Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/01RF4Xte2WsYNvt9KfapOZOUYrA.roa
File: 01RF4Xte2WsYNvt9KfapOZOUYrA.roa (raw, json)
Hash identifier: FoE5d+wnBbJDuxankTgX9O+uZSdkeJu7jwwOkWdgKj0=
Subject key identifier: D3:54:45:E1:7B:5E:D9:6B:18:36:FB:7D:29:F6:A9:39:93:94:62:B0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F1D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/01RF4Xte2WsYNvt9KfapOZOUYrA.roa
Signing time: Sun 07 Feb 2021 12:32:55 +0000
ROA not before: Sun 07 Feb 2021 12:32:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 114.198.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3869 (0xf1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:32:55 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D35445E17B5ED96B1836FB7D29F6A939939462B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:b3:bd:f6:01:24:85:8e:56:ee:a6:a6:a4:
38:96:75:0c:1b:bc:9d:df:50:ee:d8:4c:d3:f6:96:
2c:7b:11:b9:ad:c6:33:75:33:7c:03:c6:9e:f1:93:
7b:d5:f5:ae:69:b5:29:26:00:65:e0:03:25:ab:3a:
92:a8:ef:ac:2f:77:c3:0a:dd:26:e1:ab:40:58:fa:
72:1c:66:f2:3c:e4:2c:a1:12:77:75:75:14:ac:f7:
49:ee:bb:e3:c2:d8:8a:c6:df:3d:73:d2:6d:eb:af:
ce:5d:9a:d8:37:69:8a:bc:c5:6b:a2:74:5b:77:a6:
65:d8:af:32:dd:81:c9:22:c9:3d:2f:6d:67:32:c5:
d9:2a:3d:2a:79:51:7a:32:bb:71:47:0b:1a:4e:4a:
fe:93:cc:ae:5b:0d:f3:72:0f:ae:c7:f0:a9:f3:4f:
1e:79:7e:d0:85:6d:c5:ce:13:51:af:94:ef:b8:7e:
9e:c9:16:fb:7f:13:f4:74:c1:98:c4:69:8a:59:b1:
2e:80:66:95:ce:e7:48:48:91:73:6c:ab:1c:67:44:
8d:5b:1e:dc:e6:41:71:af:70:80:05:2b:fd:08:52:
81:28:cb:d7:e1:20:97:9c:cc:dd:e1:a6:70:22:ed:
bc:57:4d:bb:cc:a3:ce:86:82:d1:b7:27:d8:64:9b:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:54:45:E1:7B:5E:D9:6B:18:36:FB:7D:29:F6:A9:39:93:94:62:B0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/01RF4Xte2WsYNvt9KfapOZOUYrA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.168.0/22
Signature Algorithm: sha256WithRSAEncryption
72:54:a1:d3:b1:c3:9d:91:10:9f:eb:2d:5c:35:68:36:c1:c1:
08:68:a6:26:0c:cf:5d:5a:4b:35:de:a7:4e:67:f6:5f:42:78:
16:7d:f3:1b:26:fd:2d:82:86:f9:a8:3f:17:7e:3d:7d:84:c9:
74:21:6c:8c:28:0e:3d:d4:bc:10:e0:9b:25:cc:ad:76:5c:b8:
69:8d:d2:02:f6:1b:ea:7b:08:9a:d1:37:33:eb:75:fe:bf:c6:
fd:67:e9:04:09:f3:c8:67:e4:68:aa:e1:74:22:07:72:21:eb:
f0:45:35:87:d0:55:e8:79:36:ee:f2:6d:1c:07:cd:70:83:f2:
74:c3:e2:57:f8:04:b0:21:39:aa:58:48:77:4e:0f:0c:a7:06:
ae:f6:e8:df:5d:4e:a9:73:9d:66:b9:e3:1d:e9:de:da:d4:a1:
af:90:90:00:2a:c5:8d:29:9a:71:3d:ac:26:d0:e6:65:db:50:
73:73:5b:26:f8:db:78:bf:b3:af:69:79:84:db:3d:6e:56:6a:
96:28:78:bc:ca:ae:a8:d2:72:76:f5:0b:fc:3b:fe:03:ea:98:
12:8b:47:04:13:46:10:bb:83:3a:2b:6f:7a:57:4f:1c:2b:a7:
33:93:5b:ce:35:d4:32:69:39:1c:71:fd:e3:99:71:7a:e4:61:
a8:10:d0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org