Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oQWDDKTScfl4rbURWczn_3f06sE.roa
File: oQWDDKTScfl4rbURWczn_3f06sE.roa (raw, json)
Hash identifier: yC8c/h8fV8QYVPXU+QwbKwQjIbR52VrxmqbO/0IkroU=
Subject key identifier: A1:05:83:0C:A4:D2:71:F9:78:AD:B5:11:59:CC:E7:FF:77:F4:EA:C1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B97
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oQWDDKTScfl4rbURWczn_3f06sE.roa
Signing time: Tue 29 Sep 2020 10:08:36 +0000
ROA not before: Tue 29 Sep 2020 10:08:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 122.100.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2967 (0xb97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:36 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A105830CA4D271F978ADB51159CCE7FF77F4EAC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:83:d8:2c:0e:60:2b:0b:e0:fa:b7:09:a2:32:
8d:5c:5a:a2:64:47:10:44:56:1b:16:a6:52:12:2f:
1d:e2:0c:fa:84:45:a7:d7:93:92:ef:8f:c5:b4:81:
4e:14:4f:17:69:ca:61:b3:83:fe:f6:59:3d:6a:e2:
23:d2:2d:fe:54:2d:40:f9:18:f3:52:c6:11:b9:9b:
b8:c3:f4:12:04:78:44:7f:84:64:a0:4e:4f:14:a8:
9c:09:fc:94:c6:0f:72:c1:51:6a:a2:6b:ff:d7:4f:
13:28:7e:8b:9e:00:58:b1:7e:3a:14:6a:e8:f9:7e:
77:d6:b9:05:64:a4:62:10:66:0a:67:31:f4:26:cf:
a0:47:b6:86:d4:6a:64:7f:f9:dd:4f:8c:95:4d:b8:
75:47:49:df:77:a0:64:b2:cf:d7:e9:95:7c:9f:dc:
c4:cb:70:de:05:4c:ab:da:f4:1a:d8:5e:3b:08:40:
96:ed:c2:68:c3:48:4f:c3:e3:96:c1:44:25:ae:0d:
ee:0e:65:30:bb:03:af:b6:19:0d:da:00:4b:21:65:
fa:32:11:ff:fe:2e:f0:30:53:b4:8d:64:59:c7:be:
f2:9b:1c:31:4f:bc:b8:22:45:aa:b4:84:58:f2:65:
e9:ee:51:bf:a4:f9:73:85:9e:aa:cf:dc:ac:ed:d9:
a9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:05:83:0C:A4:D2:71:F9:78:AD:B5:11:59:CC:E7:FF:77:F4:EA:C1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oQWDDKTScfl4rbURWczn_3f06sE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.80.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:af:79:0d:2c:de:51:b1:d6:17:ef:fb:4a:20:98:37:e1:66:
e6:ce:d9:b8:0e:ce:7d:88:b0:cd:00:04:11:10:ab:dc:8e:78:
e9:7a:26:57:ec:1a:9c:f1:db:52:01:e5:73:57:52:83:1d:2a:
ef:68:b3:a3:ed:83:d8:54:6a:67:1b:ae:2b:13:9d:14:7b:75:
32:86:7b:e9:93:78:ee:4c:42:7e:dd:42:e3:30:98:e3:ad:9d:
3c:0d:72:b4:f9:bd:a0:fe:06:8b:8b:82:29:97:be:20:84:ac:
8b:36:03:16:dd:02:1f:73:52:da:a8:e3:8b:3a:f5:d0:5f:89:
71:fb:61:89:fb:cc:57:6a:b7:f1:08:30:56:02:d1:cd:ae:4c:
f3:28:93:84:34:19:12:88:a1:9b:3e:38:87:97:0b:81:0b:fd:
f0:17:b2:d1:2a:16:f1:31:24:7c:ff:17:13:4d:6f:e5:9b:36:
1d:60:d3:a3:8a:b0:fd:41:da:cf:be:16:62:b9:e7:5b:28:37:
28:42:08:8e:7d:14:c8:bb:ce:b6:6e:40:40:24:49:f1:fd:3c:
78:cc:c2:74:ee:5b:5e:b4:6a:bb:0f:0d:1e:a6:9d:0a:2c:f8:
7f:29:67:cf:8d:66:5b:1b:c8:23:37:85:a8:28:28:cd:19:ea:
2b:7a:80:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org