Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/46BRKxVKAVqoJx68-NVyLJN2ttc.roa
File: 46BRKxVKAVqoJx68-NVyLJN2ttc.roa (raw, json)
Hash identifier: R547UZtZM3eh2O/CfvnRtIg1eNEixGWHdHu9qRjcQr0=
Subject key identifier: E3:A0:51:2B:15:4A:01:5A:A8:27:1E:BC:F8:D5:72:2C:93:76:B6:D7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 16E2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/46BRKxVKAVqoJx68-NVyLJN2ttc.roa
Signing time: Sat 22 Oct 2022 05:27:19 +0000
ROA not before: Sat 22 Oct 2022 05:27:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5858 (0x16e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:27:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E3A0512B154A015AA8271EBCF8D5722C9376B6D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f3:d0:24:61:89:01:16:21:90:b0:29:48:50:
44:85:1f:7c:51:0d:89:94:37:64:9c:77:67:06:17:
61:f9:14:07:0a:5c:d0:34:80:15:47:23:03:66:8f:
f3:a0:36:68:b3:f1:88:5a:2b:24:37:57:bc:78:97:
5e:d1:d4:bf:86:03:b4:2d:74:ce:f9:09:f7:25:e6:
a6:14:4c:2a:63:3d:69:6f:01:7d:e8:c3:a5:6b:49:
41:f0:c5:43:d2:71:b6:6d:78:3e:9e:c4:b7:d6:d7:
e0:68:d4:f5:9f:fa:5a:b6:91:60:4d:7b:72:ad:18:
b0:d2:90:a9:fe:9f:23:8b:75:25:36:04:fc:0b:b0:
a7:5d:56:7b:45:05:b8:42:80:21:31:ac:b4:28:ad:
f8:9e:12:d7:8d:65:7e:7c:77:3b:98:9d:e5:04:56:
3e:d9:fc:37:81:2d:cc:5c:17:22:1c:54:72:39:85:
8c:25:ab:a4:4e:1f:a8:1f:42:ba:e2:36:89:36:1b:
c7:71:7a:89:76:1e:ea:23:3d:5e:a6:23:6d:80:e4:
03:3d:91:da:91:29:3c:8f:d3:97:05:a9:c8:e1:37:
cd:73:87:08:4c:b2:27:df:c4:8c:8f:2c:d8:ad:c1:
fd:13:b3:e8:ec:1c:c4:2b:87:65:50:55:bf:64:9c:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A0:51:2B:15:4A:01:5A:A8:27:1E:BC:F8:D5:72:2C:93:76:B6:D7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/46BRKxVKAVqoJx68-NVyLJN2ttc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.184.0/22
Signature Algorithm: sha256WithRSAEncryption
98:7d:e5:6a:d6:ce:87:54:26:ea:8c:bb:64:60:be:e0:6f:30:
23:ec:f4:e5:0b:31:55:10:5d:a1:5d:a0:0d:cd:be:ba:46:a0:
03:1c:08:4f:75:fe:ed:f5:e3:ee:c2:c8:37:83:7c:2d:9b:43:
ce:a1:55:53:7f:6c:aa:62:74:5c:87:be:c8:e7:36:2d:cd:08:
71:11:2c:f9:db:d7:ec:e5:ff:93:48:6a:e9:0e:25:f0:0f:c6:
42:6c:e4:0d:e0:fc:93:3e:ba:28:fb:cb:32:50:93:eb:18:2f:
25:d6:61:42:87:b1:40:00:60:7a:fd:8c:39:42:cb:87:00:c7:
e3:50:18:7a:67:a8:8b:43:d4:92:04:9a:93:60:68:c4:07:33:
e4:28:5d:40:bb:d7:6b:08:53:8c:25:0e:af:77:a3:a9:f0:07:
35:02:91:63:38:24:58:df:23:a0:bf:e4:15:3c:d8:d0:9a:0e:
dc:24:3c:5f:bb:3a:52:57:5b:a9:12:ef:a1:b2:74:f2:b3:02:
bb:e7:6a:3e:89:78:89:ae:fa:b9:74:4a:21:ed:06:13:d2:7a:
25:cd:e9:bd:34:f1:e1:09:3e:c2:f8:19:d7:ba:6a:ff:87:46:
e2:4b:90:8c:3b:c7:9a:1b:c9:3c:85:0e:e0:2e:1e:e7:58:00:
12:f8:4a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org