Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lPWAg9bN6nv1zKnPOn5LOREAcXI.roa
File: lPWAg9bN6nv1zKnPOn5LOREAcXI.roa (raw, json)
Hash identifier: X/IfSLPtenU8MbPtArylODGth7QwQGdbnQMyRZvHkxg=
Subject key identifier: 94:F5:80:83:D6:CD:EA:7B:F5:CC:A9:CF:3A:7E:4B:39:11:00:71:72
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1718
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lPWAg9bN6nv1zKnPOn5LOREAcXI.roa
Signing time: Sat 22 Oct 2022 05:31:26 +0000
ROA not before: Sat 22 Oct 2022 05:31:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 122.100.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5912 (0x1718)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:31:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=94F58083D6CDEA7BF5CCA9CF3A7E4B3911007172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0a:02:ce:a9:db:e5:89:5c:e7:eb:6a:2e:cd:
e9:6e:ad:52:50:a6:6d:15:1b:2d:4f:84:74:cc:47:
09:24:f9:c0:59:87:67:3b:93:aa:e8:52:ea:87:da:
4b:dd:ed:10:13:d1:4e:f6:d6:84:6d:95:23:2b:6f:
fd:70:17:d1:4c:32:5c:4a:bf:8d:a0:23:38:b4:b2:
d2:f2:47:aa:6f:1d:de:72:0d:f3:39:1a:21:ee:5e:
18:08:c3:d3:14:dc:6c:bd:6b:93:42:a0:fb:1e:8c:
41:da:c6:0d:56:15:8e:61:27:57:05:fc:11:8a:03:
0b:4d:8f:9f:71:c4:8a:4b:38:64:e2:7d:85:3b:cf:
40:33:8d:0d:5e:0a:1a:93:fa:0c:43:0d:30:28:62:
c1:c4:c9:3b:a1:6f:97:16:5f:05:a6:63:8a:fe:5f:
bf:b3:37:99:03:89:2f:9e:75:ef:e9:cc:dc:5f:c4:
53:53:c0:eb:e1:57:bb:76:4c:68:b3:d0:eb:7a:71:
5c:5f:da:78:e1:b4:c8:68:f1:d8:f3:39:da:88:f3:
a8:40:15:e9:8f:11:77:0f:d6:b3:89:95:f9:b6:b9:
2a:85:07:ed:de:02:2b:59:cc:3b:1f:a9:71:83:41:
eb:a6:4e:04:24:10:a7:9c:3e:18:96:ab:d5:69:8f:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F5:80:83:D6:CD:EA:7B:F5:CC:A9:CF:3A:7E:4B:39:11:00:71:72
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lPWAg9bN6nv1zKnPOn5LOREAcXI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.104.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:99:4d:b9:0c:47:f9:fd:95:b4:de:e5:76:fd:cb:f5:9f:60:
0b:b2:3a:c3:98:21:72:9a:64:44:5f:a6:6c:e3:d4:72:1e:e7:
1f:66:a3:c8:8c:f8:1e:b3:d0:e0:3d:ed:35:f9:df:91:24:ee:
35:0d:93:5f:25:da:fb:31:48:6e:74:49:49:99:5f:4f:ac:c9:
fd:3f:4f:eb:b0:18:6f:cf:68:4e:60:ae:a1:c4:93:72:74:b1:
95:eb:63:10:3c:dc:2b:9f:0f:c2:8a:5c:8f:98:c3:46:f2:ee:
63:3f:89:31:52:b1:7e:71:24:df:c2:af:88:dc:07:f0:99:12:
de:ae:ec:0d:ea:e0:20:88:00:95:99:f7:10:db:d2:97:fe:cf:
69:6c:f6:ca:83:15:18:15:dd:26:3c:1f:6a:ee:1a:b2:f8:fc:
53:c1:2d:32:23:7e:62:9a:79:e2:13:fb:2e:82:1e:ee:17:c3:
be:a6:22:74:82:a2:ab:de:81:45:60:a4:95:07:de:f3:a8:49:
0f:05:c6:9a:35:17:e3:e8:d5:5f:17:af:00:36:dc:03:6b:dc:
63:e5:73:8f:1b:82:90:a3:23:e9:5e:19:b6:2d:4e:0b:b9:a4:
c2:20:e8:30:55:5c:da:a3:c0:fa:d6:4e:36:0c:f4:40:aa:76:
c5:8e:80:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:12 2025 by rpki-client