Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BM7ApP-XceXTUhmGxJ4DH-NO4es.roa
File: BM7ApP-XceXTUhmGxJ4DH-NO4es.roa (raw, json)
Hash identifier: aZ3YoOix8FFM8/mL5MqCkm7VWgwmkqhB+bV9LQL938Y=
Subject key identifier: 04:CE:C0:A4:FF:97:71:E5:D3:52:19:86:C4:9E:03:1F:E3:4E:E1:EB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 133F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BM7ApP-XceXTUhmGxJ4DH-NO4es.roa
Signing time: Wed 29 Sep 2021 02:55:31 +0000
ROA not before: Wed 29 Sep 2021 02:55:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 114.198.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4927 (0x133f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=04CEC0A4FF9771E5D3521986C49E031FE34EE1EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:3f:c8:2a:df:c4:32:4f:cf:6d:6b:4c:e1:
15:e0:4a:4f:19:9d:68:63:22:f6:13:dd:1f:5b:43:
a2:52:d9:3f:49:e3:04:a6:35:21:27:a7:2d:30:32:
d6:9d:8c:e8:39:df:6f:6f:d8:8e:6f:dd:79:28:e5:
25:df:be:89:b4:33:ad:b9:a6:9a:3d:db:3e:29:4b:
51:f9:23:69:15:56:42:30:42:23:64:02:2e:97:52:
85:45:0d:ea:11:37:5e:82:58:7a:cf:a8:f5:d1:28:
6c:e0:54:d9:17:b6:8d:85:76:52:79:0f:55:03:ca:
39:4e:b4:84:ad:aa:61:72:5a:d3:6d:99:61:04:3f:
c8:1e:60:67:ed:24:7c:c1:26:2d:42:43:76:ed:a9:
36:48:bc:b5:46:33:88:48:c8:7e:82:b9:90:b5:29:
d7:6f:f6:85:32:ca:21:90:37:8f:6a:ad:b9:ef:c5:
1e:79:88:b9:cb:ed:40:ee:85:c6:2c:8c:2e:26:15:
83:80:cc:51:95:aa:6e:34:f1:1f:ed:0c:26:21:99:
41:8b:72:6e:fc:25:48:6c:a7:23:c4:1c:16:11:1a:
6c:84:b3:5a:bd:98:55:d9:02:96:ec:48:f8:48:ec:
46:2a:d5:4f:7f:85:74:10:7c:e8:2e:f0:7e:26:8f:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CE:C0:A4:FF:97:71:E5:D3:52:19:86:C4:9E:03:1F:E3:4E:E1:EB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BM7ApP-XceXTUhmGxJ4DH-NO4es.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.160.0/20
Signature Algorithm: sha256WithRSAEncryption
88:68:0f:d2:de:06:81:87:84:07:28:da:3f:88:77:7e:d7:f9:
b8:9d:31:e7:9f:14:52:c9:cb:87:bb:fa:29:22:d2:20:21:13:
0d:1f:34:f0:68:eb:96:37:d8:2c:ac:7d:05:d6:22:00:33:5b:
9e:a9:cf:be:fe:9b:dc:89:94:90:93:3b:54:4c:af:dd:59:b9:
1e:f3:6f:24:de:78:b3:af:51:24:d4:47:ce:75:ce:fc:7e:8a:
b9:e6:64:51:a7:d7:1a:27:a2:2e:e4:87:72:d4:7f:85:8d:ce:
35:29:fc:77:64:0a:6a:48:87:fe:37:05:2c:59:14:e1:19:7b:
44:7d:d6:18:8a:6c:d9:02:94:c8:26:ef:bc:03:41:8e:05:76:
aa:6a:95:ab:09:f5:6d:50:1d:ca:04:67:57:12:17:90:54:80:
9d:88:33:78:f5:b1:e9:eb:3a:5c:49:f0:5d:94:c8:03:7b:51:
43:ab:56:cf:03:69:d6:e0:ed:5a:05:ca:82:a7:36:80:03:d4:
b0:17:a4:97:43:12:32:da:01:61:3f:80:d7:53:5e:d0:d5:44:
f2:23:04:c0:83:7e:d4:7d:75:68:1d:8b:49:41:78:e2:b2:2a:
5a:ef:c5:d6:7a:95:05:3b:52:28:90:e3:1e:8f:e3:7d:aa:10:
6d:e8:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org