Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Im92TQni-Y4CpbZuW7H0qfluWjs.roa
File: Im92TQni-Y4CpbZuW7H0qfluWjs.roa (raw, json)
Hash identifier: xHSVHDwXY6qBtBAxGMPZC3s7+4UXG0UfkcMz1U4AhvA=
Subject key identifier: 22:6F:76:4D:09:E2:F9:8E:02:A5:B6:6E:5B:B1:F4:A9:F9:6E:5A:3B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Im92TQni-Y4CpbZuW7H0qfluWjs.roa
Signing time: Thu 15 Sep 2022 02:36:41 +0000
ROA not before: Thu 15 Sep 2022 02:36:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 114.198.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=226F764D09E2F98E02A5B66E5BB1F4A9F96E5A3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:b4:13:8c:1e:25:f0:b9:46:f4:0f:00:dd:
92:b7:b5:84:d4:e0:5f:a1:d5:c2:02:be:17:e4:19:
e9:f6:b3:5e:dc:3c:57:d6:96:3c:61:d4:ff:0f:af:
22:c3:34:f1:50:f1:8a:82:e4:8c:9d:55:4e:fb:7a:
2a:9e:a2:1e:96:3f:1b:de:95:f8:83:2f:40:4a:e1:
d8:2f:34:df:c1:64:11:85:0a:15:f8:fe:24:f5:50:
e6:40:7b:c9:db:10:b0:f0:ec:20:28:f6:62:7e:88:
fe:63:22:91:71:7f:35:4d:ce:26:90:c8:b1:1a:dd:
74:e0:91:e8:37:03:65:95:64:ac:eb:17:0f:4d:78:
71:30:d7:13:b3:58:06:c9:41:c3:bd:0a:e6:fa:3f:
9e:00:e6:62:e4:7d:99:1c:95:ce:79:fb:e3:64:d0:
94:f1:cb:ce:c5:13:ba:d7:36:f3:16:2e:58:5f:34:
a8:2c:a0:b2:6b:b6:9e:b1:5d:c3:dc:36:d2:6a:b3:
fa:83:22:56:b3:70:e5:f1:ae:42:74:e5:17:c0:99:
df:3d:42:65:3a:10:8d:73:56:c9:7c:8b:eb:86:42:
12:3b:14:07:11:27:cf:3b:00:86:64:98:a3:80:d4:
a8:40:34:50:a4:44:26:56:08:00:82:03:7e:46:99:
08:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6F:76:4D:09:E2:F9:8E:02:A5:B6:6E:5B:B1:F4:A9:F9:6E:5A:3B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Im92TQni-Y4CpbZuW7H0qfluWjs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.160.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:7b:fc:99:34:57:07:04:72:ec:5f:17:e3:86:5c:dd:93:ac:
b4:c8:1a:36:3b:8e:8e:4e:01:4b:21:16:25:2f:62:2b:53:47:
69:3b:4b:5a:ec:b9:4a:0a:79:6c:57:5a:e0:f5:90:1e:9b:89:
49:e9:c5:89:21:68:3c:91:ef:6b:c9:43:4e:5b:be:a8:95:fa:
af:fd:6b:73:c7:6d:0f:96:d2:c3:0d:dc:5d:47:07:44:37:04:
7d:b5:a2:05:3f:d3:15:8f:68:18:76:af:1f:31:20:9d:d0:3b:
00:e7:4b:2b:fd:56:4f:d7:41:75:b8:7e:40:c0:fb:8f:2c:d1:
b1:a9:dc:b5:00:c1:39:b1:02:ec:95:ef:0d:ed:9e:c5:79:bd:
5e:58:6a:a1:71:9e:9b:10:4d:f8:c9:12:a4:06:bd:11:d9:e5:
11:83:95:d5:54:1f:d6:56:8b:79:0b:e6:6e:03:c3:5b:0e:6a:
bd:ef:1d:42:26:45:4e:a2:ff:aa:c7:68:89:ef:05:ff:94:e2:
a2:ca:ca:55:48:fa:7b:ec:1b:a7:41:09:d4:92:a7:e2:f5:43:
68:55:6a:e5:7a:4e:65:b8:91:30:ce:f0:d4:66:44:cc:e1:cb:
4a:92:d2:a2:21:e1:10:1a:e4:b3:24:4d:1c:94:01:59:16:f7:
31:49:87:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org