Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xN-fbg2PiFIZcHliEsDq6mnTNFI.roa
File: xN-fbg2PiFIZcHliEsDq6mnTNFI.roa (raw, json)
Hash identifier: NlV6SEgd9cYNeHSzkP/gZ3vshL4daKIROxhnWOL/H8U=
Subject key identifier: C4:DF:9F:6E:0D:8F:88:52:19:70:79:62:12:C0:EA:EA:69:D3:34:52
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F59
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xN-fbg2PiFIZcHliEsDq6mnTNFI.roa
Signing time: Sun 07 Feb 2021 12:33:48 +0000
ROA not before: Sun 07 Feb 2021 12:33:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 122.100.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3929 (0xf59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C4DF9F6E0D8F88521970796212C0EAEA69D33452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:f1:5b:96:6a:c8:62:f1:ea:a9:e9:d5:50:
a4:8c:cb:84:13:23:7c:a4:d5:64:5d:8c:96:31:1b:
e3:95:0c:bb:ac:c4:b8:f9:99:89:62:f0:85:53:db:
89:9f:c2:8c:39:94:bc:79:38:04:ae:94:47:e4:80:
d0:81:59:bc:01:d4:27:96:fd:90:14:e3:7a:ec:09:
36:da:4b:23:fd:cd:7f:ef:91:51:41:46:d0:55:a8:
80:5f:b5:51:20:9b:fe:f6:1c:0d:c7:07:fe:91:ee:
87:9b:5e:47:84:b1:40:c9:2a:b1:c5:c3:72:e5:60:
53:c2:42:32:bb:a0:a8:bb:e6:b9:49:57:4d:4d:0a:
2a:36:3c:4a:b4:dd:2d:48:0f:ee:12:2f:6b:e2:20:
2b:d9:fa:54:d2:c1:f0:4a:c2:9d:55:bb:2c:50:f6:
14:ee:00:66:37:ee:cd:de:12:86:6a:ac:b5:bc:87:
d6:14:89:56:7d:5d:64:c4:0e:50:5b:a3:a2:76:09:
5d:dd:f2:bc:37:2f:16:6f:99:a9:15:dd:9a:f5:d1:
6b:5a:aa:0a:2d:9d:bc:58:79:57:e9:a3:6c:c4:13:
a3:1f:57:18:53:ac:13:5a:9a:2b:e7:7d:0a:48:63:
38:94:e2:08:51:a5:1e:9e:f8:0c:6c:e8:26:2f:05:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DF:9F:6E:0D:8F:88:52:19:70:79:62:12:C0:EA:EA:69:D3:34:52
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xN-fbg2PiFIZcHliEsDq6mnTNFI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.100.95.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3c:da:f2:8f:55:2a:74:94:8a:f8:be:db:49:19:68:43:eb:
cf:dc:b8:ca:ef:5d:b4:6b:b7:f5:a3:27:4a:e5:8a:da:7f:d0:
25:42:5f:8f:53:22:6c:af:bd:83:cd:f7:65:c4:b7:de:48:8b:
6c:c1:c4:c5:07:66:de:4c:97:1c:dc:aa:fd:dd:12:30:99:c6:
f1:cf:fb:2d:cd:a1:fa:fa:fa:38:cd:34:d6:74:73:7e:58:e6:
78:25:5f:19:1c:84:78:98:48:f5:71:c8:03:87:dd:77:9f:06:
31:de:29:77:94:60:61:73:7f:cb:5b:36:7e:fe:c6:98:3e:12:
d7:9c:33:e0:66:ff:2b:f5:ae:8f:c3:a4:e7:97:67:e5:8f:47:
29:06:11:da:81:a0:bb:ca:38:45:9e:5b:77:a9:5b:4d:a4:ed:
88:db:ec:5f:b6:ce:42:69:c2:6b:73:b0:01:5c:c3:2b:08:a8:
8b:c5:cc:ea:e5:82:50:47:5f:03:8f:3c:15:2a:28:a4:77:4d:
be:3b:fa:32:54:c7:d9:82:2f:81:af:07:94:3e:83:18:8f:3d:
35:04:11:a4:ef:e3:b2:d5:4c:e0:fa:b6:76:d8:65:24:7e:08:
46:de:a1:1f:2d:0c:8a:0d:0d:07:6c:36:e0:d4:16:2f:3b:68:
a1:87:8b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org