Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/znAmFfUcoQsfgWOZUeick-FJcxQ.roa
File: znAmFfUcoQsfgWOZUeick-FJcxQ.roa (raw, json)
Hash identifier: bNyQtTr4w03yzVcAQZJ8v7kol3mr0bnPF9VUBALBItg=
Subject key identifier: CE:70:26:15:F5:1C:A1:0B:1F:81:63:99:51:E8:9C:93:E1:49:73:14
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F6B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/znAmFfUcoQsfgWOZUeick-FJcxQ.roa
Signing time: Sun 07 Feb 2021 12:34:05 +0000
ROA not before: Sun 07 Feb 2021 12:34:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 122.254.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3947 (0xf6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:34:05 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CE702615F51CA10B1F81639951E89C93E1497314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:e6:50:4a:20:50:88:2f:52:9d:12:70:38:
1e:39:87:7e:a0:6b:d2:7d:40:ca:6c:8f:77:c9:5f:
fe:c2:76:b9:c9:ae:07:6b:27:f1:7f:17:d6:dd:04:
a8:0c:5d:1e:5d:95:68:55:1b:e1:2c:cc:42:98:31:
b0:c2:37:cd:47:5f:78:9e:51:bb:ad:82:68:3b:97:
b2:c7:42:48:f5:33:86:2a:0e:eb:f8:70:fe:5f:ca:
99:b0:df:1c:33:37:20:a3:ef:6e:12:6d:65:f0:60:
90:f0:e2:f4:96:0a:56:6b:00:27:8c:8d:d1:d3:b8:
fa:9f:52:42:56:bc:04:49:8d:af:98:75:77:fc:10:
32:11:25:44:ba:c9:7b:4e:0f:fd:37:b9:32:ca:55:
53:30:9c:46:86:99:57:e7:62:ea:33:16:31:52:5e:
2e:98:f8:b9:76:c3:68:26:4d:e9:48:a1:c3:b0:8d:
b2:fa:eb:0e:cc:2a:c7:c0:91:ce:f6:a9:a3:3f:5a:
33:e0:fa:13:73:59:1f:57:1e:0f:73:fa:f3:5b:c2:
62:ad:14:81:08:bd:07:17:0b:42:09:bd:58:81:53:
89:f1:5b:d2:38:43:90:7b:fb:23:96:e0:91:8d:b4:
d4:0d:83:8e:bc:7c:da:31:b0:43:8b:5a:23:42:72:
71:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:70:26:15:F5:1C:A1:0B:1F:81:63:99:51:E8:9C:93:E1:49:73:14
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/znAmFfUcoQsfgWOZUeick-FJcxQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.254.8.0/21
Signature Algorithm: sha256WithRSAEncryption
90:ea:09:d9:93:fc:9c:f6:28:ba:04:7e:b6:c6:03:1d:19:a3:
bd:f2:14:3b:54:3d:67:e4:97:52:dd:d5:2c:11:90:95:b6:50:
97:ed:ed:2d:f4:85:52:08:e0:41:9c:ec:66:e0:f4:86:57:84:
11:69:ed:8d:12:2c:63:0c:4f:8d:8f:25:bb:65:0f:02:cd:26:
7b:f3:56:05:7b:e7:b5:b1:c9:46:9c:0a:d6:77:96:a8:8c:3c:
ab:54:2e:0d:dc:43:a2:d6:96:8b:66:19:b0:a7:00:b2:64:fd:
cb:94:7c:99:8d:f3:06:50:a8:d8:22:79:80:34:4c:c7:44:34:
20:c4:70:56:eb:79:67:fb:46:be:39:5b:e4:31:f7:e2:ff:64:
fc:0a:0c:94:53:72:e0:16:89:3b:25:40:6d:41:84:9c:5a:fa:
20:72:54:c0:31:87:7d:26:c4:6c:14:5c:d0:b6:42:81:e3:51:
e3:49:f2:e3:18:96:8b:bd:8e:31:e8:1c:29:5f:9e:81:bc:f2:
7a:0c:cf:94:8c:a9:6b:d5:8b:89:d4:3b:3e:68:5f:d7:a5:de:
f0:12:1c:a7:0c:6c:32:ba:86:d4:b5:c8:a0:72:b7:25:97:ea:
7c:c3:8f:5d:bf:e5:44:22:68:6d:2d:21:7c:39:11:92:cb:8d:
16:87:ca:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org