Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EuwwjfMpO1qz3sXtSBpuRtfIc34.roa
File: EuwwjfMpO1qz3sXtSBpuRtfIc34.roa (raw, json)
Hash identifier: 7mb5r6GdIKaw4CBB8geKXuQLUtsmpdyDfhAmqub30js=
Subject key identifier: 12:EC:30:8D:F3:29:3B:5A:B3:DE:C5:ED:48:1A:6E:46:D7:C8:73:7E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B22
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EuwwjfMpO1qz3sXtSBpuRtfIc34.roa
Signing time: Tue 29 Sep 2020 10:08:03 +0000
ROA not before: Tue 29 Sep 2020 10:08:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 103.225.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2850 (0xb22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:03 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=12EC308DF3293B5AB3DEC5ED481A6E46D7C8737E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:66:18:eb:2d:20:ee:b2:a6:80:f2:18:53:
97:e4:e9:97:3e:33:28:e9:81:11:03:83:7c:2d:d8:
b7:fa:10:5e:54:94:a7:0e:d0:d5:04:48:18:55:89:
ac:7d:5b:1a:aa:4b:0e:96:bc:9b:8f:55:39:9b:e8:
ad:bf:c0:08:a4:60:00:5d:4d:43:c5:0b:28:b9:28:
a3:5a:c0:ff:33:28:e6:fd:59:4b:5d:3e:b7:96:b3:
10:6e:70:49:4a:96:fb:f8:48:8a:52:f7:4a:4c:96:
bc:86:23:2c:36:c9:4e:b2:b7:23:f7:f3:c7:e2:09:
0d:d9:75:a0:b8:60:80:6f:a1:39:59:41:6c:10:e8:
23:4f:97:48:b0:ab:35:72:8e:2f:31:c7:e0:3c:b5:
a8:cd:db:17:bd:62:24:1f:44:6c:e3:44:ba:4f:b6:
9f:8e:e3:c8:be:b6:5c:98:d5:f5:a7:c5:53:25:ec:
c8:04:2c:86:a3:8a:6f:98:4b:b4:07:a9:9b:77:b8:
f7:5c:02:5b:55:fe:c4:7f:a9:88:a9:b1:65:31:a3:
38:64:06:99:c7:f2:43:67:69:83:3d:aa:69:44:b0:
29:db:55:40:55:de:50:d0:4f:e6:60:d6:1c:4a:b1:
3d:44:3e:17:86:ba:9b:fd:50:52:a7:39:b0:11:63:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EC:30:8D:F3:29:3B:5A:B3:DE:C5:ED:48:1A:6E:46:D7:C8:73:7E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EuwwjfMpO1qz3sXtSBpuRtfIc34.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.0.0/24
Signature Algorithm: sha256WithRSAEncryption
03:8b:0b:31:a5:a1:fa:3a:d7:40:4f:e4:6c:c9:05:59:94:33:
b2:c0:da:99:fc:41:0d:2f:7b:c4:42:b6:49:85:66:d7:71:93:
3f:45:f0:fd:fa:ef:3d:ed:05:4b:f6:6e:d3:1b:b9:4f:3a:36:
98:e1:28:1d:3c:a8:4d:13:c0:d9:e3:c8:41:1a:c1:f8:76:67:
8e:06:c1:1c:46:00:c1:70:8a:96:ab:6f:03:c4:4b:f4:93:d7:
47:37:28:8e:06:7f:e4:4e:ac:aa:2e:f3:65:9d:61:fc:2a:2e:
07:dd:b0:48:03:0a:00:00:d8:0a:ad:63:75:ba:97:04:a7:55:
03:cb:2c:16:71:32:0a:f3:30:86:9f:8b:5d:3c:0a:00:1b:74:
15:2d:7c:fe:3d:71:82:a2:5b:98:33:1a:4e:c4:24:27:30:94:
1a:26:3e:3d:ca:9a:1d:27:4c:c1:eb:05:cf:7b:2f:4e:27:f5:
eb:1b:64:f4:56:aa:65:13:e3:bc:30:10:31:46:1c:6d:d8:96:
a7:68:d9:5d:20:b4:f7:1b:51:bb:08:85:90:5a:3b:78:b8:10:
d7:db:4c:e8:a1:9b:fa:d5:fc:b3:8d:b3:46:b1:cc:7c:cb:33:
5a:4b:32:3c:51:a4:15:44:f8:6b:6f:9d:9b:67:0f:7d:4a:09:
be:e8:da:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org