53:34:84:b1:2b:9c:7c:bf:09:
8a:94:b8:f5:27:1f:b1:14:7d:24:ad:e4:ef:1a:bd:cd:8e:30:
8a:99:c5:d6:7d:f5:62:17:90:ad:01:5d:be:8a:31:03:a9:e2:
85:59:ae:0e:d2:06:92:f4:df:25:0b:24:7b:74:70:e0:90:35:
30:5a:1d:a9:8a:c2:75:6a:b9:53:05:63:86:f7:39:6c:58:fc:
2f:b3:62:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org