Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8eP9GfbwIiMib2795Vqr2vo0aA4.roa
File: 8eP9GfbwIiMib2795Vqr2vo0aA4.roa (raw, json)
Hash identifier: cdzJji9lWL3UWNjCq9KeRJstQOCof4BDrMQMzLAc0eI=
Subject key identifier: F1:E3:FD:19:F6:F0:22:23:22:6F:6E:FD:E5:5A:AB:DA:FA:34:68:0E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8eP9GfbwIiMib2795Vqr2vo0aA4.roa
Signing time: Thu 15 Sep 2022 02:36:36 +0000
ROA not before: Thu 15 Sep 2022 02:36:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 103.225.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F1E3FD19F6F02223226F6EFDE55AABDAFA34680E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:fb:06:b2:e7:4d:0e:6d:a4:4a:73:cb:26:
74:8e:9d:42:0b:86:cd:c3:a5:1f:17:2a:b1:6f:40:
f7:f2:c5:ab:02:5a:4a:d2:96:7a:ab:7b:ca:4f:2d:
17:b5:c0:76:66:9d:d9:82:09:4f:33:ae:78:86:6a:
64:bc:73:2d:6f:be:c3:a1:88:cb:ba:e8:57:22:62:
d1:a7:76:13:5e:c3:5b:b8:e0:48:78:6c:4b:17:57:
a4:2f:43:62:f0:1b:c0:ec:64:60:f2:64:31:d5:63:
2a:fc:22:9d:d2:13:c9:7c:51:33:8f:90:17:95:31:
6b:e5:d3:36:d8:25:94:78:ce:c5:44:0b:2e:73:af:
26:f0:76:0c:1f:bb:a2:68:50:f9:2e:ef:4d:76:cd:
fa:25:ea:37:fb:8d:6d:9c:40:f4:b2:6d:0d:2a:1e:
a1:6f:13:47:9a:ad:c1:eb:3b:3d:fe:91:a7:fd:55:
34:ab:86:32:8d:ce:5a:e1:fb:a3:ad:8e:37:fc:f2:
55:43:95:44:37:ab:86:05:d2:a3:e0:0c:c3:6f:72:
54:f8:e4:03:1a:59:e3:e9:3b:f2:98:34:c4:f6:7c:
b0:93:60:97:0b:dd:65:81:3b:70:e8:67:6c:e9:f8:
fd:b6:39:f0:52:8e:99:ab:36:e8:71:e6:40:50:80:
bc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E3:FD:19:F6:F0:22:23:22:6F:6E:FD:E5:5A:AB:DA:FA:34:68:0E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8eP9GfbwIiMib2795Vqr2vo0aA4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.0.0/24
Signature Algorithm: sha256WithRSAEncryption
95:52:68:61:5d:fb:c8:b7:9b:1b:1a:0d:3e:28:41:e5:0e:62:
c5:75:ad:96:f7:12:19:76:a9:1e:01:2e:a4:5a:1c:18:6c:22:
a0:44:c7:a6:f5:49:38:16:c6:f6:16:3c:24:0c:1b:5d:38:0b:
7b:8e:1c:f3:34:14:29:40:9b:7a:74:fa:bc:b7:8c:90:49:95:
ae:0b:4d:a0:30:b7:37:ea:1a:09:d8:e1:7c:e0:d3:88:3a:18:
b1:80:0d:9d:94:6d:27:d3:98:8c:96:bd:92:31:34:90:c0:94:
4f:6f:c2:8d:46:22:22:88:98:fc:7c:ae:c4:6b:3b:7f:ec:91:
29:23:5f:1f:f5:88:88:6c:16:24:c8:72:d3:7a:94:3c:37:ef:
24:80:ce:99:6c:b1:dc:86:31:47:ce:05:dd:d6:9a:e3:1b:bf:
16:bd:45:dc:ee:09:a7:6b:9a:94:3f:61:99:45:5d:ec:de:78:
8a:3c:b7:c1:c9:fb:52:2e:5a:95:fb:11:89:10:ff:60:bb:7a:
e2:f5:f9:5e:14:3e:97:91:b7:76:e0:8d:7c:f1:75:4c:04:00:
25:57:45:d6:05:96:6d:a4:58:dd:ff:2f:dc:d2:7f:6e:1d:c8:
26:21:0c:09:20:8b:e2:c3:63:62:f0:10:ac:82:fc:c0:b1:dd:
90:69:be:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org