Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zSRyTJ74BSc1z6x3QUbGoENOUso.roa
File: zSRyTJ74BSc1z6x3QUbGoENOUso.roa (raw, json)
Hash identifier: BG2kLOhiijlRg5R+yfuBNi1JsEWL169ufZonLoG+VVo=
Subject key identifier: CD:24:72:4C:9E:F8:05:27:35:CF:AC:77:41:46:C6:A0:43:4E:52:CA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F5F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zSRyTJ74BSc1z6x3QUbGoENOUso.roa
Signing time: Sun 07 Feb 2021 12:33:53 +0000
ROA not before: Sun 07 Feb 2021 12:33:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 122.254.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3935 (0xf5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CD24724C9EF8052735CFAC774146C6A0434E52CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:3a:33:f0:bb:42:e1:21:67:7d:a9:d0:72:
b1:bd:90:66:a6:40:a4:4d:7d:e3:98:85:7c:51:3f:
0e:f6:0e:4f:ca:dc:f1:ea:05:95:a7:92:f1:26:94:
f9:46:95:96:57:b1:77:eb:e3:f1:6a:48:34:29:b5:
5b:6c:64:c1:19:07:48:3b:78:97:27:9b:da:1d:80:
1e:93:99:b2:94:48:12:bd:76:ea:d3:bc:60:40:01:
51:f7:da:9c:03:ef:fa:e2:aa:ce:0b:22:9b:2f:a3:
82:c9:37:c7:12:9d:63:98:10:d7:ed:0b:62:07:ee:
4d:dc:f2:3f:ea:1a:b1:f6:73:d1:30:25:37:2b:10:
64:90:c7:31:40:8d:20:13:6e:9b:06:9f:a4:bf:43:
c7:00:92:f1:ae:88:e0:63:e3:84:b7:b9:4a:ca:c0:
23:5a:b2:13:8a:86:91:9b:ff:f1:68:51:37:87:97:
07:8a:f3:b3:c9:54:5d:97:0b:4d:e8:e0:69:d9:fe:
f4:2d:4d:c9:1c:3c:6a:f2:9c:b1:4d:74:5d:6c:7b:
a2:0c:7e:f7:d2:70:d5:38:3f:6b:32:e3:55:af:fe:
55:95:3a:17:ce:2b:54:16:65:27:e2:df:f0:60:3b:
4d:d4:69:cd:5a:f9:b2:5f:00:0d:5d:e2:38:df:a6:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:24:72:4C:9E:F8:05:27:35:CF:AC:77:41:46:C6:A0:43:4E:52:CA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zSRyTJ74BSc1z6x3QUbGoENOUso.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.16.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:95:e3:58:04:f1:95:8a:7b:79:f4:9e:55:e7:f2:09:68:34:
61:e4:9a:8e:79:47:c6:e1:30:b3:53:4f:6e:61:04:d7:08:08:
80:c3:02:2a:38:e3:21:d3:f1:2d:da:1b:39:7c:00:71:0b:c7:
3d:22:75:d9:da:c3:4e:63:ea:ab:a5:f3:b0:39:b1:83:aa:e7:
dc:ac:16:a8:41:7e:28:dd:85:57:33:6c:1f:77:88:2e:db:00:
de:72:27:36:0f:d5:28:8f:9a:9d:7a:d2:f8:23:9d:50:ea:d1:
1c:20:a1:65:df:ce:76:c8:2f:72:f8:7c:6f:a3:c7:8d:c6:9d:
4f:72:0d:86:d1:1b:ca:e4:2c:8d:1e:42:a7:c3:cc:e5:93:b6:
09:24:e2:51:3b:7e:f8:bf:a2:04:da:72:83:6b:27:67:f6:cd:
d6:96:4f:c3:75:79:ab:34:c2:e7:65:8a:a9:19:22:80:37:b0:
2c:0f:5f:14:9f:8b:6b:9c:a1:e6:23:f3:9f:55:26:59:bc:43:
0a:25:45:39:e2:c9:20:d3:98:5f:53:47:b5:8e:7f:33:b3:64:
66:28:01:ac:bc:6b:fe:0d:a1:22:2f:47:3c:ea:79:44:ce:e7:
07:8b:d6:6e:8c:49:d9:90:40:d8:73:0b:3c:09:3c:62:c5:da:
9c:87:1e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:54 2023 by rpki-client on console-fra.rpki-client.org