Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pBnnVDXLe9oR0IZZ2UWSV977p5o.roa
File: pBnnVDXLe9oR0IZZ2UWSV977p5o.roa (raw, json)
Hash identifier: 9MMOoFPigJk1w+4MFglZ7W6Ss0MiFhqhIAc9lUXDhvE=
Subject key identifier: A4:19:E7:54:35:CB:7B:DA:11:D0:86:59:D9:45:92:57:DE:FB:A7:9A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 130C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pBnnVDXLe9oR0IZZ2UWSV977p5o.roa
Signing time: Wed 29 Sep 2021 02:55:18 +0000
ROA not before: Wed 29 Sep 2021 02:55:18 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 123.0.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4876 (0x130c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:18 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A419E75435CB7BDA11D08659D9459257DEFBA79A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:ea:2f:f4:71:5c:8d:3d:06:09:42:98:2f:
d6:7a:7c:bf:a8:f5:25:e4:34:ec:b5:20:94:ad:2f:
1a:3e:61:d4:77:5a:77:58:73:60:11:12:0f:d5:91:
61:3e:17:ce:27:df:c8:0e:9d:93:83:22:22:7e:cf:
8e:73:f8:0a:e9:e2:93:a1:19:7e:9e:cf:13:57:d1:
c9:63:ff:0f:99:9c:e4:b8:61:b1:f2:e7:2b:18:10:
fd:37:b6:28:26:d7:bf:67:f9:af:b8:6b:4c:ae:02:
8e:47:25:15:36:80:9c:39:df:5d:7e:cb:e3:dd:94:
d1:ce:8d:fd:61:d5:ad:6b:c4:35:88:19:00:8c:26:
87:4c:9c:72:a0:0e:61:03:70:00:dc:76:a2:e7:1c:
7e:07:e8:ee:b7:a9:96:f5:34:dd:af:e5:bd:fc:49:
79:24:7a:a4:68:f8:3b:d2:7c:c1:88:6c:b0:dc:3b:
b3:35:7c:32:be:57:e4:47:d0:57:b5:ff:e2:c6:82:
b0:ed:fc:59:9e:50:e4:16:86:cb:75:94:c0:92:69:
30:11:96:74:39:35:e1:ae:96:47:d7:37:c1:11:c4:
6b:58:df:fb:fb:cc:68:1f:7e:0e:f2:dd:a4:d9:c6:
91:54:8f:49:d7:45:75:ba:5e:6d:27:88:dc:07:e9:
f9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:19:E7:54:35:CB:7B:DA:11:D0:86:59:D9:45:92:57:DE:FB:A7:9A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pBnnVDXLe9oR0IZZ2UWSV977p5o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d0:12:47:53:05:57:9e:75:7e:a5:8e:de:2e:8c:fd:dc:a9:
89:a8:6d:87:02:e4:74:1a:f7:70:04:54:22:a5:47:fb:ab:a9:
01:6e:cc:37:9e:3f:15:7f:e5:dd:51:e8:32:42:c2:df:fd:b0:
0d:76:06:bd:42:87:5a:a0:9c:9b:e5:4c:e7:78:fb:f8:94:cd:
50:61:53:7f:89:00:96:1f:23:c6:96:82:1b:88:ee:b5:82:a3:
54:90:99:18:4f:52:4c:c0:7a:c4:74:52:c7:6f:3e:78:da:9c:
d2:1e:ea:f7:df:69:a5:55:59:ab:f1:ec:69:21:7f:17:42:7e:
dd:e7:64:d8:50:d1:ef:4e:c9:d1:07:50:19:88:5d:b3:13:1f:
4c:40:af:c3:0b:f5:1a:70:2e:58:fb:0c:98:61:17:ef:f4:00:
55:56:a2:a1:bd:cd:21:99:d9:19:5b:ee:ab:74:0b:d7:8c:52:
f7:36:54:97:06:46:e0:11:3c:58:cf:09:fa:04:6c:fd:f8:67:
dc:01:87:98:30:23:6a:83:06:71:03:48:00:12:d3:0b:c9:13:
44:1b:a1:e5:55:02:47:f8:ed:7e:f4:a8:55:71:8b:98:f5:0a:
ca:e1:02:f8:ce:5e:2f:39:a3:cd:da:b7:e7:86:56:e1:7f:a3:
1d:3a:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org