Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eaUEuUSBn8bcFJ5nP9gxbhSx6Ww.roa
File: eaUEuUSBn8bcFJ5nP9gxbhSx6Ww.roa (raw, json)
Hash identifier: nMKW1ojPzebPYy5sC7akdbywXFDW5fpmdfoR8OCwUfg=
Subject key identifier: 79:A5:04:B9:44:81:9F:C6:DC:14:9E:67:3F:D8:31:6E:14:B1:E9:6C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 199E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eaUEuUSBn8bcFJ5nP9gxbhSx6Ww.roa
Signing time: Sat 22 Oct 2022 06:06:44 +0000
ROA not before: Sat 22 Oct 2022 06:06:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 115.165.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6558 (0x199e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=79A504B944819FC6DC149E673FD8316E14B1E96C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4f:21:4f:82:60:a6:80:f9:dd:ef:7b:c9:89:
da:8a:72:68:96:5b:e5:d0:b2:3e:d2:46:9f:06:08:
de:6f:80:82:95:b1:70:bd:5b:98:47:b3:c8:04:39:
97:c5:bc:2e:42:e0:2f:02:ea:30:ff:82:09:7f:48:
85:58:95:95:59:60:b4:04:75:c9:37:12:53:03:f4:
99:37:39:ed:95:87:da:42:fb:69:ad:bf:89:54:f0:
b0:5e:83:84:df:70:b9:40:63:a6:de:b1:84:71:cd:
b6:b6:a7:f4:ec:46:f7:fe:ae:9c:ad:20:fd:b3:1f:
9e:9d:3f:5e:7e:58:b2:62:44:49:dd:54:31:51:ff:
13:6b:42:7c:45:0b:c2:88:31:8a:c2:8a:ea:17:35:
4b:9b:98:b0:22:f9:dc:21:0e:56:1c:6d:99:05:00:
3e:90:a8:01:6c:09:fb:6e:9f:94:83:1c:a6:80:b1:
8e:13:69:2d:69:95:54:6c:b9:01:08:4d:a0:ab:f9:
79:78:68:f9:0e:d2:09:3b:96:65:20:d6:ec:ce:f4:
07:40:f7:b8:30:05:2b:35:08:39:fe:e1:73:c7:01:
b3:bc:5f:ff:d2:f0:7e:b3:93:b0:39:c0:88:bf:b9:
c0:0d:40:6f:26:49:2e:92:a5:21:1b:65:aa:4c:52:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A5:04:B9:44:81:9F:C6:DC:14:9E:67:3F:D8:31:6E:14:B1:E9:6C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eaUEuUSBn8bcFJ5nP9gxbhSx6Ww.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.216.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:1b:e2:a2:74:5f:87:db:10:b7:20:fa:f9:72:fa:1d:64:29:
dc:44:1d:c4:6a:d3:f7:97:a1:11:b8:45:1a:ec:a4:8e:56:84:
bd:73:b6:17:41:d7:69:da:6e:fa:69:a3:a3:5d:50:8e:2d:22:
c5:30:82:9f:1c:21:14:c3:62:c1:09:4d:0c:c6:74:48:92:41:
bc:d0:d4:79:d4:89:8c:ee:00:34:7c:08:da:b3:eb:e2:0a:65:
71:82:7e:3e:7f:72:24:18:96:77:60:a2:a6:80:b6:c5:9f:c7:
e1:7d:99:63:e8:54:7d:50:ad:1c:1f:b3:e0:cc:41:f7:98:32:
8e:30:2c:57:cc:c1:15:95:8a:5b:66:52:f8:c1:41:d1:a4:43:
68:0e:02:a4:d2:17:5f:b6:0b:d8:51:b9:78:21:78:67:75:e9:
9c:7f:af:66:1d:71:83:19:96:b3:65:00:8f:82:56:9d:70:e6:
27:b9:e2:90:bb:89:1d:74:f4:c0:9b:22:6c:ec:7d:c5:bb:43:
45:ec:c6:03:dd:16:d0:69:75:14:be:96:9e:48:7e:38:e2:33:
36:eb:3f:a7:2c:30:cc:ca:72:7d:1e:f1:aa:f2:cf:c6:51:4a:
22:e4:34:0a:ec:67:07:49:0c:c7:b8:e7:55:de:64:db:d1:1b:
f1:b2:de:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org