Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MnTL5-u2DRte-tZLksFyBXBIsO4.roa
File: MnTL5-u2DRte-tZLksFyBXBIsO4.roa (raw, json)
Hash identifier: xkF6nDXItnslVYHXcz1pNGXrzfq681g2KoDCsr+7SGw=
Subject key identifier: 32:74:CB:E7:EB:B6:0D:1B:5E:FA:D6:4B:92:C1:72:05:70:48:B0:EE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18E2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MnTL5-u2DRte-tZLksFyBXBIsO4.roa
Signing time: Sat 22 Oct 2022 06:05:50 +0000
ROA not before: Sat 22 Oct 2022 06:05:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 103.225.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6370 (0x18e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3274CBE7EBB60D1B5EFAD64B92C172057048B0EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:a9:9d:74:24:30:fd:7b:53:e9:ce:1d:62:
d9:52:de:43:a5:99:21:6d:64:80:fd:0a:6b:dd:33:
7d:54:4e:f4:b4:64:96:22:68:a3:cd:b1:d6:02:7c:
ce:82:2e:39:70:c5:fa:16:b3:b1:77:a6:61:74:39:
bd:dc:c7:46:f3:46:c9:c1:e6:2d:ea:bc:2e:59:55:
07:55:6b:d8:67:5b:23:da:eb:df:83:98:8d:b3:f0:
c2:d2:74:8d:03:36:bf:73:3e:fc:fa:d0:32:81:56:
c1:93:6b:c8:85:dd:fc:0b:b2:59:51:5c:41:92:a1:
78:4f:65:f0:55:fb:8e:04:8b:e4:c5:66:00:22:b4:
f7:ba:5f:19:07:55:b3:7d:b6:25:56:32:6d:f6:72:
ee:3d:47:7e:16:dd:92:30:fa:e2:8e:0b:49:8c:29:
02:7f:b9:32:d6:ab:28:c9:6b:34:03:ca:8f:24:57:
1f:5d:fd:fd:e5:bc:63:2d:cb:46:99:ba:81:91:ea:
4c:bd:6e:64:1a:73:63:6e:05:6d:c7:f3:52:47:77:
d4:6f:c5:8d:48:1f:0e:ff:33:fe:1c:ec:10:fb:e2:
dd:77:58:05:bd:90:b9:7c:c3:0f:0f:8b:a4:c0:0d:
50:38:d6:6d:f7:cf:ab:55:69:c3:57:2d:27:b8:44:
b1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:74:CB:E7:EB:B6:0D:1B:5E:FA:D6:4B:92:C1:72:05:70:48:B0:EE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MnTL5-u2DRte-tZLksFyBXBIsO4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.0.0/24
Signature Algorithm: sha256WithRSAEncryption
31:6e:dc:35:02:39:36:dc:73:38:1c:27:f7:c9:bf:68:ad:64:
47:7f:07:b4:f4:4b:b2:52:b2:14:d3:8f:85:30:d3:26:70:9d:
8e:f5:74:db:b2:56:5d:dc:f2:39:d2:04:68:2a:ef:a2:16:b9:
81:1e:a7:46:6b:77:f3:ea:55:f9:00:15:ae:4e:e4:7b:93:62:
15:95:fa:00:f9:f8:0c:49:da:30:f2:85:8a:b1:d2:b7:75:b8:
0f:6e:34:16:95:3d:3f:7a:eb:48:07:a8:1e:81:1d:4f:68:eb:
47:ab:74:c9:0c:bf:ba:bf:2a:b7:9a:34:6d:97:0b:bb:d2:37:
07:92:33:67:21:89:72:2f:68:35:fa:eb:b7:16:eb:1d:a8:52:
d6:a0:6e:4c:ce:39:ae:65:e6:e4:b4:60:5c:80:6a:05:d8:45:
2e:68:55:9d:1c:46:72:43:54:f9:00:6d:2b:18:dc:2b:09:bc:
13:28:17:8d:29:a1:56:53:81:c8:19:05:13:93:04:fc:93:2e:
14:a0:3d:b3:93:66:45:1f:ff:57:a8:62:fc:21:d7:8a:9a:86:
26:71:93:10:73:00:53:44:24:dc:cf:29:12:da:e8:96:d4:0e:
34:c3:35:af:aa:cc:94:51:bb:53:65:d9:18:0a:c7:5e:1c:0e:
ab:33:8e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org