Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/00-pWiJ8tuuT7YrSAO64EeciLwk.roa
File: 00-pWiJ8tuuT7YrSAO64EeciLwk.roa (raw, json)
Hash identifier: xioFddqx5ZhT8WhUsXJ9y/yxkO6NyNaxhxCmimYtycU=
Subject key identifier: D3:4F:A9:5A:22:7C:B6:EB:93:ED:8A:D2:00:EE:B8:11:E7:22:2F:09
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F29
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/00-pWiJ8tuuT7YrSAO64EeciLwk.roa
Signing time: Sun 07 Feb 2021 12:33:06 +0000
ROA not before: Sun 07 Feb 2021 12:33:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 114.198.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3881 (0xf29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D34FA95A227CB6EB93ED8AD200EEB811E7222F09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:30:34:55:43:ef:f2:68:35:1a:51:34:79:
4c:f5:f1:0a:3c:3a:0a:11:ec:d9:79:f6:c3:56:e4:
df:83:1a:d2:54:f9:f9:c2:5e:c9:91:bb:79:a6:a8:
c3:0a:50:3b:b8:6a:71:82:95:96:d3:9d:a8:3e:4c:
68:46:bf:3b:c8:35:ba:b8:f0:f0:e5:00:5e:b1:c1:
d8:44:1e:95:62:6e:de:b4:17:f6:6b:da:ef:26:54:
fd:b8:4a:e8:45:e7:20:83:73:14:56:d4:00:b2:9d:
65:30:47:2a:0f:a7:c2:1d:6d:e5:d7:a2:76:de:10:
d2:8a:8f:83:41:cc:e4:d9:ed:b9:d8:e5:b8:07:d2:
c6:94:0d:58:e9:84:29:90:3d:38:65:d1:dc:74:10:
a0:21:dc:a6:98:c0:92:9d:fb:63:29:a6:2f:c6:22:
34:dc:03:5b:7b:f9:17:7e:22:a4:1e:71:fb:2b:3f:
00:c0:e6:c5:9d:d3:af:12:f8:a4:24:4a:bf:50:79:
00:7b:27:cf:f7:93:04:87:75:9c:2a:ec:e6:c3:7e:
12:c1:68:ca:ee:81:3a:3a:93:05:00:e7:9f:d2:81:
a4:6b:84:fa:36:23:a8:62:a6:af:af:67:68:fa:13:
c9:f5:98:77:98:a5:8e:13:d7:30:85:13:e2:90:ce:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4F:A9:5A:22:7C:B6:EB:93:ED:8A:D2:00:EE:B8:11:E7:22:2F:09
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/00-pWiJ8tuuT7YrSAO64EeciLwk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.188.0/22
Signature Algorithm: sha256WithRSAEncryption
83:46:56:55:e1:0c:d1:43:1e:a2:eb:3b:d0:aa:7e:30:0b:c9:
54:94:1b:9c:0f:00:12:91:ba:dd:d1:4f:da:30:51:c6:a5:2f:
a6:d5:48:87:0d:00:4e:c6:43:51:7a:9e:21:1c:32:a3:cb:a6:
a5:73:aa:3b:33:6b:c4:f6:8e:70:68:05:3f:f4:4a:79:10:a4:
25:53:ec:9a:a5:28:8a:f5:30:11:00:6f:dd:a8:15:8e:46:d7:
3d:7e:87:52:8a:41:06:dc:2f:d9:9e:44:a9:10:0f:48:62:ee:
0c:f6:0b:fb:c8:81:a7:dd:08:fe:fe:66:8a:61:02:23:42:43:
df:41:8f:ec:2a:e8:e3:fd:2e:49:4b:7c:71:00:3f:be:6e:43:
68:08:46:ab:f4:4f:5b:6e:79:3a:43:c1:08:bf:10:bf:9b:b8:
ad:16:e5:b7:59:21:42:ba:5c:40:3f:37:34:f4:27:80:0c:b6:
2d:73:db:9f:84:32:f8:a5:e1:80:98:12:04:26:91:e3:21:10:
39:ab:72:aa:ea:2a:15:94:e9:42:8b:fd:cb:10:0c:c6:99:9c:
c9:bb:8d:13:b7:7f:d3:8b:18:66:2b:b8:11:06:16:56:ea:d4:
c8:5f:88:6c:76:f3:3c:45:57:0f:bd:c9:15:64:77:89:13:91:
13:d5:33:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:44 2023 by rpki-client on console-fra.rpki-client.org