Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yej7SvmQG8Bh5hQ_ZK_f2sBGTao.roa
File: yej7SvmQG8Bh5hQ_ZK_f2sBGTao.roa (raw, json)
Hash identifier: CfM2RPoCbFX6oRJLhAmS4x+Gj4Ob5xYWXR8jFKHx0SM=
Subject key identifier: C9:E8:FB:4A:F9:90:1B:C0:61:E6:14:3F:64:AF:DF:DA:C0:46:4D:AA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 198E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yej7SvmQG8Bh5hQ_ZK_f2sBGTao.roa
Signing time: Sat 22 Oct 2022 06:06:41 +0000
ROA not before: Sat 22 Oct 2022 06:06:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6542 (0x198e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C9E8FB4AF9901BC061E6143F64AFDFDAC0464DAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b2:c8:e5:53:8c:92:8f:d6:9d:b6:42:50:6a:
f8:32:e4:54:f8:5c:5d:0d:f7:04:14:39:c4:49:c4:
72:84:5e:54:1d:fc:95:a7:87:89:e1:19:06:8c:4d:
4b:73:97:ce:8f:57:37:d4:f0:ce:48:19:f5:84:ed:
7c:f4:8b:b8:e0:4c:7f:5d:79:f3:14:a6:5e:67:be:
0a:d2:e9:13:3b:81:d2:ef:70:0d:49:26:2e:4d:cf:
18:52:c6:df:f6:2a:8a:c9:63:e2:ac:47:15:eb:48:
1b:c6:5b:cf:8b:8d:d7:4f:49:e6:2a:3c:3c:2e:2d:
0f:a5:83:60:76:1b:87:26:fa:1f:72:fc:3a:ee:f2:
a7:fd:86:da:6f:73:41:97:e2:64:7b:bc:9c:8d:49:
64:be:9c:06:c3:01:23:f7:0c:b8:68:fe:43:ed:d5:
bb:71:d6:c4:10:81:a2:e4:2b:82:6d:ea:20:9c:cc:
7a:40:bd:20:f8:66:16:57:f1:c3:be:55:91:fd:8b:
43:f7:5d:c2:8a:a7:7e:22:7a:1f:97:68:6c:ff:42:
91:36:5e:b1:2d:9c:f8:b8:f6:c4:8a:f6:b3:40:21:
c6:bb:2f:59:db:66:8d:6f:e1:55:ec:9e:f5:aa:d4:
52:1a:5b:06:bb:8a:dc:7c:37:97:61:3e:6b:42:de:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E8:FB:4A:F9:90:1B:C0:61:E6:14:3F:64:AF:DF:DA:C0:46:4D:AA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yej7SvmQG8Bh5hQ_ZK_f2sBGTao.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.162.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ee:90:31:a5:58:17:30:c2:f4:2a:62:d4:9d:1e:d8:f2:ed:
96:56:29:40:3b:aa:45:cb:70:3a:ee:71:4e:ac:d9:77:c3:68:
6c:2f:0e:19:0f:a8:05:19:5b:98:d4:52:b1:d4:5f:85:6d:d6:
90:93:1a:8d:96:31:f7:1a:a9:43:a6:25:50:13:04:26:fa:58:
6c:58:13:71:77:06:57:a1:b5:53:cf:22:de:f2:9a:2d:5d:a5:
41:53:1b:fc:09:e5:4a:8a:41:2b:7d:77:49:97:d1:2a:37:c0:
73:d0:91:be:8e:99:6f:56:c4:79:50:9b:92:b4:17:84:2b:ae:
1b:1b:3e:27:1c:66:32:c7:a7:56:a7:fd:45:e7:39:c1:04:d9:
c7:ce:08:26:fe:98:9a:82:e9:21:9d:3f:25:d0:3a:e5:4c:4b:
37:07:0f:23:3a:a8:84:ef:1b:2a:39:5e:ea:9c:a3:5b:96:78:
36:2e:a9:70:d0:99:e8:d8:3a:87:3f:76:32:d7:27:44:a4:47:
5a:e2:6f:66:ae:a8:23:97:27:66:2c:93:0e:80:50:a1:2c:81:
98:50:67:0e:87:ce:d8:45:e5:12:35:bb:d5:d4:2a:c5:a3:fc:
29:93:d7:e4:b5:4d:16:27:bd:96:9c:0e:9d:ea:b1:93:f3:c4:
7c:40:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org