Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZFznd0H7SPojcE1Dm-VGPawjPts.roa
File: ZFznd0H7SPojcE1Dm-VGPawjPts.roa (raw, json)
Hash identifier: WvAvq2uUxQePKlKqJhPWmKezEg8yeAKcDmhp27wgf5E=
Subject key identifier: 64:5C:E7:77:41:FB:48:FA:23:70:4D:43:9B:E5:46:3D:AC:23:3E:DB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZFznd0H7SPojcE1Dm-VGPawjPts.roa
Signing time: Thu 15 Sep 2022 02:36:40 +0000
ROA not before: Thu 15 Sep 2022 02:36:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 115.165.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=645CE77741FB48FA23704D439BE5463DAC233EDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:81:af:3f:b1:ac:d1:48:3f:e1:e1:38:d7:
c8:82:5d:5b:2d:68:ee:16:09:cf:bc:b3:d2:64:93:
95:fb:ae:f4:96:87:52:4b:8e:7d:92:6a:9e:ea:08:
90:14:af:80:e8:12:d0:8d:63:ff:df:ea:10:1a:ba:
ae:31:83:31:11:d1:dd:6d:81:ed:3e:88:47:92:1e:
10:85:21:5e:37:ce:98:b6:b6:fb:aa:22:f2:c1:6b:
4d:a4:22:20:39:66:4f:63:5e:3d:6d:8c:88:9c:54:
09:8f:5d:44:f8:14:05:35:bc:9c:91:42:3e:f3:67:
5d:74:ed:f2:9f:fa:e8:3e:a9:ed:82:25:1f:43:75:
77:52:14:1d:76:e5:52:f1:4a:c5:10:33:d0:a9:47:
a7:e7:f7:f8:b5:cc:71:21:14:08:7f:01:a9:f2:d1:
d3:77:b0:23:68:3a:18:34:d2:7d:a1:b3:2f:c4:46:
d9:d6:91:44:a6:36:76:4a:83:c6:7a:52:a2:4c:3d:
3a:76:fa:45:4d:64:c1:5c:45:91:05:cb:98:a3:75:
78:ed:51:ed:d9:7b:06:85:01:6b:84:c0:d6:97:20:
50:89:18:13:76:07:a9:d7:a8:3f:79:19:4d:cd:26:
05:75:32:ca:4d:e0:79:1f:35:ab:43:f6:34:b5:8e:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5C:E7:77:41:FB:48:FA:23:70:4D:43:9B:E5:46:3D:AC:23:3E:DB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZFznd0H7SPojcE1Dm-VGPawjPts.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.224.0/21
Signature Algorithm: sha256WithRSAEncryption
46:7c:f1:58:55:d8:90:83:44:d7:f4:2f:6d:a5:7d:c4:e1:14:
72:47:3e:fa:00:a4:83:aa:97:f1:bd:e6:aa:14:28:ba:a5:d1:
78:06:92:e4:0d:db:2e:18:57:8f:e9:63:fb:82:3d:0c:35:bf:
78:10:a8:d2:74:a4:c1:81:bf:81:74:9d:af:72:91:b4:6b:4e:
24:b5:c2:4a:9d:64:de:c3:d8:b7:5e:67:ad:ab:16:51:7c:a2:
3f:5e:f0:81:25:06:2e:fd:bd:15:03:4b:9e:e1:16:64:7a:c8:
ef:94:2f:51:13:5d:4a:0d:68:ac:91:a1:f5:29:de:b7:48:ae:
8e:24:f1:65:5b:58:02:0d:61:d5:29:24:72:42:65:42:0d:77:
72:b6:84:b0:d9:8b:45:7b:25:3c:f6:99:8b:21:8f:50:1d:55:
e4:9a:ac:10:ee:35:d6:70:aa:f1:9d:be:eb:62:c9:b0:27:9d:
c7:34:01:1c:f0:21:4f:9d:36:8c:3f:f2:45:1b:e1:3a:41:43:
09:49:da:fc:42:e8:3e:f5:25:02:3c:e2:c9:16:aa:b1:46:6b:
75:12:d7:2f:20:47:2f:80:e1:d4:e8:9d:de:5b:82:fc:02:bc:
23:30:55:b9:c6:ca:a7:df:d1:41:66:03:5c:71:ad:41:88:70:
54:19:59:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org