Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DqRA2Hm15_jrxrhxrQZ9mRsXJZE.roa
File: DqRA2Hm15_jrxrhxrQZ9mRsXJZE.roa (raw, json)
Hash identifier: v+V1QWATwiGvSAIEwYXlIjBSfZOR+HxlCksE8lrBRCE=
Subject key identifier: 0E:A4:40:D8:79:B5:E7:F8:EB:C6:B8:71:AD:06:7D:99:1B:17:25:91
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1974
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DqRA2Hm15_jrxrhxrQZ9mRsXJZE.roa
Signing time: Sat 22 Oct 2022 06:06:33 +0000
ROA not before: Sat 22 Oct 2022 06:06:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 103.225.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6516 (0x1974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0EA440D879B5E7F8EBC6B871AD067D991B172591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:e5:7f:9e:f8:d6:29:ef:a9:54:51:db:5b:
be:24:dd:80:59:e9:b4:5f:ad:8b:1c:d0:5f:99:a3:
9c:45:ee:cf:67:a5:3e:e1:48:5b:a6:4a:51:00:43:
16:f6:d9:48:ab:a3:57:df:17:d3:2a:e7:2d:7b:ba:
f6:68:7b:9b:12:53:ff:10:ca:f0:6b:16:60:48:b9:
e1:d3:b3:9c:e9:f1:e4:22:e8:58:10:fc:27:ff:02:
b5:e6:ee:f6:3c:3c:4c:d4:aa:5c:36:c3:d9:28:58:
d0:45:d6:d5:2c:37:33:e9:2e:90:cf:9e:5d:fb:13:
16:3b:9c:67:f8:35:40:59:4a:4c:45:b0:ea:72:6c:
4c:2a:ea:8a:b8:67:54:71:06:54:ee:d0:5e:80:9c:
bf:ea:e3:4b:8c:1b:61:d2:0d:05:47:8b:c7:d8:1b:
05:68:0e:57:cb:c5:61:1d:e0:b1:0b:fb:f2:4d:82:
0a:8f:e7:bc:02:f5:71:39:dd:45:1e:94:c3:05:69:
0f:f0:30:0c:e4:fd:bd:49:2e:02:fc:81:fc:92:32:
fe:a3:df:00:9e:c9:f5:0a:9c:0b:ed:a3:c7:bd:91:
b1:67:d7:9e:11:cc:0f:51:42:77:34:4c:a3:2e:c6:
8f:80:4e:d5:09:cc:c6:72:ae:20:ef:fc:e4:db:bc:
1f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A4:40:D8:79:B5:E7:F8:EB:C6:B8:71:AD:06:7D:99:1B:17:25:91
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DqRA2Hm15_jrxrhxrQZ9mRsXJZE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.1.0/24
Signature Algorithm: sha256WithRSAEncryption
82:9d:a0:59:14:96:2d:8f:b9:c3:ee:57:f0:bb:ed:53:55:e8:
ed:88:87:8a:c0:ee:8d:33:c9:56:6e:82:74:87:06:a3:e6:6c:
54:76:76:e7:40:ba:cc:59:cb:10:44:07:46:c9:3b:12:c1:dc:
0f:e6:df:ae:fc:45:10:2e:6e:64:8b:4d:84:be:56:45:c4:94:
fb:b5:73:87:ba:1e:41:45:2e:05:bb:ef:f4:79:5b:f4:67:9e:
45:cf:23:ff:c4:88:bf:7b:b2:f9:f7:3e:df:5e:ec:e4:0e:63:
ad:2b:0f:2b:f7:50:cf:8a:3c:98:62:60:19:75:fb:6a:59:17:
b5:e3:55:68:73:54:3c:e0:d8:e3:75:9e:7c:e3:13:ed:38:09:
d6:e4:c4:8c:b6:19:eb:25:9d:17:80:18:fa:5d:3d:04:79:c2:
a9:a9:a1:b5:2c:1b:08:29:49:fa:17:37:c8:d8:87:69:01:5a:
c7:fa:53:77:38:04:da:03:4d:db:57:10:31:01:b9:c3:6c:e3:
91:b9:88:d1:f9:04:e0:f6:47:5c:72:d0:4a:95:a2:b7:23:28:
26:75:9f:0e:47:b4:e3:c3:33:c9:64:1c:58:83:4a:83:40:69:
9f:c9:a8:d9:b1:7c:a9:3f:ad:ce:36:7b:5a:36:cb:5e:cc:a6:
5a:0a:a4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org