Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qenw3PfLXbASR5C4cN_yPSHqKIA.roa
File: qenw3PfLXbASR5C4cN_yPSHqKIA.roa (raw, json)
Hash identifier: a0WxxlxpJ3OE6Uj3wQPVLTb/KVWbDFlUhcjZEpd4fQg=
Subject key identifier: A9:E9:F0:DC:F7:CB:5D:B0:12:47:90:B8:70:DF:F2:3D:21:EA:28:80
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F51
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qenw3PfLXbASR5C4cN_yPSHqKIA.roa
Signing time: Sun 07 Feb 2021 12:33:40 +0000
ROA not before: Sun 07 Feb 2021 12:33:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 122.100.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3921 (0xf51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A9E9F0DCF7CB5DB0124790B870DFF23D21EA2880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:82:c1:77:de:85:65:5a:5a:4f:e8:ed:a9:
80:7c:42:ce:ad:04:e8:4b:25:a2:2c:f6:a5:a8:74:
c9:43:02:a7:7e:1f:35:5a:0f:c9:d4:83:7d:3f:82:
40:31:d5:8b:10:a6:e4:60:dc:f6:52:0e:ea:b1:f4:
b9:d9:79:44:58:fe:70:59:2d:dc:ef:77:7b:41:da:
51:1e:41:62:34:39:6e:b3:03:88:b1:61:f1:42:33:
35:5d:d8:eb:cf:6f:dd:8b:3c:1f:4f:c8:6a:15:92:
a7:66:cd:f6:ea:e0:94:0f:1f:1e:29:60:3a:d6:f3:
40:f4:34:4d:89:a9:8f:02:aa:ee:ff:c5:e9:ff:a8:
23:b4:89:ab:c5:b7:1d:1a:f7:61:f6:cd:57:0c:6d:
a1:9a:43:2a:f0:3c:dd:bd:17:69:44:a4:35:d0:cc:
97:8e:2f:98:35:68:70:ba:66:57:fe:b9:ba:af:73:
d1:ac:c9:0d:e0:94:52:f6:a5:85:c0:24:2e:7d:e5:
d3:ea:47:57:f5:31:7b:d0:72:bf:42:a0:52:08:9c:
86:04:0d:26:f7:d5:15:6b:1f:df:16:a8:0b:a4:66:
ab:b2:52:8c:9e:10:49:78:4b:ce:1c:b9:3c:5d:e9:
58:96:8a:31:c9:7b:02:1d:11:9a:02:b4:8f:33:89:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E9:F0:DC:F7:CB:5D:B0:12:47:90:B8:70:DF:F2:3D:21:EA:28:80
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qenw3PfLXbASR5C4cN_yPSHqKIA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.80.0/21
Signature Algorithm: sha256WithRSAEncryption
01:f0:c4:c2:16:b6:12:52:b6:9c:11:a5:46:76:e6:1e:f1:4c:
3f:e6:f2:c9:52:46:ef:6a:c8:cb:36:9f:e6:ca:22:c8:6f:7f:
54:3c:27:74:08:37:ad:cd:33:6d:77:6a:05:6c:a0:c2:27:a6:
5e:87:c9:ba:36:f0:91:a1:25:2d:4f:b5:7e:b5:75:17:f2:ed:
63:a3:a6:76:6a:ca:2a:dd:dc:7c:27:e8:af:b8:b3:4a:3a:b8:
33:2e:fa:e4:40:34:2b:41:ed:44:3a:2b:01:e9:84:a5:04:04:
fa:8d:03:70:0e:c1:46:71:1d:b0:e4:df:59:c9:d7:59:75:66:
4f:6e:89:42:73:3a:65:86:bb:f8:8b:0c:9c:07:9a:00:09:31:
a1:9b:7f:54:dc:9e:88:76:09:df:5c:4b:04:9b:0e:ac:68:67:
ab:e5:c0:93:3f:17:bf:33:ce:48:73:17:24:b7:e3:68:b0:e9:
e1:e3:ca:f8:1a:58:b7:50:34:c8:c6:07:18:90:c3:05:ca:5a:
f3:e1:e1:80:a6:11:b3:f3:32:3b:de:9a:50:bf:6b:91:b8:ac:
87:bc:0c:35:25:6d:a6:8c:6c:67:2a:91:4e:68:9a:3d:a2:3b:
be:53:55:62:86:d7:fd:26:38:29:4c:30:f8:cb:ba:40:66:ee:
69:cf:af:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org