Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/95Ep4W4phbkXR-098X931RJRiDc.roa
File: 95Ep4W4phbkXR-098X931RJRiDc.roa (raw, json)
Hash identifier: gsPYqi6c7riC38qUzPyJw+AvsoP8fMkh7rlxIME1o00=
Subject key identifier: F7:91:29:E1:6E:29:85:B9:17:47:ED:3D:F1:7F:77:D5:12:51:88:37
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F35
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/95Ep4W4phbkXR-098X931RJRiDc.roa
Signing time: Sun 07 Feb 2021 12:33:16 +0000
ROA not before: Sun 07 Feb 2021 12:33:16 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 115.165.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3893 (0xf35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:16 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F79129E16E2985B91747ED3DF17F77D512518837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:79:02:32:60:02:c6:a1:e4:ec:ce:d3:a6:
6e:60:05:55:dc:2d:49:4e:19:99:eb:16:2a:ff:a7:
66:60:12:8c:a6:bc:4b:4c:50:80:b2:73:6a:9f:ba:
b6:4c:e9:13:29:f6:9e:9c:4b:4e:68:d0:e8:c5:9c:
39:8a:62:54:b9:bb:a5:ec:b9:51:03:37:c6:b7:f5:
73:4b:53:0d:f2:fc:20:03:b4:44:de:65:5c:12:a6:
8d:ff:20:71:81:29:22:d3:a1:5f:0e:16:db:b5:aa:
df:e3:3b:7b:35:8d:d3:50:8a:61:20:82:a7:55:f3:
84:f1:63:48:64:55:cc:82:95:dd:b0:19:e2:7b:e4:
35:00:ee:99:1c:ac:d9:05:39:7b:f5:14:57:6e:0c:
96:99:55:60:99:6c:3f:8f:dc:26:55:76:e8:d4:bc:
39:bc:aa:88:f2:57:b9:aa:f2:6a:ad:2c:bb:ef:21:
3d:79:c7:f4:46:b6:43:6d:df:47:f9:0e:78:62:cb:
a6:67:a7:8d:ae:f6:65:87:08:92:e6:d3:13:37:22:
a7:57:d8:c9:a5:93:80:7f:2d:36:42:f4:6c:f4:12:
2a:ec:d0:73:a8:f1:26:2c:2a:ee:c8:99:96:3e:22:
36:3f:e2:38:17:c2:c3:dc:74:28:7c:fb:08:c2:32:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:91:29:E1:6E:29:85:B9:17:47:ED:3D:F1:7F:77:D5:12:51:88:37
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/95Ep4W4phbkXR-098X931RJRiDc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.232.0/22
Signature Algorithm: sha256WithRSAEncryption
02:5f:e7:54:f2:1b:bb:ea:ae:40:0b:2b:08:81:11:79:51:21:
ff:97:8e:13:77:fe:0c:5e:7d:33:15:df:66:0d:c6:e1:f4:34:
23:35:96:94:8b:79:50:c8:ed:1d:88:c8:26:54:a6:b4:ff:25:
88:a5:49:64:9b:c9:2c:5c:26:6b:8a:09:0d:7b:8d:c5:9a:8f:
7b:e2:01:9a:58:2d:34:1e:d6:15:4a:54:ae:ec:d9:a1:7a:16:
72:28:2d:f1:6e:18:f8:e8:41:31:d1:1d:31:0d:9e:f2:ca:cf:
03:11:2a:0a:37:52:da:df:a5:ce:02:a4:4d:33:04:f9:c9:cb:
55:d0:d1:52:ea:0d:74:65:f5:58:99:44:a5:1f:d0:ca:a1:b4:
33:f5:50:90:4f:92:6e:dc:1f:d5:b9:49:30:d7:b9:81:8b:6a:
0f:4e:07:cd:7f:88:46:ed:c5:12:57:b4:dd:de:47:3b:08:bb:
1b:24:15:8b:83:99:f3:3c:f4:40:9e:2d:07:ae:05:36:51:c5:
76:01:18:40:a8:48:92:c3:03:c2:df:0b:6d:f4:2f:e6:07:08:
2e:1e:e5:e9:a2:a4:5e:3a:13:14:25:53:e4:6a:fb:99:58:c1:
ab:30:b5:cd:88:c1:83:86:70:fd:e7:89:b4:f7:f1:c4:45:d3:
72:1f:eb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org