Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qhwNFgTsHUV32GQL6ZssIJpMg7I.roa
File: qhwNFgTsHUV32GQL6ZssIJpMg7I.roa (raw, json)
Hash identifier: 6mdH+sPiSgRIPPa2sYu09klw+n8dhaySVs+9RzfHS+8=
Subject key identifier: AA:1C:0D:16:04:EC:1D:45:77:D8:64:0B:E9:9B:2C:20:9A:4C:83:B2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1272
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qhwNFgTsHUV32GQL6ZssIJpMg7I.roa
Signing time: Wed 29 Sep 2021 02:54:34 +0000
ROA not before: Wed 29 Sep 2021 02:54:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 123.0.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4722 (0x1272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:34 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=AA1C0D1604EC1D4577D8640BE99B2C209A4C83B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c5:b3:d3:7c:3e:cc:e6:f4:d5:41:09:a7:fc:
d4:ab:4c:3b:37:5a:50:43:65:1d:8b:d4:d4:83:11:
72:eb:8a:c6:f4:c0:49:4a:22:ac:72:0a:03:84:ce:
89:b3:77:ee:9c:5e:18:2b:57:af:03:89:30:88:02:
64:74:c4:94:82:f5:8b:ae:0f:19:30:78:d5:33:74:
56:b0:fc:22:e0:53:b1:23:51:43:0c:35:7a:5a:7c:
fa:89:1c:b8:53:29:7e:28:40:58:15:44:d5:cd:94:
fc:e4:f7:c9:fa:de:9e:45:e4:53:03:9e:87:61:fa:
b9:de:34:31:91:65:9d:68:fe:ec:ea:ed:b4:9e:16:
6d:cb:76:fb:a2:00:92:64:71:62:86:85:e1:4d:02:
38:d5:70:9d:2f:4b:0a:25:19:c1:90:2d:90:7c:27:
64:4f:42:e7:b4:b3:47:ec:12:3c:87:c6:1d:f4:75:
17:eb:f4:f4:85:97:c0:22:aa:21:bc:d6:64:09:31:
0d:08:20:f9:2d:84:f0:7b:06:fe:01:a0:9c:a5:59:
5a:de:43:16:b9:d6:95:27:07:2a:b1:23:27:d0:d4:
28:46:09:57:69:17:5f:ab:13:23:e1:d4:44:08:6a:
3b:60:6e:16:f2:78:44:d3:78:80:96:6b:d2:0e:75:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1C:0D:16:04:EC:1D:45:77:D8:64:0B:E9:9B:2C:20:9A:4C:83:B2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qhwNFgTsHUV32GQL6ZssIJpMg7I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.44.0/22
Signature Algorithm: sha256WithRSAEncryption
82:3d:59:c7:5c:e8:1d:79:04:95:b7:8f:ed:a3:1f:a1:43:ed:
76:6c:89:6e:2b:d8:2b:f5:45:d6:a8:71:99:bf:91:e2:50:1c:
b2:97:43:8e:a6:f5:7d:c8:9a:6d:8b:76:4f:0a:0b:94:9c:cf:
3d:48:90:d8:6f:90:ff:21:eb:f8:74:c2:30:3c:60:85:fd:5d:
31:48:23:a5:8e:6a:fb:bb:02:6c:5d:98:7d:19:c4:6a:98:5f:
83:e3:00:d7:ed:14:c6:e7:ae:f3:4b:b1:66:27:f9:62:f8:1a:
98:45:3f:a1:40:22:10:61:4a:e2:65:61:f8:8a:f2:9e:4d:94:
8e:ec:2b:68:d0:9e:69:98:c0:5e:f0:2b:b5:64:6f:ef:f8:95:
2a:6e:89:80:79:e1:28:66:dc:85:5d:7b:53:c4:69:f3:6f:bb:
d8:28:58:a2:cc:5b:a3:a9:49:ac:86:90:b0:c3:22:bf:9e:c7:
a7:b5:2a:87:d0:dd:03:dd:89:46:b4:33:77:10:1c:54:2f:1c:
57:cf:9a:24:86:11:dc:60:57:2c:e7:58:bf:45:c2:dd:e3:88:
3b:98:8a:59:a0:11:98:9f:e2:5b:32:de:03:9f:c4:ad:3a:73:
8c:1f:d7:4b:5e:f9:96:7b:47:ad:91:61:fa:69:3a:53:91:15:
50:47:74:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org