Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-znCIP-9J3tbX-TBlhDLuPrngMk.roa
File: -znCIP-9J3tbX-TBlhDLuPrngMk.roa (raw, json)
Hash identifier: 7721JxiH2L6LI/Wh3JL1vXRX4Ty4UJiv3XPhvM1XZ5o=
Subject key identifier: FB:39:C2:20:FF:BD:27:7B:5B:5F:E4:C1:96:10:CB:B8:FA:E7:80:C9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1988
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-znCIP-9J3tbX-TBlhDLuPrngMk.roa
Signing time: Sat 22 Oct 2022 06:06:39 +0000
ROA not before: Sat 22 Oct 2022 06:06:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 103.225.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6536 (0x1988)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FB39C220FFBD277B5B5FE4C19610CBB8FAE780C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:c5:4d:60:92:68:cf:da:4c:c5:90:ae:67:
7a:08:a3:90:53:19:2f:14:49:48:27:e3:b8:a4:19:
e2:60:74:ee:69:09:31:27:11:11:5f:7b:5d:fb:25:
34:88:79:60:81:3c:35:04:82:d2:bd:48:ad:3c:55:
37:99:07:94:1e:8e:fb:8b:cb:56:7c:89:9f:9e:f7:
4f:9d:8d:8d:33:45:f2:32:21:34:e0:5d:bb:06:91:
21:e3:a8:f1:e8:0b:5c:d0:ba:f6:cf:a0:86:d9:8f:
85:9a:7e:f1:22:71:19:73:0c:e6:28:17:de:8e:31:
39:b7:ea:10:53:e3:01:61:03:e0:25:92:e3:ed:94:
73:ac:62:06:6b:9e:b5:b7:3e:56:b9:a0:2a:46:39:
04:52:17:76:31:b0:00:2e:0c:d2:e7:87:82:6d:15:
8d:c8:59:fa:04:3a:a3:c8:18:92:96:8c:24:16:a5:
d4:ed:b0:df:72:8f:1b:8b:75:7a:14:f6:1f:09:f9:
e6:5e:c3:35:68:73:d9:56:58:4e:51:c2:71:bd:0c:
e5:86:a6:e6:3a:2a:60:f4:7c:8a:98:df:83:c9:af:
24:fe:2c:d0:bb:5b:b5:87:47:07:de:c0:e2:19:32:
36:58:13:d2:a7:ab:0a:c4:42:eb:4d:d1:6f:7b:62:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:39:C2:20:FF:BD:27:7B:5B:5F:E4:C1:96:10:CB:B8:FA:E7:80:C9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-znCIP-9J3tbX-TBlhDLuPrngMk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:70:f3:15:e1:fe:07:99:56:fa:82:85:a4:85:d8:c7:56:3c:
ab:bf:1a:b9:d5:6a:18:1a:9a:ec:66:5f:9a:f6:af:da:45:36:
94:0f:07:c2:e7:71:cd:53:b4:17:dc:10:c2:2c:5c:bd:59:23:
ff:ef:af:64:a6:3d:fc:0e:77:50:8b:66:8e:8f:8b:b1:47:d4:
eb:0d:07:b7:42:4d:9f:6c:06:64:38:58:5f:cc:d2:ce:fd:65:
e9:ff:e0:b3:2d:6d:4d:3a:c1:a9:89:38:35:cf:b6:ee:e4:28:
3f:6e:b3:f1:da:1c:1f:a0:c4:c9:51:db:54:60:36:e9:96:29:
29:27:5c:75:92:2c:cb:d3:06:55:5c:b2:89:db:75:07:fe:a1:
6f:ea:a4:7f:fc:af:a5:2b:01:43:f6:46:58:b7:eb:6d:47:c4:
4c:7e:d3:0d:44:9c:0b:07:f7:b5:03:5c:80:b7:dd:b3:6d:c0:
03:51:83:dd:80:e0:4c:0e:69:f7:25:bd:4e:03:be:38:9e:84:
e3:f0:08:f7:9d:db:1c:64:f9:b7:88:0d:39:28:2d:3f:60:7c:
c9:22:17:3b:11:6e:bd:a4:58:93:77:ae:a2:19:56:7f:89:a4:
9d:ac:f0:95:ea:00:db:aa:dd:5a:a8:e5:be:e4:ac:d1:23:5d:
96:0e:c9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org