Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/83QnToaojCPj3MMiWdpFv9_MjSQ.roa
File: 83QnToaojCPj3MMiWdpFv9_MjSQ.roa (raw, json)
Hash identifier: vufN9AkRiCivvIT6IXgg5l/5L35uAmluqR4Uy6jF3zQ=
Subject key identifier: F3:74:27:4E:86:A8:8C:23:E3:DC:C3:22:59:DA:45:BF:DF:CC:8D:24
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 180E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/83QnToaojCPj3MMiWdpFv9_MjSQ.roa
Signing time: Sat 22 Oct 2022 05:49:01 +0000
ROA not before: Sat 22 Oct 2022 05:49:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 211.76.46.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6158 (0x180e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:49:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F374274E86A88C23E3DCC32259DA45BFDFCC8D24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d6:12:c6:c1:24:e4:e2:c7:3f:74:57:39:d0:
28:d5:d4:8d:ed:55:9d:1c:67:c6:d9:d6:32:e4:b7:
ea:9f:08:a4:35:0e:a3:1b:9f:6e:0a:1a:b7:72:f7:
6e:db:66:11:56:be:e9:14:8b:fb:5e:94:35:16:1b:
4e:80:62:9c:8a:27:db:3b:03:75:19:3e:25:1c:4d:
9f:03:f7:59:83:04:50:f6:2a:75:82:de:ce:0c:f9:
b0:fd:8c:8b:93:19:e3:f9:af:e0:1b:87:b2:af:e4:
bb:64:bc:b7:56:0f:90:0f:81:7a:2c:bf:58:7e:ce:
cf:cb:54:1d:22:13:65:50:25:99:f0:86:ab:ef:dc:
aa:ab:d9:74:3b:eb:59:ae:d3:3d:d0:c4:3b:67:e1:
ca:5a:63:13:c6:78:9f:73:d6:35:68:45:47:2b:ae:
a1:dd:ff:65:f7:a6:06:ae:66:a1:1c:bb:ce:23:c5:
4c:fb:f3:69:51:bb:83:e2:ad:01:7e:9d:a7:d5:e2:
10:12:0e:7e:a2:73:bc:be:14:5f:43:c9:76:eb:cb:
25:cc:b9:74:3f:c4:fe:96:ae:33:4a:db:88:ab:ca:
ab:ee:a1:3b:d2:85:19:bc:f3:83:cf:9e:0a:e7:83:
d3:40:55:34:4e:d8:f5:45:77:0a:8c:ac:bc:c6:f7:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:74:27:4E:86:A8:8C:23:E3:DC:C3:22:59:DA:45:BF:DF:CC:8D:24
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/83QnToaojCPj3MMiWdpFv9_MjSQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.46.0/23
Signature Algorithm: sha256WithRSAEncryption
53:db:67:9c:aa:4e:4f:99:fe:34:13:00:b1:d5:e4:32:4f:4a:
99:3a:0a:56:1d:67:4b:84:9d:18:78:68:53:61:a5:2d:5a:60:
c6:cd:e4:2f:c2:fa:0b:6b:d0:53:30:12:b7:60:23:8f:57:f2:
fa:59:43:27:b3:eb:9b:e5:a4:3c:29:58:a2:56:2a:df:db:e7:
c8:ec:e4:a2:12:6a:cb:f7:46:60:df:7a:68:3b:23:c6:e4:b1:
23:d2:d5:f6:ca:4c:50:f4:0a:0e:75:00:2a:12:b9:d9:9f:24:
da:b2:d2:08:f6:fc:d1:2b:00:2c:fb:11:ec:40:c3:dc:09:79:
9d:39:e8:8b:71:6a:9f:f6:1d:e9:90:3f:00:a1:33:09:ac:1d:
e3:93:10:59:4c:63:22:ba:8c:d5:fd:2e:6c:f6:6e:81:23:62:
40:c4:18:1c:72:94:0d:75:17:af:d8:a7:26:b2:0d:65:16:ba:
0f:5c:7a:0c:32:bd:a0:40:c5:72:c4:a5:9d:9d:c2:07:80:e8:
ec:94:fd:77:69:c2:ac:50:32:81:45:68:7b:ef:6b:93:0a:03:
e1:85:d6:4a:e9:d5:73:b2:4f:b9:91:62:51:9d:a4:e0:00:7a:
6f:a1:a8:ad:07:13:10:30:35:b2:c1:8a:da:be:56:e8:14:f8:
21:af:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org