Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dx980nGqW7fWzOT7vdw6ussALRE.roa
File: dx980nGqW7fWzOT7vdw6ussALRE.roa (raw, json)
Hash identifier: s9szCJO+YwC7v8Tcu2k0Qe0stIFiI56GymoDETsiAsE=
Subject key identifier: 77:1F:7C:D2:71:AA:5B:B7:D6:CC:E4:FB:BD:DC:3A:BA:CB:00:2D:11
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 195C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dx980nGqW7fWzOT7vdw6ussALRE.roa
Signing time: Sat 22 Oct 2022 06:06:26 +0000
ROA not before: Sat 22 Oct 2022 06:06:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 115.165.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6492 (0x195c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=771F7CD271AA5BB7D6CCE4FBBDDC3ABACB002D11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:a1:b4:72:2c:26:11:0c:b5:29:da:24:be:
b7:f4:3f:1d:02:20:ec:f8:e7:1d:25:04:a6:07:70:
8a:a9:98:94:39:73:ab:5b:54:cb:80:03:dc:2a:9c:
71:2b:e7:36:4c:7d:1b:4e:8b:58:30:aa:a2:00:1b:
bf:88:c9:56:97:11:a7:fd:71:68:1c:27:cf:a6:e6:
4e:81:2a:55:8a:c9:56:ca:60:b5:64:ac:14:98:8e:
f3:48:05:d1:c8:47:f9:b9:21:5e:77:37:b8:fb:47:
11:e1:b9:f6:8a:25:fb:d6:3b:cd:83:73:9b:ea:01:
bc:29:73:0c:e6:35:3a:9e:62:c1:9b:d0:8e:bd:5d:
60:7f:3d:01:e3:cd:72:3a:72:00:21:d1:e7:0d:d1:
5a:bc:e2:bd:5d:72:a7:17:1f:5d:24:67:d6:1f:b8:
40:26:ce:42:a6:8f:8b:40:32:fe:b1:d4:97:98:28:
de:18:a3:59:24:5d:e1:63:f2:69:ed:ee:f4:36:e0:
49:8b:22:47:32:f7:b6:08:6e:f7:67:fe:e4:b0:62:
a5:92:ed:ea:89:42:ba:c1:89:b4:8e:30:66:48:3f:
33:10:b2:a1:16:b4:54:c7:14:a7:e1:58:85:1d:75:
cb:26:5e:8e:04:f1:a8:f9:0b:fd:26:6f:6a:f5:c3:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1F:7C:D2:71:AA:5B:B7:D6:CC:E4:FB:BD:DC:3A:BA:CB:00:2D:11
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dx980nGqW7fWzOT7vdw6ussALRE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:49:54:1e:e8:c7:17:92:36:61:05:b4:94:e8:68:73:ca:74:
e9:e5:72:7c:81:6f:68:97:e2:73:7e:3b:8e:98:00:f0:9d:75:
f4:10:59:35:6d:a7:ab:a4:fc:e7:ef:23:3c:9b:a3:82:89:ce:
69:cb:fb:11:1c:17:7f:06:5b:96:76:a2:ab:32:bc:87:6b:2e:
4c:d2:f8:ac:00:93:a6:8a:5d:bc:cf:57:7a:fa:99:ab:4f:10:
1d:20:83:2c:25:b8:28:a8:74:29:52:b0:f5:52:49:eb:56:92:
fe:63:96:bd:4b:64:2e:a6:b8:06:82:7b:b0:e6:5a:05:07:d1:
6e:73:7e:62:7f:83:ae:4e:72:50:eb:16:87:6b:66:2a:55:33:
87:e2:6c:48:74:6f:b7:50:ae:d3:38:fe:2f:76:03:de:1e:07:
6a:31:be:d5:34:88:28:0c:86:0d:1d:a0:ca:73:5e:c8:d5:48:
61:56:4d:46:b0:45:2e:0e:e1:cb:ae:08:07:b2:ee:c6:f4:87:
4e:16:b9:b0:d0:d7:39:5f:a1:10:63:1c:17:00:26:a2:cc:23:
14:7e:99:2c:de:dd:0d:ae:09:b3:f2:60:6d:2e:bd:94:22:a2:
d9:7f:8a:39:63:5a:b0:a7:74:3a:e2:4d:75:c8:68:66:5a:6b:
3f:aa:45:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org