Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2QNHDmb1XijCGXFdpGvbny4Cq04.roa
File: 2QNHDmb1XijCGXFdpGvbny4Cq04.roa (raw, json)
Hash identifier: BjuzVAm7ruDFbA/17chfJ1tYPv31cSMcZEkdTZYI3EU=
Subject key identifier: D9:03:47:0E:66:F5:5E:28:C2:19:71:5D:A4:6B:DB:9F:2E:02:AB:4E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0D25
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2QNHDmb1XijCGXFdpGvbny4Cq04.roa
Signing time: Thu 14 Jan 2021 07:16:06 +0000
ROA not before: Thu 14 Jan 2021 07:16:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 115.165.218.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3365 (0xd25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 14 07:16:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D903470E66F55E28C219715DA46BDB9F2E02AB4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:95:d9:a1:32:4c:c5:26:20:d2:5e:a2:d8:fd:
25:b0:af:98:f9:13:7b:b4:f5:94:d8:bb:f0:91:dd:
6f:49:4f:cc:92:8b:da:18:da:ff:a2:4f:b0:7c:35:
91:17:07:86:35:ae:fb:35:ad:b4:47:2b:c5:45:92:
e8:36:89:ca:dd:3a:4b:30:49:56:3a:91:97:2f:18:
ed:f9:71:df:77:44:7b:b6:47:7e:c1:ef:9d:e2:21:
37:92:74:c6:95:63:d6:19:cc:c2:bc:25:0a:be:23:
90:74:5b:1e:18:e0:52:7d:d4:1f:4e:6f:11:72:7d:
35:11:04:f2:a4:80:6a:30:d4:d5:13:ff:86:92:32:
9f:07:fd:02:fc:90:30:66:93:7f:36:63:88:0a:39:
3b:c8:22:6f:d2:2f:1b:64:09:11:79:e3:25:e2:1d:
c1:54:ef:f8:f8:d6:02:46:7f:a6:84:9d:cc:43:fa:
50:f1:87:10:84:d6:b3:3a:32:13:de:a4:06:cf:01:
8d:8a:27:97:31:4f:63:39:6e:2a:b2:30:74:fa:31:
30:0c:0a:3e:b1:30:ee:9c:3c:23:98:6a:b5:df:d0:
bc:a1:2f:f1:11:ca:b7:21:bf:b0:f5:37:c8:a8:e1:
24:cf:58:93:85:52:0a:45:0c:7b:0c:4b:17:91:09:
49:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:03:47:0E:66:F5:5E:28:C2:19:71:5D:A4:6B:DB:9F:2E:02:AB:4E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2QNHDmb1XijCGXFdpGvbny4Cq04.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.218.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:2c:7f:71:3a:42:12:3a:2b:c6:77:60:d8:65:26:01:f4:99:
20:89:57:f6:1e:c9:4e:79:c7:da:72:d5:90:ae:e0:7c:48:b5:
ce:24:24:93:95:52:f0:16:33:41:f8:03:65:2b:ac:a1:79:bf:
a1:5f:cb:9d:7b:40:2d:41:cf:ea:c4:f7:ae:5c:f7:f7:3c:ea:
7d:16:0f:7c:09:7f:71:ee:bd:dd:c1:51:71:de:ee:87:ae:10:
9e:12:e2:c6:20:04:dd:f2:70:b9:85:ce:a8:36:aa:a2:d3:a5:
c9:ce:00:0d:7a:f8:d3:5e:3f:21:c0:88:f0:ce:70:92:a3:78:
75:b5:02:94:cc:d1:1b:4c:6a:59:f5:50:1f:14:66:0e:46:a5:
7d:05:83:8a:25:39:4f:dc:81:01:b6:cd:b4:2f:50:f7:fe:35:
33:dc:02:67:a8:d5:d0:88:8f:07:e4:32:db:c2:33:1c:94:96:
b9:25:c9:91:95:ef:85:e5:8d:f5:d5:de:93:ce:ff:ed:2c:22:
d5:a1:c4:10:a2:0a:f7:fa:6c:97:aa:df:90:a6:8a:62:94:f8:
fd:01:cd:50:84:af:83:c2:93:6b:22:f0:eb:28:59:b3:4f:f0:
49:f4:56:44:95:ed:9c:31:a4:52:15:e4:d6:79:08:4a:8b:30:
de:c2:7c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:56:25 2025 by rpki-client