Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0dxWaws4DGjeOoxFItsEEh6tEMg.roa
File: 0dxWaws4DGjeOoxFItsEEh6tEMg.roa (raw, json)
Hash identifier: zLY4SjsOm05okoyByqp895i9Jj8B039wU2Ximfcy29w=
Subject key identifier: D1:DC:56:6B:0B:38:0C:68:DE:3A:8C:45:22:DB:04:12:1E:AD:10:C8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F19
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0dxWaws4DGjeOoxFItsEEh6tEMg.roa
Signing time: Sun 07 Feb 2021 12:32:52 +0000
ROA not before: Sun 07 Feb 2021 12:32:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 114.198.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3865 (0xf19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:32:52 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D1DC566B0B380C68DE3A8C4522DB04121EAD10C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:d1:70:36:83:cb:3a:63:40:e0:66:58:29:
65:4f:1c:22:0b:5d:81:1f:ee:6b:23:1d:19:81:fe:
4b:01:38:4a:72:31:71:6a:34:db:33:57:86:39:3c:
92:4f:55:8c:86:a5:f3:da:f9:bf:b1:45:df:0b:e4:
0a:38:68:86:a1:5f:f9:fc:77:87:ab:e0:1e:ca:90:
65:44:c3:8f:17:03:dc:35:1f:b6:d5:79:c8:cf:50:
01:2f:7e:b4:8e:63:64:30:19:73:9f:10:0c:a7:8d:
51:66:65:99:d7:f9:da:7d:21:0c:f3:e3:97:a8:fa:
56:b1:63:5c:69:92:4d:41:c6:ff:48:95:75:e7:e6:
93:14:4a:38:69:40:7d:cb:94:7e:32:e7:58:b3:3f:
63:30:e8:03:f4:f4:d7:e9:60:90:9d:48:d7:68:05:
a3:8b:bb:7b:0a:ce:17:61:0b:c6:7b:e3:e5:e1:d9:
4b:91:1d:ca:10:ee:1d:e2:5a:a6:e2:24:61:db:f4:
61:80:27:24:39:95:35:9e:1a:d9:47:6c:a1:d1:aa:
89:0f:70:24:bf:2e:f1:aa:45:17:e4:eb:fd:86:cf:
3c:3e:c3:13:bb:08:76:bf:32:b9:44:e2:6a:c2:a3:
d7:7a:35:d9:ec:d2:53:d7:bf:64:41:e9:d5:4a:cf:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DC:56:6B:0B:38:0C:68:DE:3A:8C:45:22:DB:04:12:1E:AD:10:C8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0dxWaws4DGjeOoxFItsEEh6tEMg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.163.0/24
Signature Algorithm: sha256WithRSAEncryption
78:89:2d:97:fc:4a:48:f4:ed:4f:53:64:e5:a9:9a:92:43:45:
51:47:b8:3f:0e:53:4b:2d:74:7e:73:17:fa:3b:80:8d:7d:61:
c7:de:9f:d9:9e:c3:0e:19:0f:5a:55:5f:b4:db:89:33:e5:39:
66:eb:b4:ef:5f:22:04:e3:6e:38:df:80:69:2d:a3:ab:77:28:
4a:32:78:14:b0:2d:f2:5b:e7:d1:c9:e1:92:4e:3a:de:09:f4:
79:75:30:1f:21:51:8a:5e:e0:72:25:34:b8:7c:bb:9e:9f:8e:
05:19:e0:9d:de:55:fd:7c:df:e8:be:97:3a:ee:9f:65:fd:d4:
00:86:b9:a0:ee:a1:3c:76:4c:82:41:5a:2a:56:18:92:2f:77:
db:ba:39:19:99:f2:43:dd:da:ed:d4:21:08:69:d5:63:2f:22:
1d:f0:51:7f:b8:64:21:f2:ca:eb:e1:48:44:b1:a5:8c:56:9b:
f0:cd:f3:b4:b7:57:16:50:c0:8b:64:02:3b:55:0b:3f:31:c5:
36:6d:9f:33:2c:54:38:17:00:21:cb:1c:83:e4:fc:8a:08:ac:
dd:86:04:f8:b5:9d:c5:fa:e8:7c:9c:14:79:b8:36:24:1f:0a:
6e:65:89:9b:49:cc:0a:db:16:83:19:03:87:e0:28:e5:dd:20:
45:9d:2d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org