Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/i3c6KFB-OC4te_a3mHYMFxQwH2o.roa
File: i3c6KFB-OC4te_a3mHYMFxQwH2o.roa (raw, json)
Hash identifier: ti/w6EPg1R/0gXLCRy5H/pyvIbfWYbc5wXed+85Z4ds=
Subject key identifier: 8B:77:3A:28:50:7E:38:2E:2D:7B:F6:B7:98:76:0C:17:14:30:1F:6A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/i3c6KFB-OC4te_a3mHYMFxQwH2o.roa
Signing time: Thu 15 Sep 2022 02:35:58 +0000
ROA not before: Thu 15 Sep 2022 02:35:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 122.254.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8B773A28507E382E2D7BF6B798760C1714301F6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:68:77:7f:17:6e:d3:14:5d:72:ca:53:82:91:
df:42:7d:bd:29:71:c6:df:76:b7:9d:8a:3b:ad:e6:
1f:d0:d4:45:f7:a5:af:d7:57:48:46:d6:05:eb:a3:
28:fa:cb:09:d6:c5:6a:95:d5:6e:4c:45:b5:17:27:
30:9c:a4:29:dd:5e:cc:2b:35:7e:5e:5b:ff:f6:e0:
7b:62:ee:ea:9f:6d:a4:ae:98:af:a5:d3:65:1c:14:
d0:72:50:b6:2a:92:33:ab:00:e2:ce:12:21:0a:dc:
bb:81:2c:9a:59:ae:51:a3:02:20:a6:18:52:7b:b1:
15:68:07:a3:24:e3:40:d6:63:ba:d3:0e:97:c5:f0:
82:cc:1b:84:17:af:b4:bb:05:f8:d8:61:75:e2:3f:
b1:89:86:df:bc:83:f4:71:5e:37:3c:0a:76:1a:d9:
69:b4:77:8f:43:a5:02:0c:19:f0:70:cc:66:24:75:
ed:3e:22:8e:01:a3:e2:bb:88:15:2f:6a:96:88:78:
db:b7:da:a0:c0:ab:81:9a:84:2d:33:9a:04:ae:9b:
96:0c:15:0c:52:e8:76:34:54:11:cf:48:21:6b:61:
3a:bd:d4:b6:90:bf:12:f1:b5:ca:e4:01:ee:cb:6c:
41:f6:63:17:87:62:69:32:3a:f9:27:bd:3c:27:40:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:77:3A:28:50:7E:38:2E:2D:7B:F6:B7:98:76:0C:17:14:30:1F:6A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/i3c6KFB-OC4te_a3mHYMFxQwH2o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.48.0/21
Signature Algorithm: sha256WithRSAEncryption
52:c2:17:83:1e:45:95:b7:61:53:f2:4d:71:22:94:08:19:65:
0f:90:27:d3:e0:89:6e:a1:b4:b4:72:d0:db:c9:a8:4c:82:e5:
e6:b7:02:73:22:f9:ab:0b:10:17:14:da:a9:c4:a8:c9:3b:0f:
ce:0f:9e:b2:d0:02:bc:60:85:b5:fc:4f:dc:bb:97:1b:3e:16:
e6:8c:dd:0d:53:70:35:18:b8:dd:33:c9:d4:31:f3:0e:6b:82:
57:32:f7:e0:6c:06:9e:41:45:e6:1d:a1:35:24:71:ee:24:ee:
14:ae:2f:5d:6d:cb:ee:4d:be:6d:8b:41:a5:c8:53:e2:c7:f0:
bc:68:13:c8:ab:cb:46:09:dd:d4:bb:f3:be:6c:12:6e:03:6c:
78:03:f0:10:cf:17:c8:9e:df:26:e4:bf:05:e5:83:d4:a5:cb:
1f:d4:64:8c:d4:19:b1:b6:c7:a8:55:ca:61:b1:c2:fa:e8:78:
b1:0f:b9:0e:22:be:67:51:09:ab:17:a7:17:a9:8f:3e:c9:33:
6e:20:49:68:7a:ea:bf:1b:0e:ae:8f:87:fb:bb:dc:1e:27:c0:
44:16:0d:de:18:fa:a7:8c:c9:80:e9:79:02:d0:0c:d1:e9:35:
7b:19:c9:d0:fa:91:5e:bf:ed:32:75:ea:66:e4:52:df:6f:49:
24:19:0f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org