Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6IXkkScA6fZe0KqAtf9itFPexMM.roa
File: 6IXkkScA6fZe0KqAtf9itFPexMM.roa (raw, json)
Hash identifier: SU/s206YvJjgqptYSwfa8GkpdUuAaRf5kywkZXy35es=
Subject key identifier: E8:85:E4:91:27:00:E9:F6:5E:D0:AA:80:B5:FF:62:B4:53:DE:C4:C3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1702
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6IXkkScA6fZe0KqAtf9itFPexMM.roa
Signing time: Sat 22 Oct 2022 05:28:45 +0000
ROA not before: Sat 22 Oct 2022 05:28:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 115.165.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5890 (0x1702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:28:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E885E4912700E9F65ED0AA80B5FF62B453DEC4C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:38:39:47:bf:86:c6:49:00:50:da:5e:97:
90:58:d9:6c:15:49:7d:f7:f4:6c:89:81:da:29:48:
b7:a2:d7:3b:7c:97:24:4e:2d:23:d6:03:b5:e3:a7:
fe:f2:a5:52:ab:ee:01:26:16:f2:fb:4c:0f:2f:8d:
85:01:af:9b:50:22:79:6b:67:e7:ae:80:3e:87:bb:
55:b0:d8:ea:4d:07:04:90:6f:bf:ac:f0:42:75:ee:
8f:79:cf:d0:67:cf:41:65:3e:4f:8a:79:c7:58:d5:
13:ce:4c:46:fe:0a:f8:47:39:8c:68:c8:f3:42:8d:
fb:14:b9:72:df:e5:8c:8b:24:e1:03:cf:2d:1e:14:
57:29:87:f5:bb:04:c8:5b:24:f2:e2:e5:99:2d:1f:
35:58:d4:ef:e9:01:f9:60:dd:83:df:91:16:3f:43:
2e:e8:7f:58:b9:98:9f:8e:06:0e:80:8b:31:bd:08:
fe:8c:86:92:00:ee:71:18:04:62:61:1c:a2:bd:90:
67:4b:a1:d3:f3:96:ef:3b:45:6d:71:78:e6:6c:17:
be:bb:87:bb:c1:14:90:5f:e4:6b:00:73:ed:65:24:
7f:52:47:d3:43:75:c6:a6:bc:32:4e:93:7d:38:3c:
12:09:80:6b:6a:b0:7c:8a:48:fd:13:cd:26:bb:3d:
76:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:85:E4:91:27:00:E9:F6:5E:D0:AA:80:B5:FF:62:B4:53:DE:C4:C3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6IXkkScA6fZe0KqAtf9itFPexMM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.248.0/21
Signature Algorithm: sha256WithRSAEncryption
81:41:1d:21:f5:72:c8:36:0a:01:f7:93:61:38:6e:cd:e0:4e:
09:e4:e6:0e:f3:57:c1:c1:69:f9:ae:73:ac:1f:c5:75:43:ea:
6a:f2:71:36:41:74:17:94:fb:36:86:90:45:9e:08:2b:98:c2:
e6:24:af:6f:4f:83:30:30:3a:88:54:97:9e:83:0c:51:77:00:
e8:ab:45:28:34:4f:46:0d:da:da:b8:46:1a:1c:d1:58:2c:ec:
4d:58:ec:36:cf:33:41:7d:35:ec:95:4d:b1:ce:68:6a:3c:58:
8f:f6:41:0d:f3:a4:27:e3:6c:87:03:ad:00:af:be:0c:8c:3e:
f2:f5:ef:6a:19:ff:2a:9b:75:14:5e:3b:89:38:e4:37:48:20:
10:94:10:a1:62:d6:7b:b7:ab:aa:94:55:a7:2a:68:ff:5a:67:
03:8e:14:01:47:0c:b1:c7:db:9b:c1:e3:c8:3a:13:5d:30:13:
be:c2:6e:92:6f:43:b1:b6:ec:66:3c:a1:86:93:ec:74:34:29:
6d:f4:06:e0:ae:90:2e:b3:e7:d5:c0:a3:6a:10:f4:4a:51:67:
ae:bb:09:e3:13:0a:b6:20:4c:4e:b0:08:4e:be:1f:9f:6e:de:
4b:54:7e:f7:69:ee:50:49:97:a6:a1:4f:27:c8:7d:4b:53:5c:
74:3b:82:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org