Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uRshGs9LohRJrW0czMX-lkZztKA.roa
File: uRshGs9LohRJrW0czMX-lkZztKA.roa (raw, json)
Hash identifier: cxoDNaSDaTjBof0Zu3J30fBDaMfAoyshsqqM1wL7ljc=
Subject key identifier: B9:1B:21:1A:CF:4B:A2:14:49:AD:6D:1C:CC:C5:FE:96:46:73:B4:A0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10ED
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uRshGs9LohRJrW0czMX-lkZztKA.roa
Signing time: Sun 07 Feb 2021 12:49:46 +0000
ROA not before: Sun 07 Feb 2021 12:49:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 124.6.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4333 (0x10ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:49:46 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B91B211ACF4BA21449AD6D1CCCC5FE964673B4A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:50:f0:d0:40:41:a7:4e:e9:02:f4:f4:86:
1d:56:57:99:15:42:39:f9:41:85:33:66:f8:e9:37:
b0:2e:19:72:16:ca:1a:9e:c3:d1:5c:f0:e5:75:56:
83:b6:80:15:c1:61:c5:fd:24:92:53:0a:76:f1:b8:
3b:f9:52:90:a7:c9:0d:c6:ed:98:6c:1c:c6:48:4f:
f3:bf:2e:2f:37:e5:3e:fa:d2:7d:6a:d0:fd:e1:f0:
45:82:76:25:88:a5:e7:03:b5:fc:93:09:e8:bc:a3:
95:36:1f:4e:99:d8:b5:ac:76:85:91:42:af:41:a7:
82:61:77:41:e5:06:27:67:17:0f:31:f2:73:a4:39:
57:60:bb:fe:f6:21:38:c6:e7:8c:eb:84:68:87:d1:
41:ef:d6:ec:16:9b:6f:ae:2f:80:b9:55:82:0a:70:
74:c0:72:be:e1:07:97:61:93:1c:89:a7:06:cd:60:
c9:ec:5e:db:56:07:aa:69:ae:7e:3e:b8:c3:3a:0a:
ae:da:6a:6d:d6:49:85:29:11:6c:c0:ee:81:47:e8:
35:7c:a0:a6:ae:8d:12:7b:dc:6a:85:21:f9:6f:a5:
f9:7d:80:52:39:81:0a:55:d5:85:75:d5:d3:95:36:
3c:65:c0:6d:df:df:43:38:2f:a7:33:6b:f3:e6:07:
d4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1B:21:1A:CF:4B:A2:14:49:AD:6D:1C:CC:C5:FE:96:46:73:B4:A0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uRshGs9LohRJrW0czMX-lkZztKA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.6.0.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:cf:f4:47:09:6f:cf:11:3f:e1:23:21:91:3f:25:2b:eb:5d:
73:70:ee:9e:de:46:c0:45:93:1e:74:14:f5:26:6b:00:6c:0e:
bc:d7:b1:94:1e:50:0b:e5:3b:02:ce:3d:6e:77:7a:c2:16:08:
98:5a:ee:28:ff:42:fe:5b:20:dc:eb:c0:91:d6:a6:5e:09:31:
00:72:7e:b3:1f:15:6c:7d:50:65:40:23:0f:df:28:29:b6:b1:
5b:2c:e1:f1:30:a7:c9:75:5c:af:8c:1b:83:87:d1:1c:ae:cf:
dc:de:8a:a5:3a:17:cb:b2:38:29:92:9b:07:e7:12:c7:e2:d4:
72:d4:70:be:d4:a9:85:18:e3:fb:7b:58:ff:a9:3f:ee:43:96:
4c:d6:36:5a:14:dd:27:4d:bb:f0:30:e1:a9:1b:bb:4f:4f:b4:
97:bf:86:31:a0:38:26:a1:4f:a0:48:73:da:d0:88:0d:31:5a:
7e:df:4c:6e:00:e6:10:e1:77:9b:f1:f4:d6:72:da:6a:ba:aa:
8c:fb:9b:84:62:55:0e:f1:88:17:60:e0:b6:af:36:17:45:cb:
53:60:5a:4f:e5:1a:03:6c:b7:8a:3c:d2:66:10:09:1c:d1:18:
85:24:d4:8e:1e:62:43:ee:27:14:e7:b4:bd:21:e6:71:33:b0:
89:b0:07:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org