Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pr1BoiPYbul9NpOGn0YV_R1BL6o.roa
File: pr1BoiPYbul9NpOGn0YV_R1BL6o.roa (raw, json)
Hash identifier: 0txGVgTAn0qbBbux8WgsnV7RRCQt+ssg4Iz3ItU03oQ=
Subject key identifier: A6:BD:41:A2:23:D8:6E:E9:7D:36:93:86:9F:46:15:FD:1D:41:2F:AA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1265
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pr1BoiPYbul9NpOGn0YV_R1BL6o.roa
Signing time: Wed 29 Sep 2021 02:54:31 +0000
ROA not before: Wed 29 Sep 2021 02:54:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 122.254.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4709 (0x1265)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A6BD41A223D86EE97D3693869F4615FD1D412FAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ec:b5:6c:9d:8f:54:43:61:f6:ac:2a:82:9b:
df:02:b7:d0:03:bf:be:51:2f:a6:b4:f3:70:a0:13:
53:5d:f0:bc:8c:2c:6b:4c:be:3a:82:c0:3d:16:8a:
76:84:c9:dd:71:d3:84:c3:1f:5b:39:bf:5a:1b:ff:
d4:2b:a6:c1:48:60:c7:51:8c:b2:9b:8f:a2:b4:1c:
bb:0b:24:34:b6:4c:d6:e5:f5:ec:23:a3:e5:a3:aa:
d8:92:7b:4a:3c:a4:40:f7:86:bc:7a:39:6a:72:6f:
9b:a7:01:0c:1e:fa:63:59:77:6e:0e:0a:43:f4:b0:
2a:57:e8:94:ef:ea:5b:52:e4:70:bb:21:95:f1:06:
7d:37:91:a1:d7:9c:be:83:a7:a8:b1:57:1d:3f:94:
f0:98:a4:88:17:d5:d4:ef:17:30:ff:e3:7f:0c:37:
a7:58:69:1d:f8:d7:e8:e6:80:67:d1:cd:20:22:f0:
fb:00:7e:67:2c:77:33:1c:83:33:93:63:f7:ab:e8:
83:dc:82:5d:aa:80:66:2e:ab:fe:ff:1a:f3:28:a0:
43:16:87:94:ff:14:e5:0c:3b:0d:97:15:46:d7:3a:
60:3b:3a:e4:f8:f7:ae:b7:c8:14:0a:2f:5c:ea:d6:
09:e4:85:77:d5:c0:53:cc:be:f5:53:f7:84:ab:b1:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BD:41:A2:23:D8:6E:E9:7D:36:93:86:9F:46:15:FD:1D:41:2F:AA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pr1BoiPYbul9NpOGn0YV_R1BL6o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.16.0/21
Signature Algorithm: sha256WithRSAEncryption
56:2e:59:8a:c8:d8:e8:13:73:fd:27:ea:b2:49:2a:e8:23:60:
3b:21:32:9e:97:8c:9f:2d:08:a1:00:e7:b7:37:0e:38:86:1f:
33:a4:dd:ee:57:b7:c3:7f:1f:dd:42:23:11:a1:2e:41:cd:3c:
41:77:33:8b:9e:7d:b9:42:cf:5f:b1:45:12:5f:f9:fe:cd:62:
0c:bd:72:8e:04:bf:8a:5a:9e:50:8f:d6:0d:56:79:19:89:8b:
73:b0:d8:31:c5:52:26:ed:26:0e:c3:7b:e8:5e:5e:9f:30:9a:
77:18:7a:81:ae:33:dc:49:87:e5:ad:68:48:6b:8e:23:67:7a:
1d:6c:d0:f3:7b:c9:11:2f:e4:3d:c7:5d:86:86:02:9f:99:fd:
3a:ae:a2:d4:30:83:d1:c3:e9:b2:c3:4d:92:da:24:e2:d9:64:
53:11:a3:7a:25:1f:ae:84:9d:b9:e5:66:83:55:df:14:93:78:
3c:2a:be:65:c8:0e:9c:06:54:00:0a:d5:09:17:ad:41:fa:46:
02:92:7e:7a:83:70:34:df:96:50:69:ea:3b:51:43:b7:6e:39:
5f:d6:b2:c3:42:cc:14:c3:9a:11:44:1d:83:40:cd:fa:5d:34:
ed:bc:72:12:da:1d:51:72:59:74:b0:24:d8:d1:9b:b6:2c:81:
10:ab:96:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org