Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B-XxGPkNqb2XZQzcdB24sYOv6Cg.roa
File: B-XxGPkNqb2XZQzcdB24sYOv6Cg.roa (raw, json)
Hash identifier: Iwx1rZF7pbE1THSPR4EDC/OAKt6DVgR5FwcU3FeZF+w=
Subject key identifier: 07:E5:F1:18:F9:0D:A9:BD:97:65:0C:DC:74:1D:B8:B1:83:AF:E8:28
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1AE8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B-XxGPkNqb2XZQzcdB24sYOv6Cg.roa
Signing time: Thu 22 Dec 2022 10:18:43 +0000
ROA not before: Thu 22 Dec 2022 10:18:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6888 (0x1ae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Dec 22 10:18:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=07E5F118F90DA9BD97650CDC741DB8B183AFE828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:e8:87:4f:f6:4f:c3:a1:be:fb:21:be:75:
6a:48:0e:74:44:51:82:2c:c8:37:5a:ef:26:c0:3f:
c3:00:21:71:8a:32:bf:cf:8d:bd:d6:81:b5:cb:1e:
8b:be:72:74:51:a5:35:ce:47:5d:9a:18:e0:2b:29:
9d:29:aa:ce:fd:f8:6f:0d:23:10:b0:7e:68:26:f2:
f9:2e:7f:f3:a9:18:70:62:1d:6c:c4:5e:dc:7e:f4:
b4:2c:25:a6:c7:7f:14:87:f3:1e:3e:07:4d:58:0b:
ed:22:6c:da:d3:84:a5:24:d6:da:c9:9b:91:85:bd:
56:51:7a:4a:f7:f1:d4:6f:3e:e4:07:02:f6:aa:06:
d5:4e:d3:3b:fa:d3:17:6e:55:5d:22:a1:6f:72:92:
35:6c:df:3f:86:3d:d2:60:53:08:7d:4d:38:af:aa:
a5:25:db:56:9d:e3:d0:39:27:73:2a:ab:40:7b:12:
07:3c:6d:ab:b5:f2:ac:5b:40:8c:fd:7a:e9:a7:09:
08:f9:08:5f:5e:16:67:2e:30:67:21:4c:0b:a2:21:
28:19:45:3f:99:16:44:c0:86:6f:ee:3d:86:d7:ca:
48:1e:8c:ff:bf:bf:aa:3b:d2:59:26:0d:f4:61:67:
ec:6e:c0:ca:37:f1:b7:42:14:29:53:c3:05:4b:86:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E5:F1:18:F9:0D:A9:BD:97:65:0C:DC:74:1D:B8:B1:83:AF:E8:28
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B-XxGPkNqb2XZQzcdB24sYOv6Cg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.165.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e4:f9:17:82:8b:f3:7d:99:e9:78:53:0d:62:0f:1f:15:03:
6e:ff:82:c0:c7:93:7f:9e:55:1d:84:af:a9:19:5d:6d:e3:b0:
ff:e6:f3:fd:af:39:ac:01:14:0e:a7:27:69:ce:c2:b6:aa:f0:
43:a5:db:fa:45:d3:9e:8f:7c:a0:45:d1:77:48:6e:75:5a:a0:
ee:16:f2:bf:c7:bd:48:32:46:4b:93:b7:b9:12:e7:94:39:59:
81:4f:16:ae:e0:79:d1:58:88:02:1b:61:cf:b0:0c:47:44:fd:
60:a1:f4:c9:a9:cb:ff:76:fe:10:cd:e3:91:92:07:b1:8e:56:
a1:b6:68:a8:26:a0:8f:13:ce:68:ce:97:c1:7c:da:0a:55:28:
a9:f5:fd:f5:85:8a:18:44:b4:97:45:eb:4a:ad:86:ff:a6:37:
7e:21:d8:f6:2b:6b:bb:62:f5:1f:6f:97:97:c9:67:aa:46:8f:
e5:ff:59:33:3a:7f:b4:63:7d:91:cd:e8:0b:d0:8d:69:b2:5d:
60:2b:f6:4c:60:f7:82:61:69:fc:c6:20:f5:8f:43:cc:95:a5:
77:e5:1e:38:06:94:db:93:fa:a5:65:37:93:b2:64:3f:17:e2:
10:09:c6:f9:e1:92:6c:a6:f0:f3:b3:3a:9c:69:5e:83:18:e2:
b4:1f:4e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org