Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q5wJ6_sxeNE-NSGfdocyb1zZByY.roa
File: q5wJ6_sxeNE-NSGfdocyb1zZByY.roa (raw, json)
Hash identifier: HQbOCteUe/BQXQ5xuLNRUMtyOQ5BHY90WEI1l1dKoW8=
Subject key identifier: AB:9C:09:EB:FB:31:78:D1:3E:35:21:9F:76:87:32:6F:5C:D9:07:26
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BCF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q5wJ6_sxeNE-NSGfdocyb1zZByY.roa
Signing time: Tue 29 Sep 2020 10:08:51 +0000
ROA not before: Tue 29 Sep 2020 10:08:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 122.254.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3023 (0xbcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:51 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AB9C09EBFB3178D13E35219F7687326F5CD90726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:ca:5f:94:a3:61:45:f8:43:f4:94:8e:e8:
f2:21:ef:cd:9c:6c:0f:1e:e2:e8:62:af:ef:12:e8:
11:8b:7a:5b:17:6b:5d:2c:5e:a8:7a:3c:de:60:a4:
97:52:32:17:a4:ff:e5:e8:77:1a:eb:43:40:e9:26:
a7:f7:cc:33:e8:34:5d:36:01:25:7a:9e:f4:7f:d7:
ae:70:c2:42:30:5d:a6:b8:04:58:f7:6c:65:fc:0c:
55:79:35:51:04:d9:a9:78:f7:36:6f:ea:20:87:79:
fd:9e:90:f8:b5:50:4a:9b:de:69:34:76:bb:85:d5:
12:2f:cf:88:0e:57:6a:f3:07:ae:9f:bf:74:02:a4:
fd:c5:7e:8e:9e:0c:50:6a:d6:d0:82:cb:53:d8:30:
af:24:63:f0:d3:0b:b7:83:3a:ac:77:ba:ad:7c:10:
52:92:95:8e:48:b4:5a:a4:50:dc:e4:1c:ee:cf:d4:
19:ab:54:aa:40:10:db:98:35:82:09:ca:8f:86:4f:
fa:68:7c:8c:d5:6c:a4:3b:43:68:40:da:ea:1b:79:
7b:fc:d8:2a:13:0e:7c:76:a8:05:65:dc:69:30:53:
5f:94:a7:9a:ed:d6:bf:24:f0:03:ac:aa:1d:6e:71:
8b:b2:cc:af:68:ee:99:0b:de:71:73:ae:32:8e:17:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9C:09:EB:FB:31:78:D1:3E:35:21:9F:76:87:32:6F:5C:D9:07:26
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q5wJ6_sxeNE-NSGfdocyb1zZByY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:0b:86:bc:3d:a7:eb:71:da:7a:e2:14:cf:34:0b:1a:ab:08:
5e:5a:9f:d4:15:a6:af:3b:4c:b9:59:93:08:34:6d:61:c3:28:
8e:d5:db:a1:34:f1:be:c2:36:14:e0:4b:76:d0:3b:5d:40:41:
d5:c9:4e:82:f1:89:26:03:32:24:1a:9b:e5:e1:d2:3b:6e:60:
d8:47:89:cd:5c:5c:17:0f:fa:95:d2:51:4c:91:25:91:5a:7d:
10:c6:c6:6b:c5:af:b2:75:7b:5d:73:6d:05:bb:98:ca:4d:9f:
4c:89:22:db:4c:2f:90:8b:22:7e:dc:35:5e:d5:7f:57:b5:0c:
de:67:c0:00:ef:ad:c8:17:dd:f4:95:25:b1:8b:cb:c1:32:7f:
77:96:f9:fa:f3:92:1d:a8:3c:8a:ae:dc:39:4f:fe:61:de:2f:
75:bf:bb:b3:ee:e2:88:15:a3:8f:3d:e7:73:0f:4a:d8:6e:03:
33:eb:60:4b:66:f2:22:50:bc:28:56:8f:53:77:5a:0d:d2:fb:
91:c4:64:98:f7:d8:dd:b7:f5:dc:b7:06:15:60:12:d8:3d:29:
70:40:61:e4:16:da:1b:47:be:ef:c4:98:84:5c:e5:52:b9:09:
43:dd:eb:56:cb:b4:6d:a6:cb:45:20:5b:dd:92:1d:37:1b:e2:
d5:c9:52:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org