Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F6UKvK3c3DaJyH_83oZvNXfJWbc.roa
File: F6UKvK3c3DaJyH_83oZvNXfJWbc.roa (raw, json)
Hash identifier: e82SeSTRVJYKs5TAd2ufHZR2USOK/wfGhje8Ok6zWBg=
Subject key identifier: 17:A5:0A:BC:AD:DC:DC:36:89:C8:7F:FC:DE:86:6F:35:77:C9:59:B7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1AAF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F6UKvK3c3DaJyH_83oZvNXfJWbc.roa
Signing time: Thu 22 Dec 2022 01:27:45 +0000
ROA not before: Thu 22 Dec 2022 01:27:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 114.198.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6831 (0x1aaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Dec 22 01:27:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=17A50ABCADDCDC3689C87FFCDE866F3577C959B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:66:40:f9:0b:a5:70:6d:81:51:f4:72:88:
b1:5e:74:2d:0b:96:75:5f:9b:6f:69:6d:7f:18:1e:
b9:96:cd:07:21:28:52:63:af:e8:aa:0f:46:4d:87:
42:9f:95:4c:ec:2f:98:3f:4e:12:43:00:09:26:8f:
da:c3:79:21:ae:b0:36:e6:5d:aa:22:9f:d2:3c:74:
50:c7:44:93:45:de:21:f1:f7:66:73:81:67:d9:a7:
f3:9c:9c:d5:b0:07:14:f7:ce:f5:31:a2:1c:d8:e8:
98:e1:ba:69:ac:4c:23:dd:36:a4:63:26:78:bb:ad:
16:5f:7f:d3:70:53:4b:a1:de:9a:3c:11:5a:31:67:
08:5f:80:40:41:5c:1f:56:05:bd:13:5c:9c:d9:dd:
2b:a6:37:a4:fb:b1:9d:91:5a:cd:a1:07:7e:f4:c0:
3e:c4:52:07:4c:39:c0:3c:48:1c:aa:29:dc:39:00:
da:92:d8:64:fc:e5:cf:70:d0:8e:5c:d1:72:cf:f3:
d7:de:49:d8:a1:36:ef:7b:4e:89:dc:2c:27:83:d0:
b9:b6:68:8c:67:33:87:fe:00:ef:88:f4:3e:30:e3:
91:a0:92:86:f7:ea:56:0c:c6:90:5f:92:2a:d6:67:
ea:d1:45:9b:d2:23:45:c5:ff:c6:cd:75:5c:78:28:
6e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A5:0A:BC:AD:DC:DC:36:89:C8:7F:FC:DE:86:6F:35:77:C9:59:B7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F6UKvK3c3DaJyH_83oZvNXfJWbc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.160.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:16:29:ed:4b:bd:13:79:01:62:16:67:16:42:47:7d:09:c7:
45:6b:21:9e:dd:b2:54:d1:08:41:a0:22:56:a3:76:05:2b:7c:
33:e0:15:88:27:c8:4d:c0:c8:3b:66:0d:d3:63:3f:66:40:3f:
81:d1:d4:08:5a:b5:9f:93:41:e8:72:68:4e:68:37:ae:9e:29:
ed:5c:35:f1:99:83:77:2f:20:ab:4d:32:55:89:63:37:d3:e3:
55:57:7c:66:65:88:12:43:9c:b0:f7:82:23:b4:e0:f1:7d:cb:
88:b4:bd:ae:66:4c:67:76:21:56:82:9a:a2:e1:dc:76:7e:6c:
fc:3f:2a:e3:8d:7e:3c:2d:84:71:ca:e9:2a:1b:4f:80:c3:31:
ad:5a:5e:eb:f4:28:fd:fd:6c:86:64:81:90:7c:26:f2:c7:f6:
5f:42:25:b4:a5:79:c9:e9:43:6f:ac:9a:40:f8:8a:29:45:52:
d9:1e:54:cd:f0:32:4b:8b:5b:3f:34:ed:f7:b8:fd:ae:8a:9a:
67:fc:02:de:92:60:b6:8d:78:bf:af:53:f0:d6:96:04:d0:89:
25:d5:2a:37:88:58:92:f0:ee:1c:af:e7:7b:e5:a4:5e:75:1f:
39:1c:c1:fc:72:c7:19:7f:4f:e7:2c:67:04:ac:30:56:fc:ce:
04:55:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org