Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IvQtuRNlpeTUtsxisHVl1RJOLZI.roa
File: IvQtuRNlpeTUtsxisHVl1RJOLZI.roa (raw, json)
Hash identifier: VS7PzmsqOUVd6MiSzl2FDJ/CA35Y5A1ozvQ1pOjKibc=
Subject key identifier: 22:F4:2D:B9:13:65:A5:E4:D4:B6:CC:62:B0:75:65:D5:12:4E:2D:92
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IvQtuRNlpeTUtsxisHVl1RJOLZI.roa
Signing time: Thu 15 Sep 2022 02:36:45 +0000
ROA not before: Thu 15 Sep 2022 02:36:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 211.76.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=22F42DB91365A5E4D4B6CC62B07565D5124E2D92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bb:57:6c:33:6d:49:6f:d3:a1:75:bb:57:0d:
39:f7:d4:57:88:5e:98:e9:11:10:84:f7:e5:d9:af:
56:a6:4f:ff:cc:f7:af:fc:a6:d5:f8:4b:49:9b:e3:
b9:cd:58:ca:58:0d:e8:04:cc:ec:17:f0:f5:d4:70:
42:97:b9:64:65:69:57:33:99:82:9f:37:a3:50:28:
d7:d2:4b:bd:cf:95:14:51:e8:77:4c:15:aa:51:a8:
49:73:d2:b6:ee:bf:bc:a3:9a:d6:be:79:d3:cc:c7:
a9:d4:fb:85:b0:ca:bd:f8:60:42:d0:f9:fe:45:14:
9f:4b:ed:ce:88:66:52:0a:c8:47:f9:1b:16:9d:87:
cb:8d:13:8c:0b:07:68:a8:5c:7b:1d:49:8b:a6:eb:
a5:d9:1a:51:04:bc:ea:40:88:b4:f9:b6:f5:42:fd:
e0:d6:45:db:df:b9:c7:47:3d:c7:db:45:2a:2e:f7:
2a:c8:2d:23:b9:d6:93:b2:ce:8f:f1:8c:28:54:ef:
ef:6d:94:86:e4:d1:aa:9c:ad:96:8f:1a:d8:d4:a3:
37:b0:93:3c:7c:4c:6f:ee:5a:de:31:cb:b0:a6:cc:
43:4b:57:12:86:d9:83:36:d4:b7:91:6b:77:9d:21:
ed:15:73:15:d0:48:0a:85:cd:7c:3b:e7:69:90:a4:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F4:2D:B9:13:65:A5:E4:D4:B6:CC:62:B0:75:65:D5:12:4E:2D:92
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IvQtuRNlpeTUtsxisHVl1RJOLZI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.32.0/21
Signature Algorithm: sha256WithRSAEncryption
15:31:9f:4c:98:af:37:4a:30:80:97:7d:67:f8:31:d1:39:fd:
50:03:46:fb:62:90:15:51:78:51:3b:7f:93:e5:ae:c4:f8:69:
76:bc:a3:09:42:7c:77:da:d5:ab:38:c6:c6:8a:c2:52:12:51:
29:c5:c0:3e:19:b5:67:2d:78:a5:9c:ee:04:71:db:5d:a0:66:
ea:0f:e0:89:48:fe:3d:0e:76:31:87:0e:27:4e:20:2d:63:37:
f7:da:b8:98:81:77:61:94:c4:a6:92:27:be:5a:1b:0e:d1:42:
60:70:53:4d:d3:44:9c:80:02:89:dd:45:2c:57:17:39:e7:e7:
f6:21:1b:c9:7d:95:57:04:cf:76:7d:3d:a7:b2:d2:f2:a0:30:
2f:cd:07:01:9d:94:33:b6:4e:32:b7:d0:b2:ca:a2:93:03:5f:
a0:ba:6c:ac:d0:00:2d:4c:23:f5:44:2b:ce:bf:ad:98:dd:f5:
e9:63:fd:de:c6:ea:53:04:9c:9d:6c:b2:62:4f:39:92:53:35:
41:b0:ff:73:a3:3e:60:8d:f8:50:17:ff:bb:b4:58:f8:e7:fe:
2d:28:d2:b7:29:62:6f:44:d1:99:6f:ec:e4:1a:cf:59:31:d4:
97:4c:a3:a9:db:fa:12:09:2d:4e:d3:da:92:07:84:60:1a:14:
4a:e8:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org