Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fK9GY6JD-7F40fypVt9s0KkOYm8.roa
File: fK9GY6JD-7F40fypVt9s0KkOYm8.roa (raw, json)
Hash identifier: nYYQ89Ejhq0My4qkcgeP6gYFl1y7nnbFP3OH3Nw7sho=
Subject key identifier: 7C:AF:46:63:A2:43:FB:B1:78:D1:FC:A9:56:DF:6C:D0:A9:0E:62:6F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fK9GY6JD-7F40fypVt9s0KkOYm8.roa
Signing time: Thu 15 Sep 2022 02:36:22 +0000
ROA not before: Thu 15 Sep 2022 02:36:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.162.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7CAF4663A243FBB178D1FCA956DF6CD0A90E626F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e8:8c:76:34:fa:a1:df:39:04:ad:d2:c0:d9:
c3:01:88:76:19:2e:7a:b5:d0:37:11:b5:4e:b8:3a:
b5:e1:7d:b8:37:3c:ea:73:3b:b6:61:8f:3b:62:4a:
b7:fe:49:6a:12:8a:a8:f2:13:3b:39:bf:17:36:78:
aa:8c:57:ff:ef:da:4c:27:c9:44:03:fc:e1:b2:6b:
76:38:11:62:fb:f5:87:b7:88:b4:b9:76:cc:78:5f:
76:34:98:e0:62:07:9a:60:d6:19:ee:88:19:d5:c6:
d9:ef:1b:70:fa:9a:7e:61:e0:0c:90:fd:96:a7:47:
18:8a:a3:63:e8:60:95:23:b2:7c:81:0f:7b:ea:af:
0d:69:d8:4e:87:59:1a:9a:f8:76:56:b5:6a:97:3b:
cd:0f:22:9a:da:a1:1f:f7:fd:fe:b5:02:22:33:b2:
12:ed:c0:58:76:e0:e3:3c:ae:c6:2a:5d:2c:9b:4b:
ef:a6:9e:12:81:db:2d:71:08:16:56:30:8a:86:9a:
66:8b:ef:41:c8:a2:54:11:5d:88:e9:d0:e0:b6:05:
a3:bb:83:be:09:f7:3d:f5:ba:b0:e3:76:fb:5b:6e:
f9:58:fd:19:b7:0e:90:c2:12:1e:fa:af:79:89:06:
88:5f:5c:0d:88:70:6b:0b:50:bc:66:c9:6d:3f:6a:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AF:46:63:A2:43:FB:B1:78:D1:FC:A9:56:DF:6C:D0:A9:0E:62:6F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fK9GY6JD-7F40fypVt9s0KkOYm8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.162.0/23
Signature Algorithm: sha256WithRSAEncryption
58:02:54:42:f4:54:34:4f:50:df:2d:15:e2:1a:bf:c0:7b:c6:
5e:16:ae:c2:37:70:54:22:2f:47:e6:ea:8a:05:26:f0:56:4d:
44:16:e1:5b:d5:d7:59:aa:6b:93:9c:22:9d:88:ab:02:c7:42:
cc:9f:bd:ea:d3:fc:84:7a:11:9d:95:f0:a0:c7:8d:e3:a8:32:
1c:70:2d:27:4d:71:7e:3c:e9:a6:34:43:4f:9e:c7:bc:d2:3d:
58:59:30:61:23:f5:c1:6e:5e:dc:0d:03:f9:6b:3d:8c:93:7a:
cc:89:7a:4e:aa:dd:e8:12:76:47:e0:fb:94:5b:3b:b4:69:a2:
19:ed:bf:35:31:ab:26:b9:8c:11:83:56:f1:ee:76:f5:a8:77:
b6:8a:9f:67:d3:90:e3:67:28:b8:6f:ec:65:c3:dd:17:4f:dd:
5e:67:1e:3a:4b:76:fb:9f:3a:e7:73:9c:65:08:26:f1:6c:e4:
47:6f:26:3f:a8:63:8d:ce:98:95:90:7d:ae:45:b7:0d:a2:3e:
ca:f8:f8:45:73:45:ff:45:8c:1a:69:51:f9:a8:f8:7f:a1:8a:
bd:f1:b5:7c:64:95:af:f5:9e:39:36:19:a3:0a:87:67:d5:70:
9b:7e:e3:e8:de:59:c5:d2:b1:01:0f:95:f7:d5:04:17:ec:39:
be:61:f6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org