Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gb0_qy91L_eb6W1SpKn82dLpqkQ.roa
File: gb0_qy91L_eb6W1SpKn82dLpqkQ.roa (raw, json)
Hash identifier: 7p8kMjMjPcPzAJehKUFSLLnPbtFAzwaHR1ocwSth9mQ=
Subject key identifier: 81:BD:3F:AB:2F:75:2F:F7:9B:E9:6D:52:A4:A9:FC:D9:D2:E9:AA:44
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 124D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gb0_qy91L_eb6W1SpKn82dLpqkQ.roa
Signing time: Wed 29 Sep 2021 02:54:26 +0000
ROA not before: Wed 29 Sep 2021 02:54:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 115.165.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4685 (0x124d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=81BD3FAB2F752FF79BE96D52A4A9FCD9D2E9AA44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:12:84:38:c3:43:0e:5c:5c:1c:90:9a:60:89:
cc:06:10:82:c6:c9:19:a9:eb:76:99:31:51:80:a5:
a0:81:1e:9c:96:39:57:90:d7:2e:ce:9b:b9:8a:b2:
a2:a1:40:09:05:e4:d1:51:ba:60:62:6e:ca:67:b8:
bd:62:b0:e8:85:16:ac:82:7d:0f:3b:cf:0d:72:0e:
dd:15:0c:5a:13:14:ec:75:b3:52:ba:e5:23:87:24:
62:39:dd:bc:a8:23:d9:e6:96:c9:fd:b8:9a:9e:ea:
43:0b:0b:d3:1d:26:57:1e:fe:e8:c7:7e:c1:53:18:
49:5d:ab:46:a0:9f:82:fb:01:b5:c9:51:bc:05:c9:
8f:40:30:a3:1c:b7:be:d6:48:da:6e:e7:aa:29:03:
ed:15:0b:cb:c9:16:0e:04:35:b3:9c:4f:fd:12:ca:
d7:3d:b1:79:03:3a:75:fc:36:4f:a6:49:ab:86:ef:
f4:90:bc:c1:a0:6b:db:18:4c:e7:db:68:d2:7b:33:
e0:cb:c0:f4:6f:5e:75:fa:ca:f8:71:c7:38:8a:03:
72:7b:78:59:d8:db:d6:98:fe:e4:00:d2:ae:b1:52:
58:34:1b:56:09:8c:42:c5:60:28:e2:43:75:51:85:
f9:90:cd:37:73:7b:aa:1e:3d:e1:c6:00:15:0b:5a:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BD:3F:AB:2F:75:2F:F7:9B:E9:6D:52:A4:A9:FC:D9:D2:E9:AA:44
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gb0_qy91L_eb6W1SpKn82dLpqkQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.232.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:77:32:26:81:58:36:bc:32:4f:13:1f:89:70:f8:10:d6:09:
79:41:63:dc:5f:65:62:ca:00:e9:89:74:f4:4f:91:02:7e:83:
cb:db:39:d9:43:db:5a:1f:5a:a1:2f:66:a5:73:c7:a7:e4:48:
09:08:e9:c7:7c:15:37:b2:35:9d:a7:e7:7c:6a:69:bc:4a:a4:
10:ac:56:8b:bc:da:e1:81:b3:9c:80:1c:71:13:7a:88:fa:48:
5b:3f:8f:b0:a7:d1:36:06:60:dc:72:cd:e6:c8:a6:fb:33:9e:
59:8d:39:b6:05:30:28:c1:84:06:e8:80:66:f0:f5:12:14:c9:
b7:12:2c:bb:04:b0:49:bf:28:03:9d:0e:72:62:97:17:81:d1:
41:be:d9:3b:0f:73:73:8f:f1:43:05:06:6e:8c:c2:77:38:7f:
24:c0:bd:0a:bd:77:fd:72:12:e2:06:84:cf:e6:b5:10:9a:ff:
85:77:55:4a:cc:9d:e2:b7:3f:69:41:6b:7c:df:cf:ce:27:53:
6b:b9:45:34:03:93:a2:44:d1:29:8b:ea:dd:38:38:32:03:ca:
02:0a:fd:5e:a0:51:de:d7:97:60:86:85:d1:86:f4:da:ec:45:
c7:c2:93:aa:cf:bd:8a:08:4e:2f:e9:f5:99:7b:6e:6c:ac:23:
4b:3a:0a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org