Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/POBOadk-AazCpKL2a5sr_J5g9vY.roa
File: POBOadk-AazCpKL2a5sr_J5g9vY.roa (raw, json)
Hash identifier: GjEMXWdl71nDGfuwY4Busw9qJNFqN+TspNYyB2eQ/l4=
Subject key identifier: 3C:E0:4E:69:D9:3E:01:AC:C2:A4:A2:F6:6B:9B:2B:FC:9E:60:F6:F6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/POBOadk-AazCpKL2a5sr_J5g9vY.roa
Signing time: Thu 15 Sep 2022 02:35:49 +0000
ROA not before: Thu 15 Sep 2022 02:35:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 115.165.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3CE04E69D93E01ACC2A4A2F66B9B2BFC9E60F6F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:c4:0a:4c:af:0b:ab:2b:09:5c:5a:34:f6:
b6:34:78:72:0e:4d:de:43:a4:99:95:1b:ee:2f:e0:
5a:ac:1e:52:dd:b4:1c:64:a4:1b:a3:67:ec:ba:65:
ed:38:11:bc:63:a6:ab:c8:b1:1d:d7:bf:5d:b0:ee:
b1:cf:69:01:1c:17:6c:c2:61:10:b0:fa:8b:2f:de:
c7:8a:35:3e:93:5e:2b:33:d3:e3:b0:33:8a:85:41:
b1:78:87:bf:8a:5a:37:c3:69:9d:3b:6b:4a:65:a8:
22:9a:2b:dc:77:a0:e2:16:f3:77:76:73:8f:80:3c:
9f:e2:a2:b6:e0:01:95:f2:ac:df:50:f4:8b:23:81:
23:12:26:7f:ba:c9:ba:af:01:57:c8:f6:15:3f:f6:
27:21:e8:1e:1b:bc:6e:58:2b:9d:08:a3:d2:db:79:
44:d6:80:68:4e:3f:66:05:07:15:d7:5e:92:2e:78:
00:df:d8:f9:cc:75:a1:1e:51:23:83:55:82:fc:72:
b8:c0:65:04:15:23:9c:44:69:81:f3:5d:2a:c4:a6:
58:3a:b5:72:fa:29:cd:a5:d5:ab:ea:92:d7:b2:88:
9b:3f:76:cb:dc:b6:8d:20:0b:4c:18:b8:94:15:3a:
82:04:04:fb:cd:3c:ac:f4:30:3c:9b:1b:63:13:68:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E0:4E:69:D9:3E:01:AC:C2:A4:A2:F6:6B:9B:2B:FC:9E:60:F6:F6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/POBOadk-AazCpKL2a5sr_J5g9vY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.200.0/21
Signature Algorithm: sha256WithRSAEncryption
61:a3:72:38:cf:ee:04:8a:a9:5b:fc:2f:8c:2b:a9:a9:9d:e3:
12:f5:a8:00:1f:3c:a4:c6:bd:58:8e:e5:dc:06:59:b3:58:58:
7c:86:da:23:15:53:29:f7:7f:5a:25:d9:93:92:ce:f2:5e:0e:
f7:e5:49:4e:40:7f:43:10:33:ed:7f:b5:f3:cb:71:5c:ee:98:
23:52:ba:4c:b9:84:8d:8d:7e:eb:93:b6:18:70:8a:38:b6:83:
46:66:5a:38:2c:59:2f:f6:11:db:17:64:01:0d:84:e3:0c:b8:
2b:6f:d2:0d:1e:a7:02:ca:36:c6:55:b8:d0:ed:54:a5:d7:f0:
48:8f:a4:30:d4:ec:38:50:7b:e5:53:0c:13:e5:b6:20:97:42:
95:19:b1:7b:96:95:7b:36:dc:49:ee:3e:cb:2c:ad:b1:96:22:
5b:e2:97:88:13:63:49:dd:f0:25:d5:b7:f0:c1:42:f1:10:df:
8e:52:c5:0e:d8:ba:02:49:b9:07:89:64:19:24:2c:39:aa:73:
9f:b0:59:c1:86:ef:2c:9f:61:0b:fc:83:7e:05:a2:06:81:e7:
ec:e4:37:10:bd:8d:d8:be:5c:f3:a6:a5:0a:5a:b6:41:9a:2d:
3b:40:40:dd:b3:47:4d:69:2b:65:03:c1:06:54:4c:c3:8b:09:
c6:2e:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org