Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MwXMOKd-SWjpiRUgaDqZ7etAOdI.roa
File: MwXMOKd-SWjpiRUgaDqZ7etAOdI.roa (raw, json)
Hash identifier: tirZdpTgcVx9ZOqadffO9gQ+jUV1Lyz6g++KsbizGa4=
Subject key identifier: 33:05:CC:38:A7:7E:49:68:E9:89:15:20:68:3A:99:ED:EB:40:39:D2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MwXMOKd-SWjpiRUgaDqZ7etAOdI.roa
Signing time: Thu 15 Sep 2022 02:35:39 +0000
ROA not before: Thu 15 Sep 2022 02:35:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 2407:4b00:fd01::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3305CC38A77E4968E9891520683A99EDEB4039D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:cd:32:52:f6:0e:9a:c4:a6:ec:5f:2b:19:
8a:11:92:43:cd:b3:4f:de:0d:93:22:25:5f:31:3e:
9e:34:c1:23:50:c1:13:f4:a6:63:41:d6:80:0a:a6:
1d:a1:de:c1:c3:d0:4d:1b:33:e2:ea:5e:bc:99:35:
b5:13:cc:37:47:a5:55:39:99:72:b7:ef:ba:c9:77:
b3:87:0e:1d:46:5c:95:91:0e:61:58:ef:ad:a6:7d:
01:b5:e6:11:a5:c8:d5:99:d9:c5:30:24:26:b8:bc:
33:68:cf:05:b4:81:c7:1a:0c:ec:c8:c0:22:71:51:
94:8b:84:31:18:53:f0:ec:bf:e5:ee:41:6a:cf:d2:
2f:05:76:21:76:0b:05:9c:89:b5:ea:ed:e2:d2:75:
36:c5:96:fc:d3:6a:ba:d6:39:62:90:e0:e0:1a:db:
92:62:dc:13:2c:34:51:94:3a:67:39:c8:59:9e:97:
3d:ed:39:a0:42:c3:88:df:9d:3e:66:8f:dc:ab:f5:
18:28:55:2c:7f:47:17:b7:ca:dc:05:f4:ac:96:41:
a1:d5:4b:71:84:7b:eb:f2:4a:12:fc:87:ea:fb:72:
7f:d8:c0:06:14:8c:d2:7b:af:ae:4f:60:1e:e0:a0:
9b:15:1e:37:61:ed:1b:4e:39:32:22:ac:ed:9d:b5:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:05:CC:38:A7:7E:49:68:E9:89:15:20:68:3A:99:ED:EB:40:39:D2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MwXMOKd-SWjpiRUgaDqZ7etAOdI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4b00:fd01::/48
Signature Algorithm: sha256WithRSAEncryption
8f:a4:75:15:24:83:a8:2d:96:e1:5a:ea:d7:96:e1:9e:62:e0:
46:30:93:87:9e:35:77:91:4f:4c:e7:22:e0:44:f3:49:99:78:
35:94:5d:6c:5e:d3:37:5d:9e:79:16:22:4c:95:00:be:e6:1d:
84:e3:a2:5b:6f:38:45:30:f7:5e:94:c2:be:61:c6:2f:bb:f4:
7f:16:1b:5f:3b:a2:63:e8:b3:ce:e4:ab:52:cd:09:28:8a:81:
e4:85:62:e7:88:78:75:c8:e4:29:c8:a1:a1:1d:3e:ba:f7:9d:
fc:16:27:7c:59:61:be:1c:7e:17:5c:8f:1e:92:a2:c3:ff:50:
ed:47:9a:e8:01:ce:5f:f0:2c:ff:66:ce:05:84:28:6e:ca:1d:
ab:0d:1b:d2:40:56:17:95:3b:d8:0e:ea:cb:1b:7f:2c:8d:db:
e5:bd:9c:7f:d7:5b:c8:aa:11:8c:12:fc:7c:7e:bb:04:b4:c2:
c2:9f:2e:8d:69:6a:0b:a4:a9:0e:ca:c3:82:2b:a4:ed:5d:ba:
b6:95:d3:a1:c6:36:a6:f4:4b:cc:72:4d:38:3c:3e:4f:e1:f7:
c7:60:1b:a6:63:10:63:f4:75:9c:95:2a:62:4a:83:f5:5e:e9:
bf:e8:60:dd:07:de:72:34:fc:9e:2b:30:d2:60:91:2e:ca:1b:
a4:49:d9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org