Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sWXqfDurTbptla4A3gT3BvYbpAE.roa
File: sWXqfDurTbptla4A3gT3BvYbpAE.roa (raw, json)
Hash identifier: oHoeGMM/Zlkr7u7sxJvJkWFnCDX9UdHs2zBVgW5QCFo=
Subject key identifier: B1:65:EA:7C:3B:AB:4D:BA:6D:95:AE:00:DE:04:F7:06:F6:1B:A4:01
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1264
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sWXqfDurTbptla4A3gT3BvYbpAE.roa
Signing time: Wed 29 Sep 2021 02:54:31 +0000
ROA not before: Wed 29 Sep 2021 02:54:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 122.254.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4708 (0x1264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B165EA7C3BAB4DBA6D95AE00DE04F706F61BA401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d9:14:d0:dd:6c:9f:1e:df:0c:5a:58:54:70:
ab:80:99:ae:78:e6:d6:7b:64:f5:12:28:e9:2a:3b:
c5:d7:4a:c6:02:6f:42:af:ad:1f:4e:79:99:d3:0e:
7b:27:05:ee:d0:c0:82:a7:fb:b2:d6:31:89:2f:67:
42:87:b5:49:46:a4:60:d8:d4:b7:17:58:2f:1f:d0:
80:3c:e0:a1:7e:4c:50:28:fa:f6:4c:b1:a2:0f:45:
b4:f9:ed:c4:23:ff:2e:62:b4:1c:99:b8:2b:8e:43:
62:27:3d:17:c2:50:7c:5d:65:c0:a9:bd:6b:8c:54:
65:d0:55:41:f8:e1:2e:83:f9:11:a3:d2:89:64:ff:
b9:a2:79:73:e7:2c:13:f6:85:a3:27:90:cb:8e:9b:
60:93:eb:a4:2b:cf:7d:09:0a:a6:27:f6:ab:d9:b3:
ea:56:8b:25:54:5b:81:a5:7c:c4:c6:7c:89:ff:b4:
51:2f:0f:48:b8:64:49:b6:78:8b:37:12:12:20:29:
72:e8:e2:c6:a3:34:e0:cb:5e:9d:d3:eb:cd:37:51:
d4:4e:f7:73:0e:17:80:43:c5:c0:fd:85:92:59:a1:
36:37:e9:a6:0c:69:5a:eb:34:47:6e:78:2e:27:a6:
cc:a4:b0:26:b3:10:dd:40:02:e7:c8:8d:21:d4:84:
ff:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:65:EA:7C:3B:AB:4D:BA:6D:95:AE:00:DE:04:F7:06:F6:1B:A4:01
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sWXqfDurTbptla4A3gT3BvYbpAE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.0.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:58:35:d5:7e:f2:0e:4b:d4:18:78:d3:08:ef:62:8a:f6:c3:
b6:08:ed:7c:b2:1d:54:24:dc:4a:01:8f:5d:f5:01:53:d6:74:
dc:f4:0b:df:e0:51:1f:b0:56:6b:12:e9:63:ad:a0:91:c8:85:
4c:45:d0:2c:e4:82:72:60:e0:66:61:10:4c:42:49:3d:53:3f:
b4:53:65:23:72:cc:6e:b7:96:a1:ed:84:d4:9d:45:2a:53:c6:
2b:df:f7:91:06:90:ab:75:21:44:f0:e6:81:34:38:4b:a6:22:
d5:3d:c1:36:4f:5f:05:ae:7b:d8:6a:b2:ad:37:cf:41:a3:d9:
0f:f7:ae:cc:e6:89:0b:a6:b6:85:61:b0:37:05:b5:0a:93:2b:
37:84:ef:e2:9f:58:51:a7:03:73:30:ed:a5:e3:b6:09:46:34:
2f:2e:9e:04:37:d8:81:f2:82:29:a2:8f:56:34:55:bb:4a:63:
25:9a:a8:e0:02:64:bd:80:2b:43:5a:be:e4:fb:4a:42:d0:d8:
72:26:4d:8e:0b:40:3c:29:aa:fb:50:e7:b1:87:b3:ac:63:64:
54:77:d9:2c:b2:fb:5f:67:ab:d1:7e:15:5e:4d:50:83:a7:2d:
7e:76:d4:2b:f8:bb:d3:11:85:b3:f9:1f:3b:10:0b:70:6f:3c:
29:63:5a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org