Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yXcg703tcyGxXxhUaE0T_f4a-Ec.roa
File: yXcg703tcyGxXxhUaE0T_f4a-Ec.roa (raw, json)
Hash identifier: IG3/MVjXQEIbOeQXt+9W94oNEFI3VZxMSXjBK4ay5Q4=
Subject key identifier: C9:77:20:EF:4D:ED:73:21:B1:5F:18:54:68:4D:13:FD:FE:1A:F8:47
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1AA7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yXcg703tcyGxXxhUaE0T_f4a-Ec.roa
Signing time: Thu 22 Dec 2022 01:26:22 +0000
ROA not before: Thu 22 Dec 2022 01:26:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 103.225.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6823 (0x1aa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Dec 22 01:26:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C97720EF4DED7321B15F1854684D13FDFE1AF847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:00:ec:b7:59:ed:d3:0a:99:ad:46:0b:55:
44:0e:11:f3:8f:ae:b3:8d:4f:b0:6e:bc:28:a2:0f:
45:92:03:fe:45:30:17:6b:9a:f4:95:9e:9c:0a:97:
ea:39:7b:28:44:e3:0b:e8:c2:37:4d:df:79:19:c7:
00:69:0c:b0:b3:5d:02:8d:ea:4a:aa:f1:08:da:36:
9f:ff:4f:ab:c7:15:10:f6:d0:34:39:c9:a8:ab:a1:
25:4b:1e:81:a0:7e:ef:21:df:67:3c:62:c4:91:48:
a1:0b:7a:26:73:db:ed:b9:83:6c:c6:28:ab:80:83:
a1:a5:ff:4e:06:3d:b0:26:5d:4e:c5:d1:5c:97:75:
98:7c:44:69:84:09:07:6f:b7:08:09:3e:21:5f:d1:
b6:27:09:e8:2d:e8:14:73:a7:a1:68:45:67:df:1c:
6b:61:17:ed:fa:e8:57:48:69:a0:74:6c:cb:53:da:
ad:da:f8:05:6a:71:8d:ae:e5:74:ef:aa:93:26:0e:
fd:09:30:02:79:b3:bd:a9:65:9d:0e:af:18:12:74:
66:08:8a:5d:f5:ba:fa:0c:99:18:e9:bd:aa:d7:39:
4b:cf:24:4e:92:be:09:1f:d6:f3:6e:76:29:6f:35:
22:98:6b:c2:37:e8:80:53:d7:7c:a6:69:d7:62:f6:
9c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:77:20:EF:4D:ED:73:21:B1:5F:18:54:68:4D:13:FD:FE:1A:F8:47
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yXcg703tcyGxXxhUaE0T_f4a-Ec.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.0.0/22
Signature Algorithm: sha256WithRSAEncryption
21:f3:05:ef:87:94:95:16:c6:d8:dc:97:95:ff:94:fb:e9:18:
d8:42:9e:b9:20:bd:52:2b:13:c7:d7:24:4d:30:36:a9:46:d6:
b3:91:9c:81:5d:d8:13:ae:13:5f:69:c5:28:e3:c9:e3:e3:13:
3a:c1:39:5e:63:da:e0:ab:a2:a5:62:99:dd:96:84:46:69:22:
b4:7b:9d:2a:bd:8c:93:72:d9:73:55:cd:6b:ea:e8:93:74:0f:
48:0c:be:7f:ba:85:d6:8c:55:16:59:91:3d:52:1f:7f:aa:fe:
c5:e6:84:88:d5:46:a8:72:b3:80:54:a5:f4:83:0c:79:eb:d6:
15:47:54:84:7e:be:68:13:46:d9:25:64:48:b5:b3:f3:42:d9:
06:61:b3:81:2d:12:76:c0:52:4b:23:e7:2d:ae:b0:53:09:90:
a4:f6:60:05:66:9b:29:82:99:1f:01:87:ae:74:de:39:85:f7:
43:c2:4d:c6:7c:9c:1b:9b:ba:cd:77:a9:c8:76:87:0b:c7:65:
77:f6:b1:f7:fc:77:cf:c7:72:6b:c8:00:c7:ce:ee:60:7a:4a:
f2:f9:c9:62:81:76:79:d4:48:23:92:15:f7:aa:3c:51:c0:41:
9f:2e:30:48:0e:82:2a:ce:e6:8c:2e:b7:a0:07:97:a7:f7:e0:
09:01:90:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org