Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tkc8qjmKbkFLjZzSPotSXMhlQBc.roa
File: tkc8qjmKbkFLjZzSPotSXMhlQBc.roa (raw, json)
Hash identifier: EHzHVByFl1cnGMAdapmYq3oJGFZ7Lt0GkbT3S7amOUs=
Subject key identifier: B6:47:3C:AA:39:8A:6E:41:4B:8D:9C:D2:3E:8B:52:5C:C8:65:40:17
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 191E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tkc8qjmKbkFLjZzSPotSXMhlQBc.roa
Signing time: Sat 22 Oct 2022 06:06:07 +0000
ROA not before: Sat 22 Oct 2022 06:06:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 122.254.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6430 (0x191e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B6473CAA398A6E414B8D9CD23E8B525CC8654017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:3d:a0:ad:d5:14:a8:61:9f:2b:30:03:0d:
57:0a:a2:98:47:37:04:3d:f5:a3:37:ba:32:05:da:
e9:b0:7e:a8:a2:07:f7:0d:62:81:7f:97:f4:d5:f8:
a2:c0:39:6a:fd:7d:17:e1:4f:ed:1f:46:e1:a6:57:
03:59:ff:23:36:ba:a1:3b:25:68:8e:b5:af:4f:02:
a7:fb:63:bf:df:0d:bf:74:d6:61:81:ba:ff:b9:bf:
b6:07:56:83:74:42:bd:34:69:3c:13:1e:98:56:ab:
12:c6:39:0f:aa:d4:b3:e1:66:0b:b2:98:b8:29:88:
e7:dc:e1:f2:b9:22:e8:b5:ca:3d:e9:78:a5:b7:48:
e8:54:3d:31:b0:c2:64:88:d7:91:84:25:fa:a7:d0:
66:30:78:3c:c9:3a:b3:8f:52:26:5f:79:78:69:fe:
d2:65:d4:76:09:78:2d:a6:72:db:b0:7c:28:96:8e:
d8:5f:2e:a3:22:a8:5f:9e:87:00:e5:eb:5d:46:ee:
0b:8a:71:97:73:d1:04:e0:f4:8b:3a:31:68:01:1c:
12:1d:7e:d9:ed:2e:3c:67:52:c8:61:22:39:da:90:
b9:b1:63:64:b6:d0:75:bc:ab:28:a4:65:b6:07:0f:
12:d6:69:0c:38:6a:3f:46:90:ad:cb:33:0e:32:6d:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:47:3C:AA:39:8A:6E:41:4B:8D:9C:D2:3E:8B:52:5C:C8:65:40:17
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tkc8qjmKbkFLjZzSPotSXMhlQBc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.16.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:91:0b:e0:9e:ad:e7:a7:2b:a7:32:9d:9d:58:09:84:3a:d8:
56:55:5d:1c:33:fa:49:e3:7e:89:8e:69:bd:73:cc:0f:d5:30:
93:48:96:bc:4f:4b:41:46:d9:d4:fa:e2:2a:fe:31:05:69:c8:
2d:85:7d:21:10:29:a0:c5:5f:2b:d4:9d:3b:90:13:5a:2c:2b:
ed:0d:1e:a4:47:1b:3d:96:6f:03:4a:6a:33:8a:cd:6d:8b:a7:
5a:dd:b1:7b:c8:9b:ac:d8:68:50:2c:9d:e2:a6:f2:1d:a1:30:
63:7a:c5:79:3c:62:2c:73:3e:ae:29:04:3a:b4:95:d7:bb:0b:
a2:ba:d9:8f:ad:d1:42:a1:a8:04:1e:60:08:b4:dd:25:3f:7c:
a1:ff:72:af:28:69:c4:15:d7:b5:ea:52:7f:78:a7:e2:00:9a:
52:f1:13:ed:e4:a6:e2:de:91:b9:42:34:f2:44:47:5f:4e:a5:
aa:b6:d9:d6:57:4f:f0:8b:b2:09:d0:e4:fa:f3:1c:e1:c0:de:
9e:dd:69:a1:8e:4c:40:84:06:d3:ca:2e:d7:68:9a:31:6f:0a:
6a:d4:5e:0c:ca:94:ca:f3:65:25:81:55:a6:15:36:d5:08:3c:
64:fe:34:bc:03:a9:bd:f8:c1:9e:06:a2:3f:ce:27:8a:20:07:
88:d4:a3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org