Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wC-o6TBEV6JAKaZqHxOfa4OWaz0.roa
File: wC-o6TBEV6JAKaZqHxOfa4OWaz0.roa (raw, json)
Hash identifier: Zssy+GyKQ8nVgYV2lfVM1qXPZK95Wd0ort4PR4h9xxg=
Subject key identifier: C0:2F:A8:E9:30:44:57:A2:40:29:A6:6A:1F:13:9F:6B:83:96:6B:3D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18F0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wC-o6TBEV6JAKaZqHxOfa4OWaz0.roa
Signing time: Sat 22 Oct 2022 06:05:55 +0000
ROA not before: Sat 22 Oct 2022 06:05:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 122.254.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6384 (0x18f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C02FA8E9304457A24029A66A1F139F6B83966B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:3b:73:ad:41:f6:4b:ab:1a:72:8a:71:32:
0b:e2:81:63:b9:b0:b2:63:cb:1f:19:89:7f:bb:4f:
31:90:64:7c:b7:c2:84:36:46:b5:8d:4e:de:9f:21:
2a:c1:af:7d:0f:de:6a:84:4a:8f:ef:e5:d2:14:02:
60:52:d0:c0:0c:89:fb:20:6f:60:66:94:c7:69:5e:
68:99:d1:8c:a8:3f:e4:8b:0a:6d:6d:d4:7e:58:46:
b7:8f:74:a1:d0:54:02:ea:42:9b:f2:99:29:4b:03:
13:17:ec:17:b1:02:c2:44:03:fd:ce:0f:bc:b1:2a:
40:d0:b9:c0:60:a3:01:3c:64:05:16:3d:8e:38:ca:
48:31:b1:a6:68:5d:9c:52:db:17:7f:2e:c4:08:a6:
c8:16:03:f5:a5:7b:5c:0d:bb:4d:03:98:0a:bb:91:
e6:50:48:90:65:e0:e5:9c:5e:ef:fe:91:c6:d6:30:
c0:06:cc:f3:21:4a:24:32:dd:0e:84:0d:6f:9f:fb:
17:59:d1:54:fa:f3:05:ba:48:ee:cf:52:8a:fc:7e:
b7:6d:f1:cb:6e:c8:5a:a1:6c:fe:d2:f7:ca:31:0c:
04:9f:ae:2d:79:e9:05:5f:a3:22:b9:39:7e:ed:9d:
75:fc:3f:2c:fc:d2:1c:26:52:14:a2:d2:a3:2e:4a:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2F:A8:E9:30:44:57:A2:40:29:A6:6A:1F:13:9F:6B:83:96:6B:3D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wC-o6TBEV6JAKaZqHxOfa4OWaz0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.32.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:20:ae:29:c0:ad:bf:d2:2c:97:7d:63:fe:1b:38:46:78:88:
92:df:39:54:80:f7:47:db:45:74:9c:94:3d:fa:f3:9f:f9:53:
e5:af:ff:22:7f:87:18:4b:d6:3d:74:42:d9:4c:67:16:c0:a4:
f4:2a:9e:17:6b:82:fe:e0:47:d3:61:a7:1c:22:89:68:71:a5:
c8:3b:f9:46:c5:61:39:28:43:ce:dd:79:e0:9f:6d:aa:42:16:
3d:98:74:bf:9d:9c:b3:d7:09:d4:2f:2f:f0:ec:70:2b:ea:e9:
1d:c8:e1:af:f3:e9:8c:f3:3b:7b:c1:05:23:65:75:e8:a4:ea:
f3:00:1d:6d:59:7c:99:5a:70:5c:62:c5:29:c0:1e:8d:0d:68:
36:0a:e6:bb:23:80:7b:7a:78:cb:08:a7:bc:35:18:f7:4b:f6:
37:f3:f0:f2:ab:f6:8a:70:39:95:65:3a:15:60:e2:19:6a:19:
af:89:a7:6f:83:31:fe:40:d5:d4:42:dc:00:b3:89:29:84:32:
b4:ea:82:d2:64:e8:a3:22:43:a0:a4:38:8d:b2:18:cf:e3:fd:
c5:9d:81:58:e3:68:f0:20:a9:19:57:24:4c:0a:6b:a2:cf:44:
a6:7a:c1:f1:d5:08:55:38:5c:19:86:be:64:5d:cb:06:37:38:
20:42:90:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org