Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lBrITJWe4fhPaYgmVK_0XRGmjuk.roa
File: lBrITJWe4fhPaYgmVK_0XRGmjuk.roa (raw, json)
Hash identifier: x3ImxDz5NHJ5Pykf9/bq57caejfKYDTq3Y85nhK38MI=
Subject key identifier: 94:1A:C8:4C:95:9E:E1:F8:4F:69:88:26:54:AF:F4:5D:11:A6:8E:E9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1113
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lBrITJWe4fhPaYgmVK_0XRGmjuk.roa
Signing time: Sun 07 Feb 2021 13:03:28 +0000
ROA not before: Sun 07 Feb 2021 13:03:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 124.6.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4371 (0x1113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:03:28 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=941AC84C959EE1F84F69882654AFF45D11A68EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:dc:ab:9f:93:e4:f2:5d:c7:a3:b2:87:27:
5a:76:dc:55:00:49:43:2d:f4:5a:e8:79:dc:42:0d:
fc:3e:1c:cb:f9:c9:7d:c6:e7:a6:91:91:f5:d2:56:
93:13:b0:fa:55:fd:94:03:d3:54:d9:97:f5:05:31:
a2:74:59:e9:48:60:a8:e3:a0:ec:85:a0:c1:93:44:
4c:23:b3:75:77:eb:68:e2:ec:c8:b3:6c:84:f3:72:
f6:d8:db:aa:e2:40:fc:08:fd:83:5d:84:b7:c9:ed:
2b:b5:24:84:76:2e:10:8b:4c:4d:3b:a1:47:23:37:
d9:24:73:32:db:4a:36:71:39:ea:50:99:c0:df:4b:
f8:0f:9a:56:f8:bc:36:16:9d:f1:2a:84:a3:bc:62:
57:7a:94:7b:07:c5:57:e4:e6:07:b4:1f:42:40:86:
cc:6e:de:c6:eb:aa:15:f3:5a:63:8b:67:e5:0b:7a:
b9:40:01:70:23:7c:dd:12:24:75:b8:33:a9:09:8c:
5d:17:3c:a0:cd:0a:f5:ee:a4:1d:72:85:2d:05:69:
6f:d9:3f:d9:72:22:8b:38:7d:58:ba:e3:68:fc:f8:
52:c8:32:92:a6:65:c3:5d:5b:56:64:7b:79:7e:1e:
cc:f5:f9:2e:63:17:5b:07:49:34:9c:c1:98:95:6b:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1A:C8:4C:95:9E:E1:F8:4F:69:88:26:54:AF:F4:5D:11:A6:8E:E9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lBrITJWe4fhPaYgmVK_0XRGmjuk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:3d:0b:0f:87:60:32:54:06:48:01:cf:52:8c:b7:73:c1:8a:
a2:57:cd:ce:f2:18:1b:1d:83:c8:73:b4:4b:9b:69:87:d4:ad:
fd:ad:d6:6d:39:d6:2e:b2:95:2a:76:01:72:cb:2d:23:cd:48:
f6:a2:a9:96:53:63:49:c7:ad:c2:b6:00:54:c7:ff:03:d3:41:
8f:8c:ca:a0:6a:b7:7c:08:37:c4:0e:02:9c:20:da:68:73:83:
44:1d:56:09:2a:58:31:67:42:fa:55:c3:49:5a:8a:f5:96:92:
cd:fe:64:8f:e6:33:cc:8e:0c:73:69:d2:4f:e8:15:49:aa:92:
11:35:3c:2d:23:b3:32:7a:fd:ac:25:cc:1f:83:ae:4e:29:48:
02:d4:e5:10:bc:0f:3c:5c:81:34:5d:3f:6b:8f:9a:3d:21:a7:
66:43:b6:b4:54:26:a1:41:60:a8:14:fb:b0:aa:6f:d1:2f:9c:
ec:91:1b:45:ed:5c:a0:f2:c1:e2:76:51:bd:12:88:65:23:cd:
a8:84:62:2c:0f:0f:69:c9:8e:14:26:7f:57:a6:5b:9d:ec:43:
d7:48:f3:8b:91:ef:9c:ed:10:36:d5:dd:20:39:eb:3d:83:b6:
ad:fe:61:ac:bf:70:80:7c:65:f3:d5:4c:5f:c0:d7:d3:a7:9e:
80:5d:b4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org