Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l2es97ZX7oYFxO_h_u6AumZohaU.roa
File: l2es97ZX7oYFxO_h_u6AumZohaU.roa (raw, json)
Hash identifier: GcOu9GmYo0688O1rebsrrAR5DN1a/+nrAhwgZCjSSXM=
Subject key identifier: 97:67:AC:F7:B6:57:EE:86:05:C4:EF:E1:FE:EE:80:BA:66:68:85:A5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l2es97ZX7oYFxO_h_u6AumZohaU.roa
Signing time: Thu 15 Sep 2022 02:36:22 +0000
ROA not before: Thu 15 Sep 2022 02:36:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 123.0.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9767ACF7B657EE8605C4EFE1FEEE80BA666885A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:b0:85:5b:8e:bd:c7:f5:e3:e4:4f:d8:2f:
01:1f:24:0c:ac:dc:52:00:31:6a:37:c4:d2:ab:d8:
09:44:a7:04:01:55:aa:68:18:dd:17:16:e6:cc:a6:
51:e0:dd:ff:48:f3:4b:0b:c6:f2:6c:4f:43:03:39:
e1:b2:a6:f0:e6:a2:de:a4:c4:23:3d:4a:8f:1f:1d:
f0:6b:a2:6a:e9:78:82:3b:ae:7b:66:49:d7:ad:80:
ce:30:46:dc:ee:e0:32:ba:3a:90:41:a6:e6:ab:be:
b2:da:ff:15:45:69:ac:8a:84:32:6c:0e:2d:26:4b:
62:d7:f0:ea:a8:b1:b8:07:f5:f2:17:7a:dd:f7:28:
15:bc:65:11:57:fe:6d:59:fb:6f:67:2b:9b:aa:2f:
70:12:5a:b2:77:85:a7:d3:97:10:1b:49:3f:70:54:
75:84:bc:c3:5f:d8:7e:99:9d:73:60:fd:81:c0:9c:
1a:e4:65:be:df:fd:ec:b8:82:9e:6e:27:e6:90:32:
dd:36:24:e4:ad:f2:d2:f8:be:1c:a2:2b:2c:3e:1e:
8b:cd:82:4d:4c:92:31:8b:80:e8:08:a5:3a:90:83:
d2:0b:f5:ad:7e:49:3d:89:fb:40:6d:63:43:1f:57:
f8:63:36:49:f1:57:72:f2:af:c1:b8:f6:3e:8d:8f:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:67:AC:F7:B6:57:EE:86:05:C4:EF:E1:FE:EE:80:BA:66:68:85:A5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l2es97ZX7oYFxO_h_u6AumZohaU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:f7:5c:32:ca:d5:95:68:52:e8:ee:d1:42:9c:41:a8:76:4a:
a8:43:01:bd:d5:90:26:47:70:1d:3a:8d:7a:a0:f1:e9:ce:fa:
63:8b:66:21:e7:d3:02:ab:34:33:49:8e:62:57:40:c3:61:12:
a9:e9:db:b0:5d:d0:ea:e2:f9:2d:86:a6:d5:f4:5a:b5:5f:ba:
5f:47:7a:db:81:02:a6:a3:45:28:64:eb:22:45:93:ec:da:80:
2a:95:39:52:53:a8:e1:b7:76:23:f6:69:0a:a2:ca:a4:cd:73:
3b:f4:a3:95:a2:a0:a7:11:15:68:06:ba:84:db:cb:2e:02:ec:
8b:c9:9d:04:76:e6:7a:ea:da:04:55:82:63:e0:81:25:3c:b6:
d9:2d:95:3b:52:f3:0f:2e:47:f4:5d:f1:76:9e:30:b9:5b:1d:
ef:4e:64:ac:26:5d:a5:be:d9:09:fe:1c:b3:60:a7:6b:f1:fe:
d6:6f:77:2e:f6:a4:d6:0e:49:e4:78:95:f2:53:03:06:7d:9b:
92:50:97:82:90:37:5c:6d:29:e4:ce:8c:48:c1:de:96:10:f9:
a4:d6:d0:d2:e9:26:a8:be:fa:a8:c4:a6:b8:39:b5:65:09:ad:
cc:93:ab:75:13:72:c4:9d:06:6c:5e:2d:58:99:6a:76:81:fb:
43:c7:db:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org