Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pBJW4Zlyrh3aaPa-w1fJK5fZsew.roa
File: pBJW4Zlyrh3aaPa-w1fJK5fZsew.roa (raw, json)
Hash identifier: ur5OThJluO73Gi4Rs+yptFZ1K65LdCOj04SN/v9srHQ=
Subject key identifier: A4:12:56:E1:99:72:AE:1D:DA:68:F6:BE:C3:57:C9:2B:97:D9:B1:EC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F27
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pBJW4Zlyrh3aaPa-w1fJK5fZsew.roa
Signing time: Sun 07 Feb 2021 12:33:04 +0000
ROA not before: Sun 07 Feb 2021 12:33:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 114.198.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3879 (0xf27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:04 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A41256E19972AE1DDA68F6BEC357C92B97D9B1EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:69:5c:21:a8:66:a1:51:e9:e4:a3:ff:c9:
4f:e2:10:9d:e0:df:55:4a:2c:ab:e8:3b:71:6b:58:
15:ba:65:d8:bd:9d:5a:e5:d8:d5:4f:ad:f6:70:da:
bd:c5:f4:b4:12:37:e7:46:7c:f3:05:f2:81:53:65:
70:95:51:e9:a3:67:c8:c7:f1:f7:b8:57:b2:8f:72:
c0:b9:77:b4:0b:83:8a:7d:d4:3e:9f:1a:31:37:2d:
04:d0:e6:05:83:36:63:d2:d2:5d:85:f8:d7:44:9a:
a8:7a:b3:cf:c0:92:ae:fc:e2:51:8b:f1:41:6e:44:
44:0e:32:dc:4d:a9:38:24:75:03:0b:c9:d4:23:73:
c1:99:98:06:a5:70:39:24:b7:14:36:f7:2a:4f:da:
a1:1e:67:fb:80:c5:07:e9:f3:5b:52:e9:d9:00:1a:
7a:df:22:bd:05:11:21:0e:c7:d1:c5:fd:f2:fc:2e:
5c:b8:19:b9:3b:84:3d:05:65:a5:5f:51:e7:d2:53:
11:95:62:c3:be:28:a6:5d:6e:73:65:b1:f1:07:19:
d3:3f:8f:75:76:09:58:e8:dd:4c:a3:e0:7b:2e:c1:
0e:19:28:5a:af:61:1d:ba:a4:22:09:88:68:2d:e6:
f1:0d:71:27:be:53:3c:e2:b3:41:25:14:3d:70:9f:
7e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:12:56:E1:99:72:AE:1D:DA:68:F6:BE:C3:57:C9:2B:97:D9:B1:EC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pBJW4Zlyrh3aaPa-w1fJK5fZsew.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.184.0/22
Signature Algorithm: sha256WithRSAEncryption
78:72:8a:20:f7:15:84:50:74:b6:52:44:c1:2e:3b:e5:3a:69:
7b:4f:88:d7:c2:c9:74:e2:d2:c9:f5:47:af:fd:05:57:fb:9a:
bb:7f:e4:3e:d5:78:7b:13:d7:a9:5f:b7:e6:45:ff:57:4f:e7:
82:c6:34:8f:39:49:56:37:6f:ff:d8:e8:2b:73:63:40:88:20:
5b:49:6b:9f:51:a5:6a:62:18:da:0b:2e:aa:73:51:fe:41:54:
f7:3a:de:54:35:bc:8b:0b:8d:09:de:56:06:62:68:27:e3:3d:
c3:30:e2:48:65:b6:4b:50:d7:6e:de:e2:8f:2b:29:7e:bd:db:
e3:4a:46:00:e1:3c:cf:5d:94:57:aa:76:85:e9:70:ff:9a:5b:
84:d3:19:3c:ce:3f:7b:97:ff:86:ee:e8:49:c3:52:88:12:2b:
24:95:bf:ae:c4:8e:cb:36:d4:95:8f:62:1b:d7:50:ff:09:42:
6f:dc:f3:38:e7:7c:f3:eb:28:65:7c:0d:de:f0:88:ca:40:78:
dc:f1:14:0a:56:9b:36:08:91:66:7c:c7:23:c5:41:ef:1a:92:
32:73:92:8b:a5:fe:14:ac:97:c2:a2:19:6f:bd:5a:6c:8b:c2:
14:57:fb:8d:11:68:61:4c:aa:e7:ee:f5:33:92:07:cf:bf:60:
88:b0:dc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org