Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qWb9DqqWqIpGEwV-joVLrHT7TRU.roa
File: qWb9DqqWqIpGEwV-joVLrHT7TRU.roa (raw, json)
Hash identifier: RQUi3vSpyEjgpbBDVBPiVtPXsZXRFMIH9B6Ri0EBWk4=
Subject key identifier: A9:66:FD:0E:AA:96:A8:8A:46:13:05:7E:8E:85:4B:AC:74:FB:4D:15
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1724
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qWb9DqqWqIpGEwV-joVLrHT7TRU.roa
Signing time: Sat 22 Oct 2022 05:31:59 +0000
ROA not before: Sat 22 Oct 2022 05:31:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 122.100.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5924 (0x1724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:31:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A966FD0EAA96A88A4613057E8E854BAC74FB4D15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d4:aa:7a:5b:92:3e:b2:13:f6:bc:f3:aa:1c:
16:30:bb:cf:2c:17:19:15:da:32:e0:bb:8b:9d:a9:
fd:9e:2d:05:08:53:b4:ba:3c:35:aa:74:db:0c:63:
84:4a:10:5b:65:8d:8b:72:ec:8a:ae:de:60:d7:10:
45:d0:ed:e6:66:77:87:63:ac:c6:a1:1f:a2:0f:13:
e7:3e:ed:6f:90:e5:9a:55:82:33:28:e9:c6:b6:97:
d1:dd:18:cc:45:b2:0b:dc:ee:03:a8:52:be:bd:7e:
c4:c0:81:1d:bb:d6:99:67:d0:88:b6:70:66:db:11:
51:94:14:ab:41:ff:87:fd:84:83:2d:ad:52:6e:9e:
fd:01:c3:48:e1:df:f9:e4:6e:b9:07:42:df:c2:0a:
93:b4:2c:0b:91:9d:65:41:00:e4:b3:dc:b5:c1:a5:
06:c0:0c:05:33:f4:14:49:a6:4e:3d:71:df:18:44:
b0:88:22:f1:88:51:20:46:0b:02:e6:80:06:b1:fd:
18:91:e5:99:93:5d:d2:c7:57:b4:10:5b:95:9c:e0:
4d:71:17:9f:ab:58:51:3a:57:13:87:3e:d3:93:10:
73:99:e2:d4:90:83:39:4c:0e:b8:66:5b:6b:67:63:
0b:bc:c0:d4:58:68:9d:89:2a:39:89:7e:8f:b3:47:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:66:FD:0E:AA:96:A8:8A:46:13:05:7E:8E:85:4B:AC:74:FB:4D:15
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qWb9DqqWqIpGEwV-joVLrHT7TRU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.68.0/22
Signature Algorithm: sha256WithRSAEncryption
05:00:87:ac:a0:af:69:c7:4d:71:16:57:c2:c2:44:d4:6e:42:
a1:bd:f6:c1:03:b7:ac:0a:c2:a7:12:91:b5:e3:ee:78:1f:0b:
f2:0b:4e:89:d8:5f:4a:ce:5a:54:0d:1f:b3:61:0f:8a:c8:61:
65:52:0e:b4:41:d4:b4:a2:e2:37:44:33:3e:d9:b8:8f:2d:92:
ca:23:a5:b6:2e:15:ca:1d:ba:8d:28:a4:6f:c4:33:16:7c:2e:
b9:b1:07:2b:86:7f:94:13:ae:c0:6c:91:85:02:2d:a4:90:34:
f5:da:64:8e:ce:53:92:0d:21:0b:3c:0f:18:45:75:93:85:e2:
fa:3b:c7:f3:25:18:cd:e4:18:56:52:43:0a:34:87:11:80:8b:
fa:a8:dc:fe:37:6a:b0:a0:1b:66:05:4a:c3:ba:55:96:79:2e:
65:fc:c8:45:9e:47:fb:e1:15:24:18:f7:fb:b1:5b:fe:97:0c:
0a:66:93:45:bd:0f:fd:d9:65:c3:8b:21:90:df:48:59:c4:55:
75:49:e6:da:b5:02:8b:ca:56:f2:e6:37:32:93:23:23:6e:62:
56:b4:21:90:58:8b:06:ad:a0:da:b2:62:be:6f:a3:d1:8d:df:
d0:42:52:aa:4d:08:27:6f:78:cc:13:e6:92:25:09:f2:ab:3b:
9e:e8:2c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org