Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XScuIGJEjAn-VCbXq4TXzsA8org.roa
File: XScuIGJEjAn-VCbXq4TXzsA8org.roa (raw, json)
Hash identifier: QpF7Ci7OMMzMIhfsT5OHTXFIXhPsMhjYaanQp6QJ2Ds=
Subject key identifier: 5D:27:2E:20:62:44:8C:09:FE:54:26:D7:AB:84:D7:CE:C0:3C:A2:B8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B2A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XScuIGJEjAn-VCbXq4TXzsA8org.roa
Signing time: Tue 29 Sep 2020 10:08:05 +0000
ROA not before: Tue 29 Sep 2020 10:08:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 115.165.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2858 (0xb2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:05 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5D272E2062448C09FE5426D7AB84D7CEC03CA2B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:c9:a2:6e:58:f0:bb:cc:db:a7:67:a1:d1:
fd:dd:12:e7:39:73:62:eb:c8:90:5a:4a:14:03:90:
20:41:65:01:42:ff:ef:1a:24:df:67:81:b6:66:4e:
ec:10:32:7b:70:53:2c:1d:88:87:49:09:c5:03:91:
4e:62:d8:7b:8c:4d:a1:47:30:29:1c:f9:d6:d6:07:
74:64:9c:f8:23:64:0a:45:f8:7d:93:5b:75:f0:4d:
06:31:a9:c3:4b:a8:39:b8:d6:2f:49:6f:bb:4d:2c:
9d:00:d6:00:7e:ad:d2:2a:d1:ad:03:5b:98:69:77:
a2:3d:fe:71:22:24:15:e8:78:6d:3b:44:ba:3f:fb:
30:38:9e:77:bc:f0:b2:e8:3f:bc:35:0c:9c:bd:f1:
14:6f:0a:3e:1d:96:d1:7a:a1:06:7f:07:ec:fa:42:
47:80:06:a4:80:4a:93:8c:c8:db:f8:46:b6:44:70:
47:d8:9c:fe:09:aa:d0:2c:29:f9:b6:78:86:17:c7:
f8:cb:b6:2e:87:95:29:aa:ab:8b:82:58:73:3a:b9:
d0:91:e5:6f:e8:56:7a:60:d0:5d:3f:6f:ca:6d:82:
27:67:ee:07:ba:27:86:cb:1f:62:c0:1f:ea:da:60:
cc:f7:db:5a:8e:32:55:00:e3:81:af:eb:53:9a:a5:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:27:2E:20:62:44:8C:09:FE:54:26:D7:AB:84:D7:CE:C0:3C:A2:B8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XScuIGJEjAn-VCbXq4TXzsA8org.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.208.0/21
Signature Algorithm: sha256WithRSAEncryption
37:97:58:73:27:bd:98:91:cd:ef:e9:81:55:a4:58:1a:06:0f:
fd:21:04:5e:e1:81:d3:6f:ef:44:88:5b:b4:ed:34:eb:84:bb:
ad:60:25:45:67:5a:17:e1:89:89:0e:23:e2:56:71:59:67:72:
01:aa:09:02:4d:3a:de:94:cf:e1:b5:51:ef:29:0e:6b:9a:33:
48:65:8b:79:51:21:21:0b:1a:70:36:8a:24:89:f1:6d:0c:2b:
31:f2:ab:cc:91:9f:24:94:bf:6c:b3:50:ac:af:fb:4f:75:25:
1c:c3:62:6c:19:0d:ad:39:1e:d4:64:76:89:4f:57:17:00:df:
1a:04:a7:b9:0c:6e:e1:28:a9:68:13:c7:0b:bd:a7:47:4e:65:
b2:c1:20:b8:5d:0a:26:2a:e5:55:4d:96:05:be:f5:78:0b:be:
cf:e1:41:59:07:1b:49:d1:b7:ed:53:72:d8:d8:07:81:00:5a:
9a:ab:d2:e5:73:9e:89:09:3f:66:5e:c4:a2:fe:b8:45:5a:4e:
fb:d2:f4:20:6e:46:8b:c2:58:a7:6b:ac:21:1c:16:11:8a:a0:
74:f9:5b:4c:dc:e1:e7:a1:a2:ae:21:8c:18:1f:97:39:15:93:
1c:95:64:da:7f:80:eb:6f:a9:1a:76:12:81:2e:9b:f9:c8:fa:
0e:36:de:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org