Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-9oKkh0QxX_n7mKF9Thphv3QzWo.roa
File: -9oKkh0QxX_n7mKF9Thphv3QzWo.roa (raw, json)
Hash identifier: i5Gtx9hIivY6AgTwBoKasLc6HTHuS2JO+A4zPx0H50o=
Subject key identifier: FB:DA:0A:92:1D:10:C5:7F:E7:EE:62:85:F5:38:69:86:FD:D0:CD:6A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F2B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-9oKkh0QxX_n7mKF9Thphv3QzWo.roa
Signing time: Sun 07 Feb 2021 12:33:08 +0000
ROA not before: Sun 07 Feb 2021 12:33:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 115.165.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3883 (0xf2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:08 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FBDA0A921D10C57FE7EE6285F5386986FDD0CD6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:8c:b3:cc:f2:ab:53:46:86:f5:f6:9c:13:
ff:b9:ed:25:27:86:00:a0:80:0b:60:d7:ba:99:94:
85:7c:b0:6d:3b:50:29:ce:78:cc:96:61:41:23:cc:
6d:42:2f:4a:5c:d9:5e:5d:b0:77:6e:0b:9e:b6:f6:
03:b9:5a:8f:6f:0b:99:62:19:a0:b0:85:a0:4f:b2:
74:83:9b:af:5b:ce:75:7c:6f:47:3e:6e:18:5b:b2:
38:3c:0d:a5:47:1b:bf:68:cd:3d:fd:81:c1:1f:52:
d8:ef:88:97:8f:c3:34:58:21:17:d9:51:aa:fc:42:
8a:74:1a:40:af:23:5b:d1:f4:d8:99:af:db:ac:32:
4f:f3:ae:55:94:e9:af:01:09:6f:70:c5:8f:6a:bc:
c5:0e:27:02:7d:9e:18:11:eb:a5:34:c1:eb:a0:06:
18:15:08:f8:59:7d:c7:c1:11:60:aa:59:44:95:9b:
ee:da:f1:4a:83:d3:6e:88:38:2c:9f:66:1c:4c:92:
a1:5c:bd:80:f6:11:55:61:24:19:5c:9a:57:40:16:
73:57:90:a2:ea:66:4a:e0:37:ed:e0:6b:0c:8e:86:
13:c8:e7:3a:5e:ad:31:7c:f1:a9:c0:18:47:71:64:
5e:6d:e1:e5:2d:19:85:cf:3c:e7:5e:9b:64:3c:7e:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DA:0A:92:1D:10:C5:7F:E7:EE:62:85:F5:38:69:86:FD:D0:CD:6A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-9oKkh0QxX_n7mKF9Thphv3QzWo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.192.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:ab:f1:1f:4b:1b:49:08:a7:c5:a1:2f:86:64:a9:ed:91:ad:
d0:1e:b3:f6:10:7c:67:c2:a5:95:63:c8:30:fd:46:d8:5e:9f:
de:aa:65:73:db:65:27:9c:27:36:fe:c4:d4:6c:1d:3d:8c:32:
3d:ae:a8:19:d7:63:c1:73:ec:cf:de:df:23:17:5b:96:44:22:
41:4c:ca:1e:5d:83:e2:29:54:6a:27:58:30:be:cd:27:be:06:
28:7e:1b:49:27:03:7d:27:75:6c:85:25:ae:de:6c:15:09:eb:
d4:bb:4d:57:42:cc:11:2c:54:af:67:d6:06:77:39:c8:2d:ef:
f5:b1:6f:e8:5b:51:76:fa:bd:25:d8:34:d8:bc:78:90:58:07:
70:5c:36:59:e2:6e:80:74:16:14:d5:cc:97:5d:64:fe:63:6d:
24:50:71:29:5a:d1:51:47:be:b0:5d:19:11:91:86:e5:0c:7d:
bd:39:e2:5d:43:4c:45:b3:96:c0:8d:77:c9:d6:d8:19:6e:2d:
25:8a:8c:72:c5:f6:a9:a2:c6:0c:2f:1f:2a:12:a5:ad:e7:42:
58:72:85:a1:81:35:e2:ac:58:10:b5:b4:da:9c:0a:c7:b7:c1:
86:cb:e5:0e:02:ff:de:a0:ad:7a:b4:fb:d3:b4:da:fc:a3:f3:
58:e5:e2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:51:50 2025 by rpki-client