Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LTfPrT6ipVea5EqbU_GeYgOe1WI.roa
File: LTfPrT6ipVea5EqbU_GeYgOe1WI.roa (raw, json)
Hash identifier: +fG3UsVXLEB4X5wKBfjJLHUdzGOwuRknebh+EL+R0fQ=
Subject key identifier: 2D:37:CF:AD:3E:A2:A5:57:9A:E4:4A:9B:53:F1:9E:62:03:9E:D5:62
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10F7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LTfPrT6ipVea5EqbU_GeYgOe1WI.roa
Signing time: Sun 07 Feb 2021 12:50:00 +0000
ROA not before: Sun 07 Feb 2021 12:50:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 114.198.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4343 (0x10f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:50:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2D37CFAD3EA2A5579AE44A9B53F19E62039ED562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:26:12:ef:49:f3:48:1b:5a:0b:ef:fc:1f:
ba:4d:b2:e7:53:5f:3e:a0:be:48:b8:84:23:21:03:
b1:91:2b:48:83:06:70:e9:ab:b7:fd:d2:7f:ef:15:
8b:a8:3d:89:df:c0:85:6a:63:02:84:77:e1:ea:7c:
fd:51:02:39:1b:53:f3:80:cb:96:99:a0:ca:80:ed:
5b:97:03:df:36:0f:7b:9d:ae:11:f6:1f:0b:3c:32:
56:6f:be:d0:c9:66:13:1e:8c:82:b9:89:3a:cb:0e:
95:66:f2:c4:79:34:8d:60:b6:79:ee:a2:04:18:aa:
f4:e3:69:a5:f8:0e:15:59:c9:36:07:82:88:06:64:
66:f9:29:b5:95:a8:fc:8a:92:ac:3f:0c:8a:78:3d:
0b:59:23:54:ed:cf:61:5b:0d:5f:2a:2a:51:f4:de:
61:20:15:68:ff:67:77:e5:56:e9:51:bd:2f:55:83:
7a:25:29:74:46:50:fb:8f:5c:7a:7a:86:7d:e3:2a:
cc:c9:9d:a6:52:90:ce:93:97:80:6e:3a:ec:24:e7:
2d:1f:4e:4c:dc:58:23:3b:80:5c:72:17:46:f4:13:
fd:8c:80:00:d1:fc:32:58:03:fb:51:e2:e4:76:d1:
02:34:8b:d0:f7:7d:e9:63:70:ae:9d:db:3c:75:3c:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:37:CF:AD:3E:A2:A5:57:9A:E4:4A:9B:53:F1:9E:62:03:9E:D5:62
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LTfPrT6ipVea5EqbU_GeYgOe1WI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.176.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:30:5a:95:1b:62:49:b1:b6:37:8d:db:b3:04:c9:57:2f:40:
9d:33:7b:8c:3d:f4:bf:b6:78:96:e5:ec:59:53:dd:b1:38:05:
0a:4e:1f:1b:06:67:53:22:b4:10:0a:bb:13:67:31:aa:fd:a0:
b5:5a:83:ec:28:da:42:1b:b7:48:52:3a:23:99:bb:44:31:50:
3a:45:c3:94:c1:09:a9:ce:36:b3:d6:eb:5c:b5:d7:a6:ef:04:
b2:42:cb:d4:36:51:77:ac:c9:db:7d:88:83:d0:6b:67:f5:d0:
0d:d9:b6:c0:f4:26:61:5d:79:89:04:8a:d5:03:2e:af:22:1f:
99:2c:6c:19:b6:8a:43:e2:72:e4:f2:ca:27:d0:ce:84:03:06:
98:f8:c8:2e:38:a4:02:f2:6f:03:6c:8a:af:e5:6f:23:da:da:
87:34:4b:53:08:ce:79:14:1f:76:50:9b:bd:5f:99:8c:8c:64:
61:a0:56:ec:35:86:44:42:72:f0:1c:51:dc:16:73:da:1c:bf:
36:be:3d:db:f2:55:71:36:53:3c:1b:9e:4a:c6:d2:59:0a:ec:
37:f8:be:f9:f2:40:2b:fa:42:33:b2:5a:b6:1c:0c:43:6a:9c:
89:f6:35:0b:56:3a:c9:68:ed:70:67:2b:8c:30:fb:65:e3:18:
40:83:09:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org