Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_VvGePcWihyVbW5Sb8xgHTE7SlA.roa
File: _VvGePcWihyVbW5Sb8xgHTE7SlA.roa (raw, json)
Hash identifier: cyoOI3/A3wYqvqbBp8R6zWZAIoZD+v5atbt8o9VIBDE=
Subject key identifier: FD:5B:C6:78:F7:16:8A:1C:95:6D:6E:52:6F:CC:60:1D:31:3B:4A:50
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_VvGePcWihyVbW5Sb8xgHTE7SlA.roa
Signing time: Thu 15 Sep 2022 02:36:06 +0000
ROA not before: Thu 15 Sep 2022 02:36:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FD5BC678F7168A1C956D6E526FCC601D313B4A50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:cd:e7:5b:1a:60:44:c0:76:f3:c8:93:eb:
a7:9e:75:7a:51:4a:94:4d:7a:90:78:b3:30:c8:4d:
b2:59:0a:87:ae:59:e6:b2:77:2c:22:93:29:bc:2a:
c4:6e:f8:33:60:af:e8:5a:46:a7:46:bb:12:e0:08:
10:3b:d0:78:32:f7:52:1e:05:af:e9:80:29:ef:95:
e4:99:31:e0:57:b4:30:e9:83:d9:e8:09:38:5f:55:
06:bf:f8:ee:e1:c4:01:7b:14:21:f8:8a:bb:15:b1:
60:e6:5a:9b:cc:e1:fc:1e:c9:92:44:7f:cb:b8:36:
2e:95:76:e6:b5:51:01:e4:05:33:84:4d:e4:6d:79:
25:5d:8d:ad:c0:7a:67:ce:58:14:c0:c6:cb:d8:a0:
17:80:8c:53:09:49:72:15:a4:dd:4a:84:cb:74:96:
d2:c7:ca:70:b8:34:8f:24:8d:db:18:70:f1:bf:44:
e7:9c:75:13:cb:1b:d7:be:5b:dc:f6:43:00:9e:16:
bc:df:3a:18:b0:f2:b1:27:6e:69:31:81:33:74:c3:
55:8b:f2:ab:11:e2:08:8d:bd:3b:21:ba:81:bd:39:
5d:e0:04:0f:eb:be:3a:a1:8b:e6:c6:1e:d3:c0:cb:
3d:10:61:d4:28:82:c2:95:d0:65:14:90:99:86:05:
ef:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5B:C6:78:F7:16:8A:1C:95:6D:6E:52:6F:CC:60:1D:31:3B:4A:50
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_VvGePcWihyVbW5Sb8xgHTE7SlA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.164.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:03:2d:35:28:1a:54:0c:e5:32:02:1a:cd:3d:44:69:a3:11:
80:b3:8b:56:71:6a:32:f2:52:c2:9c:15:17:40:77:92:04:d5:
9a:45:d0:d2:99:fe:44:f7:a9:8c:5e:4f:ce:ef:cc:e6:e7:3e:
a4:bc:cf:8f:64:ff:c9:bb:60:1a:49:22:e8:19:cb:e0:3b:c8:
a0:84:c0:00:e7:d8:10:fd:f1:7f:66:68:9e:4e:e2:d0:80:44:
bd:89:ca:d9:b8:77:49:89:1b:9e:47:a1:45:72:f4:83:d6:12:
c3:99:a3:cb:78:ad:a5:11:0c:7c:76:a0:14:f7:f0:bc:09:ca:
98:d0:d2:14:9b:3b:b5:c7:89:c3:e3:e8:3b:e7:b6:d9:7c:4e:
54:8f:98:a9:67:40:db:bc:e3:95:ca:78:6f:69:66:71:78:dc:
3c:10:f3:5f:85:ea:7f:45:6c:24:96:fd:af:45:f8:bc:97:75:
22:b7:2d:e0:a8:94:c4:06:e4:96:2d:51:ab:2e:72:00:73:f4:
09:a1:f8:0b:c4:75:cb:08:75:d2:08:ce:57:f7:65:fb:b0:56:
c8:07:34:ec:46:0d:ac:d7:6d:94:78:cc:29:e2:d9:75:10:b0:
92:2c:d0:72:51:fb:83:d9:74:4f:08:d5:56:b9:76:dc:0c:d1:
c5:57:d0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org