Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dYR1v66UrhmFpLcM1UMZhj6aBDA.roa
File: dYR1v66UrhmFpLcM1UMZhj6aBDA.roa (raw, json)
Hash identifier: ZNtabw+ECmJwmr1ZowuvaM3VN9qRaYqOqr5TRRcicts=
Subject key identifier: 75:84:75:BF:AE:94:AE:19:85:A4:B7:0C:D5:43:19:86:3E:9A:04:30
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A71
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dYR1v66UrhmFpLcM1UMZhj6aBDA.roa
Signing time: Tue 01 Nov 2022 02:25:27 +0000
ROA not before: Tue 01 Nov 2022 02:25:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 115.165.216.0/21 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6769 (0x1a71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Nov 1 02:25:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=758475BFAE94AE1985A4B70CD54319863E9A0430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:a9:98:44:35:1c:3f:cb:65:1d:7b:1e:a0:
ed:06:96:70:c4:94:fd:dd:b7:21:c1:4f:14:67:9f:
3a:28:66:74:3c:a2:a8:92:d2:b6:d6:2b:7d:13:b1:
fb:57:56:5c:a4:3c:d0:f3:d8:0b:b3:ea:f8:6c:2c:
f2:29:58:68:ad:19:30:43:6f:ee:97:e6:a8:11:fb:
3e:c8:a5:2d:6b:84:03:7b:a9:9a:42:74:96:80:78:
45:0d:82:d2:ff:c7:4b:18:5f:af:6d:33:73:a6:d7:
8b:04:1a:cf:e1:b7:06:39:39:9d:ea:30:13:75:a1:
45:b7:09:1d:2d:75:ae:82:eb:07:0b:da:16:50:a9:
3d:99:af:5f:b4:92:9d:4c:ce:fe:eb:d6:19:6d:bc:
f6:eb:da:8d:50:4e:0d:ef:32:2c:d8:12:f9:3b:1d:
20:78:67:09:ad:a0:5f:fe:01:21:52:b9:65:45:31:
db:7e:b4:cd:ac:a0:4e:81:de:2b:37:b0:68:5a:6c:
59:f1:29:ef:d5:69:15:22:30:44:34:e7:db:1e:dd:
83:8a:6d:0b:9a:11:9b:a6:38:ab:27:ca:62:cd:9a:
9e:00:28:bb:33:5b:36:a8:69:29:0d:7a:bf:82:38:
65:96:10:05:28:ad:69:05:6c:d0:a1:77:4a:37:6e:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:84:75:BF:AE:94:AE:19:85:A4:B7:0C:D5:43:19:86:3E:9A:04:30
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dYR1v66UrhmFpLcM1UMZhj6aBDA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.216.0/21
Signature Algorithm: sha256WithRSAEncryption
54:33:12:d0:2c:31:50:10:1d:1f:f3:6d:c6:9f:f8:b0:df:a4:
b0:2e:e9:cd:60:24:9c:cb:e0:46:94:2d:bc:5a:97:d4:22:3a:
79:7c:95:4c:d3:ca:d6:97:e9:68:b0:f8:d6:2b:f7:d6:31:45:
c3:35:94:03:73:99:f7:40:6f:0c:92:3c:de:f3:ca:7c:46:f3:
9f:f2:bc:4f:95:20:5e:79:ed:f6:e7:af:04:b1:c8:67:9a:00:
b2:f8:d6:a8:40:4c:91:1f:6c:9d:7a:b8:9b:89:f6:68:8b:dd:
c6:d6:27:9e:2e:dc:27:a2:b7:fb:ff:d1:6f:94:b1:ff:5a:73:
ac:51:49:f6:ae:70:45:ec:33:16:66:ca:38:9b:44:8a:91:ee:
7c:70:72:29:2c:64:ba:79:e0:90:c7:23:92:84:6c:d1:bd:b7:
36:70:17:57:8a:e6:64:6f:d6:ca:f6:0d:94:a9:95:a7:00:4e:
8a:a1:fd:65:b3:e3:ed:a5:b7:c0:68:93:4f:9e:f3:db:98:bd:
c9:df:ca:e7:07:3f:ae:11:1d:9a:3f:b2:ba:de:d4:cc:f6:80:
c1:35:fe:67:2d:89:6e:48:ac:bf:10:7c:ef:e7:0c:0d:61:d6:
85:8f:6c:e4:78:b2:57:be:01:42:26:83:84:67:3d:0d:e3:dc:
15:77:3b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org