Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZlbSAs52dBjT8cgshyohdcwNeGA.roa
File: ZlbSAs52dBjT8cgshyohdcwNeGA.roa (raw, json)
Hash identifier: K/7FKjrSr3j/uJdi+BwmItC5C+Y0JGQTtNyziHRqkWU=
Subject key identifier: 66:56:D2:02:CE:76:74:18:D3:F1:C8:2C:87:2A:21:75:CC:0D:78:60
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 123B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZlbSAs52dBjT8cgshyohdcwNeGA.roa
Signing time: Wed 29 Sep 2021 02:54:21 +0000
ROA not before: Wed 29 Sep 2021 02:54:21 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 103.225.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4667 (0x123b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:21 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6656D202CE767418D3F1C82C872A2175CC0D7860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:fa:c8:35:bf:81:f7:54:59:e7:21:2a:7f:
3a:df:0a:41:e2:22:85:89:21:52:3c:e4:be:8a:f7:
a0:7a:e9:3b:8a:c1:43:87:93:f1:e5:62:14:42:03:
9e:7d:92:de:8e:68:0e:c4:69:af:00:8d:35:1a:3f:
66:8b:15:d2:71:40:9f:24:cb:1a:85:ab:97:0d:03:
f6:a2:9e:93:4d:b0:01:c2:59:6c:5e:3b:23:15:c3:
75:b1:c6:49:46:84:38:27:2c:22:c3:45:c9:63:70:
3d:e8:98:55:1d:ed:6f:55:19:fa:63:72:ce:4a:96:
ef:b0:d6:3d:ca:63:da:c9:b8:94:60:a9:cb:a5:c0:
0c:af:e7:9d:8b:6f:2e:88:4d:c6:f8:76:3f:56:e2:
89:bc:32:8d:64:19:4a:6c:de:be:e6:9f:24:2c:d1:
53:82:ef:3e:c4:fe:1a:74:c9:05:6a:13:9a:6b:56:
fd:a2:8c:3f:61:2d:4c:6a:1f:c4:5c:71:d4:24:fe:
4a:e3:cf:eb:55:92:43:a3:58:ed:ea:b6:5e:a8:7c:
f7:7b:03:9e:60:f5:97:87:e2:aa:98:a8:ce:0e:a2:
67:00:16:56:5f:e6:1e:02:81:20:00:e7:80:c2:ae:
aa:b1:bf:82:3b:19:74:42:15:5d:b8:72:5e:16:0a:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:56:D2:02:CE:76:74:18:D3:F1:C8:2C:87:2A:21:75:CC:0D:78:60
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZlbSAs52dBjT8cgshyohdcwNeGA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:84:1a:e6:98:ef:87:a9:32:45:fe:a7:1a:99:12:32:33:a2:
dd:f3:90:8e:f3:9a:33:33:0d:03:98:13:3d:44:75:72:97:d5:
3b:a5:cc:f5:f7:c6:62:d1:e9:31:08:05:6d:b6:04:ea:03:da:
59:81:18:01:50:f1:8f:eb:4d:aa:5c:d8:eb:5a:05:43:72:24:
d6:cc:cb:c3:99:77:f1:71:b6:2e:98:7a:b2:05:97:f1:ca:1e:
ee:2c:c6:23:fc:ff:bc:06:16:2e:c6:5d:df:ce:d1:41:aa:19:
e3:fd:91:a5:32:37:d5:67:08:5f:19:66:ad:bf:1d:76:f0:77:
ca:42:97:2b:2e:da:d2:3e:1d:f5:a5:f3:09:ea:63:53:f3:96:
55:6a:2b:45:f2:b9:ac:49:80:e9:75:c5:84:56:32:f0:75:29:
20:82:47:5d:bc:fb:4d:4a:8f:2d:7e:fc:65:5c:0d:1f:ce:91:
65:d1:04:6f:e8:0b:1f:45:00:9c:06:7b:0a:4b:3d:1a:72:4e:
a1:be:7b:9b:47:80:eb:63:cc:8f:3c:30:06:2d:29:df:40:5c:
0a:08:7f:4d:8f:5c:70:72:44:13:ad:df:2f:e6:59:24:a2:37:
a0:f9:d7:d0:a8:f2:cb:db:05:59:40:d9:42:a3:bd:56:a4:5d:
01:90:aa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org