Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5F0kmYM6ckRBwS6wxQYN1Xrkx3U.roa
File: 5F0kmYM6ckRBwS6wxQYN1Xrkx3U.roa (raw, json)
Hash identifier: 9vhtcbp4HsSfbzjadzif4+JM97jebZOlZV3H+ZRfI3g=
Subject key identifier: E4:5D:24:99:83:3A:72:44:41:C1:2E:B0:C5:06:0D:D5:7A:E4:C7:75
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5F0kmYM6ckRBwS6wxQYN1Xrkx3U.roa
Signing time: Thu 15 Sep 2022 02:36:12 +0000
ROA not before: Thu 15 Sep 2022 02:36:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E45D2499833A724441C12EB0C5060DD57AE4C775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:90:12:aa:7c:9e:04:79:8e:47:b4:30:27:
b5:61:56:5b:0b:1f:e0:1a:f8:0d:f6:60:78:df:0f:
8a:23:ca:b8:d6:48:44:d5:4f:e3:4c:f9:49:1b:f3:
60:29:72:9e:8b:62:0f:56:79:0c:bf:68:e8:32:49:
ad:47:63:07:a9:3b:e6:46:b0:e3:4c:7e:a6:8d:15:
51:28:17:72:97:19:35:f4:bf:02:cd:27:8e:20:61:
df:15:2d:7d:35:b9:da:0d:78:87:42:14:15:91:e6:
30:a3:88:9d:af:11:b2:ad:ac:56:06:5b:72:41:df:
f5:48:57:13:8b:26:26:37:d0:97:d9:f5:4a:40:5b:
74:bd:84:de:69:e1:c1:be:1c:8f:26:24:18:43:02:
13:15:03:b6:10:c3:e2:e5:41:cc:57:1d:74:41:55:
08:ba:4a:e6:a5:f9:87:4b:d6:8d:11:45:bd:ed:9b:
81:da:c0:11:8d:80:31:6b:0f:7c:b6:92:ad:ff:32:
b4:5f:88:d7:b3:71:e8:9c:be:82:8b:12:95:c5:23:
03:a2:2d:a4:bd:ef:96:dd:57:10:6f:cf:89:c6:ae:
c4:ad:8c:a8:d5:c8:88:12:b0:7d:99:8f:03:8d:45:
c9:c6:2d:b3:0e:a1:e5:e9:f8:68:95:aa:0e:61:0f:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5D:24:99:83:3A:72:44:41:C1:2E:B0:C5:06:0D:D5:7A:E4:C7:75
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/5F0kmYM6ckRBwS6wxQYN1Xrkx3U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.188.0/22
Signature Algorithm: sha256WithRSAEncryption
79:32:52:91:7d:8d:f2:14:89:4b:94:e1:20:f6:24:7e:be:b8:
f7:ed:ad:e3:4a:68:8e:8f:fd:9e:37:b2:12:73:84:1c:45:94:
76:d8:c2:a9:65:fc:66:e7:a1:10:4a:80:0d:6d:95:13:58:4f:
6b:15:be:0d:a6:c0:52:4a:9a:aa:52:e4:b1:0f:a9:ca:1c:2b:
6c:b9:cd:b8:5c:77:22:07:dc:10:7f:3a:96:6c:6b:f0:93:59:
e4:83:ed:51:e2:23:2c:be:f4:d5:98:60:3f:a6:6c:78:63:1a:
cd:1b:a2:3f:de:ad:20:a7:fb:8f:ec:78:66:eb:21:3f:0d:e5:
a4:48:c0:98:c6:da:cd:c5:d8:88:f2:03:26:ec:42:a5:cf:b3:
ec:c6:5a:67:c2:41:06:ea:91:6c:70:a2:dd:1a:d5:56:9f:03:
f9:83:d0:c4:a8:97:d1:15:66:11:f3:4c:76:a4:db:b5:8d:b6:
52:99:88:f4:52:b8:e5:99:6c:93:7a:a7:f4:b2:61:26:95:c0:
42:6c:11:f5:a7:9b:b2:2b:5b:36:8a:5b:43:a0:59:74:1c:32:
89:66:7f:2e:ad:d9:98:7c:75:47:ca:60:6f:cb:b7:fb:71:89:
50:84:83:e5:da:0d:45:91:ff:e7:17:de:55:db:0e:c9:d6:ea:
d5:4c:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org