Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IokiU9Zd-qRB-YyI0f5QL15SSjM.roa
File: IokiU9Zd-qRB-YyI0f5QL15SSjM.roa (raw, json)
Hash identifier: m+vdruUjO/7UDHy0AiGcHByJ4IcX+pXtBzWESu/wD8s=
Subject key identifier: 22:89:22:53:D6:5D:FA:A4:41:F9:8C:88:D1:FE:50:2F:5E:52:4A:33
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 123D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IokiU9Zd-qRB-YyI0f5QL15SSjM.roa
Signing time: Wed 29 Sep 2021 02:54:21 +0000
ROA not before: Wed 29 Sep 2021 02:54:21 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 114.198.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4669 (0x123d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:21 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=22892253D65DFAA441F98C88D1FE502F5E524A33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:59:9d:a3:fa:2d:d1:87:fc:47:50:ee:9c:71:
d3:c6:87:ea:a1:f5:f5:f1:35:ca:8e:39:f6:e9:05:
b6:1f:90:fb:9c:82:aa:47:46:86:14:44:35:e3:90:
3a:1a:3c:b8:ea:87:b9:3d:84:0f:2e:17:11:b1:d7:
40:55:b6:83:43:7f:df:3f:b4:36:04:8f:d6:4a:b6:
c4:2f:d5:4f:33:d1:05:55:eb:46:99:27:d9:4c:53:
66:be:12:a3:a5:c7:0c:ea:9e:75:c0:98:5b:9c:3f:
5f:c8:41:a1:af:89:c4:e5:85:f6:34:05:b3:d9:51:
66:a8:85:19:a5:d2:a6:34:00:63:37:3e:77:31:93:
f9:b5:6b:0f:d7:a5:53:40:32:9c:3c:3d:2e:df:c4:
94:ba:be:ff:9b:7d:89:52:19:fe:20:62:78:8e:b1:
96:0f:d9:d6:17:0d:c8:95:9c:8f:93:12:f0:bc:e8:
bd:d5:b0:fd:99:2c:f3:2a:43:01:c7:61:ab:90:a3:
73:72:ff:3c:f8:68:0a:62:41:24:f7:e4:0a:86:cc:
f7:bb:6e:2f:0c:57:fc:d0:1f:ad:6f:74:94:8e:81:
51:7c:ad:72:50:48:6c:22:77:20:1a:06:2e:09:d2:
5b:07:bc:ea:be:49:fb:ad:bf:06:b9:7e:bd:96:64:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:89:22:53:D6:5D:FA:A4:41:F9:8C:88:D1:FE:50:2F:5E:52:4A:33
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IokiU9Zd-qRB-YyI0f5QL15SSjM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.162.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:38:9a:1b:80:94:62:ad:8d:51:68:66:fb:49:a8:d2:1e:f6:
7a:87:1b:8b:07:c1:7c:eb:00:47:58:64:65:12:00:4a:85:e8:
ce:f9:ee:9b:d6:20:27:f3:fc:d3:b1:8f:0c:89:de:09:4c:59:
bf:b5:44:10:85:60:fd:36:d0:4f:77:d4:f9:37:f0:d3:fe:d5:
e2:63:99:eb:8a:ce:ca:f8:7e:03:2a:42:38:2d:2f:d5:91:97:
32:da:11:04:91:45:5d:36:9e:ee:bf:c0:ce:d5:02:f6:81:54:
4c:be:de:35:3c:a8:9a:8c:b5:e5:a8:b9:c7:58:e2:ee:ad:1f:
d8:1e:ba:6e:6c:8f:b8:88:00:63:f8:7b:63:6e:8c:28:57:e9:
d9:6f:d1:70:88:ca:06:26:d7:13:29:db:b0:4d:b5:1d:f5:18:
31:ba:ac:1f:17:2d:5b:51:96:d6:c5:03:b5:f6:38:59:74:ca:
3a:90:6d:36:a0:a9:d1:df:82:fb:71:75:34:d8:d8:67:fe:ae:
06:e4:13:ae:6a:f0:68:2b:bc:ed:aa:c2:fe:6c:85:8d:95:81:
5a:e7:eb:6f:84:31:69:52:3f:42:93:9a:5e:15:8d:76:35:62:
53:95:ea:da:7b:86:da:86:ed:16:b2:83:e2:3b:d3:99:5d:23:
93:7a:1b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org