Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/68kCD9L2c5iBIe1BUm3G9CP9BXk.roa
File: 68kCD9L2c5iBIe1BUm3G9CP9BXk.roa (raw, json)
Hash identifier: /1jnNRJec7x5jRo/PMhPvQwFbAsh8u/y/jGEbaWncj4=
Subject key identifier: EB:C9:02:0F:D2:F6:73:98:81:21:ED:41:52:6D:C6:F4:23:FD:05:79
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F2D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/68kCD9L2c5iBIe1BUm3G9CP9BXk.roa
Signing time: Sun 07 Feb 2021 12:33:09 +0000
ROA not before: Sun 07 Feb 2021 12:33:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 115.165.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3885 (0xf2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:09 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EBC9020FD2F673988121ED41526DC6F423FD0579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:e7:99:16:84:76:80:39:25:5d:e7:fb:d8:
0a:e7:1c:7a:49:f5:28:25:19:11:fc:dd:d6:fe:4c:
f5:da:38:96:cb:ae:41:ba:95:16:35:91:0c:85:b5:
5e:85:34:b8:b3:a5:44:47:05:11:7e:95:38:b1:a6:
90:1f:cf:39:7b:41:b3:a9:31:e8:de:43:eb:c3:d7:
23:45:3f:27:21:01:8b:74:e6:e7:c1:51:69:76:04:
77:a1:23:31:d7:33:7b:80:a1:f7:77:40:3a:f5:a4:
9d:be:4f:1a:cf:13:d6:b4:e4:87:1d:68:02:61:d6:
68:9a:05:bf:ec:cd:d3:2b:99:5a:5b:83:71:8d:4c:
17:cc:1f:50:8d:69:d7:f6:e2:44:b1:a9:36:c3:a5:
f4:b0:7b:e7:79:22:b1:79:1f:62:be:bc:c7:99:7c:
35:bc:92:49:e3:fd:46:69:e7:5c:6d:61:bf:d2:3f:
aa:18:3f:29:4e:aa:6f:5f:48:97:80:ca:76:4d:c7:
a9:96:60:45:e1:25:6b:e5:58:eb:e3:38:bc:b3:af:
7f:51:0d:cd:15:28:5d:af:e7:7c:54:27:a9:c5:ac:
57:6d:c8:8b:19:1a:67:2a:62:e0:de:32:70:47:61:
7a:25:08:3a:6a:c5:42:b8:a7:a3:0f:8d:a5:0b:66:
63:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C9:02:0F:D2:F6:73:98:81:21:ED:41:52:6D:C6:F4:23:FD:05:79
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/68kCD9L2c5iBIe1BUm3G9CP9BXk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.200.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:52:bb:6f:e9:52:89:c0:75:76:9d:f8:6c:60:e6:e2:c0:af:
a7:43:00:da:91:fd:c7:78:19:9a:37:cc:6c:d9:99:46:a2:42:
61:0c:8d:ff:15:74:00:c3:2d:3d:a9:d5:bd:ef:50:c5:11:e0:
8d:57:1a:34:b8:01:39:61:05:7a:4a:ef:d7:d1:c1:09:18:35:
4c:c0:2d:54:10:c6:e0:91:d9:c5:98:41:22:a6:b7:a3:29:dd:
32:de:6f:b4:31:4b:3f:1b:53:da:a7:e3:5f:51:de:f6:98:d5:
76:26:6c:0f:0b:7c:f6:a2:10:d7:0b:12:7a:49:86:17:dc:64:
80:e5:ca:15:8c:87:d3:56:3d:94:3c:03:52:fa:16:1e:43:12:
c4:4b:5e:56:a4:69:3a:91:b0:75:4e:03:ac:fd:b6:31:5c:f8:
f3:0e:df:69:b8:2f:36:e3:16:43:b8:93:04:12:ef:81:2a:9c:
8b:c4:5d:e2:ab:93:5c:c0:41:df:21:5a:61:4b:98:e6:ea:54:
2d:e0:ac:e8:21:1d:5b:7d:44:fb:79:7a:d0:42:2f:14:3d:ff:
ba:5b:56:e0:ea:c9:54:9a:ef:58:4f:bf:d8:80:ac:8a:a2:2f:
6c:09:b4:7d:ab:5d:c1:79:13:ee:46:fb:c6:ca:ff:a9:1b:0a:
ad:77:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:41:40 2025 by rpki-client