Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cKfW7IUTGaDUZW1KZYdkR4Ku1nQ.roa
File: cKfW7IUTGaDUZW1KZYdkR4Ku1nQ.roa (raw, json)
Hash identifier: WaDu0zvTTzyIaqegFMBrLvvqFZ+ochlvyv1/YljIe/o=
Subject key identifier: 70:A7:D6:EC:85:13:19:A0:D4:65:6D:4A:65:87:64:47:82:AE:D6:74
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0D21
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cKfW7IUTGaDUZW1KZYdkR4Ku1nQ.roa
Signing time: Thu 14 Jan 2021 07:12:32 +0000
ROA not before: Thu 14 Jan 2021 07:12:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 115.165.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3361 (0xd21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 14 07:12:32 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=70A7D6EC851319A0D4656D4A6587644782AED674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:69:ca:ee:2e:2b:85:6d:fb:e5:08:77:58:
59:b5:27:89:50:e3:1a:9e:2a:ad:d6:c6:65:6d:59:
34:01:e4:64:de:fc:a7:39:7e:45:30:02:f7:9c:14:
7c:a4:92:a0:39:80:16:a5:e2:ad:b9:37:e8:ea:fa:
70:83:f7:6a:18:60:cc:08:72:16:09:06:da:49:1e:
12:e7:c8:a5:95:d4:43:8a:47:e3:b3:f3:fc:1f:9b:
1c:57:9c:32:61:f4:f8:a1:7e:dc:05:1e:fb:f0:5e:
35:8c:14:3a:8a:d2:8c:8c:93:48:5b:39:0b:00:20:
3c:08:e7:65:88:22:21:ed:66:35:c9:9f:72:25:40:
56:fd:8c:5b:97:06:79:97:63:ef:12:e6:45:e9:e7:
98:22:dc:c9:d0:f1:9c:31:06:39:f9:7d:ea:d9:69:
6a:f3:c9:b8:34:b2:91:4b:1a:58:1a:51:d6:93:f3:
7d:51:32:a1:f3:7d:63:6a:31:3c:d8:66:9e:60:5f:
a6:0e:ab:c3:c2:c6:95:97:c8:33:e0:9e:86:20:2b:
5d:7a:5a:0d:83:6d:80:39:64:00:0e:04:15:37:e3:
83:9e:ba:ba:38:e4:a7:50:38:83:cb:d6:76:c8:27:
14:51:2c:04:bd:88:98:79:f4:66:bf:48:9a:47:c7:
30:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A7:D6:EC:85:13:19:A0:D4:65:6D:4A:65:87:64:47:82:AE:D6:74
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cKfW7IUTGaDUZW1KZYdkR4Ku1nQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.240.0/21
Signature Algorithm: sha256WithRSAEncryption
19:6f:6e:51:36:bb:06:e0:ee:7c:86:c9:68:69:61:c2:62:7a:
d4:39:c8:ee:06:b2:1e:56:12:83:f1:f9:07:48:66:6f:a5:47:
a4:aa:af:1a:9a:bd:2e:3f:07:1f:cf:25:ca:f4:3c:cc:38:79:
33:91:d8:63:e6:1a:2f:5c:32:56:31:b2:e9:eb:55:60:bf:6f:
76:b5:9e:21:49:e2:73:a1:29:83:f1:58:7c:ca:5d:52:9e:66:
45:e2:e1:34:14:e3:6d:b4:82:32:36:59:5a:f4:72:7b:de:85:
49:e8:77:a1:16:52:63:54:20:b0:92:81:f6:39:51:64:7d:23:
b1:8e:8e:e9:c2:cd:85:df:62:26:7c:c1:36:d8:c3:bd:d8:e8:
88:3a:3a:09:21:25:b1:3f:d3:7f:1f:09:23:e8:c5:9f:4a:49:
40:51:7b:12:99:67:66:fa:55:9c:74:4f:3a:32:a6:e2:ac:c5:
67:a2:78:b0:5d:0a:85:7a:70:b5:1a:b5:8a:3a:44:fc:c0:28:
3d:3f:04:9b:39:d5:7c:f6:4c:ee:b8:b6:53:b1:76:18:03:20:
06:12:bf:44:12:de:50:4e:9e:18:b3:ed:af:45:c7:46:fb:e5:
cb:c5:7d:cd:2f:ec:50:f1:10:53:5b:37:77:cb:a7:29:56:9c:
59:c7:a4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org