Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NKXKMeVHxrvn9baKx3ZnHdukkA0.roa
File: NKXKMeVHxrvn9baKx3ZnHdukkA0.roa (raw, json)
Hash identifier: CCHoMaJz5QmDGV6HKvPWsSBSIXf4C/WxCCqCGogy+cY=
Subject key identifier: 34:A5:CA:31:E5:47:C6:BB:E7:F5:B6:8A:C7:76:67:1D:DB:A4:90:0D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NKXKMeVHxrvn9baKx3ZnHdukkA0.roa
Signing time: Thu 15 Sep 2022 02:35:58 +0000
ROA not before: Thu 15 Sep 2022 02:35:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 115.165.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=34A5CA31E547C6BBE7F5B68AC776671DDBA4900D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:34:e4:be:b6:80:21:99:8f:98:e9:aa:d7:
7b:cc:2b:be:23:a3:86:b0:58:d8:5f:48:a0:cc:27:
94:63:cd:04:de:2c:32:e8:46:0c:f9:2d:bf:6a:4a:
27:8d:8a:64:a0:a1:48:db:b6:de:eb:87:a7:29:19:
fe:6e:14:16:a5:b3:dc:27:aa:9f:95:15:6f:95:19:
15:40:46:97:d1:27:5b:ab:c7:ec:c6:bd:06:3f:96:
f3:58:fe:17:4c:88:31:94:e8:5f:a3:c0:ec:69:e4:
ca:8e:87:e8:fa:b0:3b:9f:38:2d:36:17:61:82:c1:
60:31:ce:1b:b9:fe:a9:a9:d4:70:15:f6:45:2f:98:
b6:26:1c:cd:f0:12:28:41:d3:e4:cc:15:be:99:46:
26:09:ce:50:80:54:bd:a2:ff:2c:e9:ae:87:8c:8a:
bb:3e:ff:2f:5f:7d:0b:9c:67:6a:8b:96:d6:bf:94:
2b:5f:48:d0:cc:3f:ce:d6:ab:eb:b4:aa:82:04:1b:
5e:06:b5:c2:24:38:b6:51:ab:44:60:83:5e:bf:8a:
4b:2f:3e:bd:f6:61:9f:26:09:bb:b7:71:c7:b0:7c:
c6:73:5a:6b:f6:fd:17:92:16:0b:46:9c:2f:eb:aa:
81:d0:c5:08:78:5c:66:1f:95:fa:bb:16:af:39:96:
2b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A5:CA:31:E5:47:C6:BB:E7:F5:B6:8A:C7:76:67:1D:DB:A4:90:0D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NKXKMeVHxrvn9baKx3ZnHdukkA0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.192.0/18
Signature Algorithm: sha256WithRSAEncryption
64:d3:eb:eb:6c:91:cd:d5:f1:c5:90:a7:1e:ce:13:3f:a6:31:
40:57:f0:9c:81:62:29:b2:27:d4:ce:b6:dc:a7:62:9e:b8:ad:
32:32:69:8d:b4:39:29:0e:b7:c8:30:fc:b3:44:14:64:0b:b5:
a2:5c:1a:b9:91:c4:02:56:f7:66:77:42:ef:5e:d3:13:da:83:
3e:7f:f5:da:09:0e:23:e1:76:2d:5e:e5:5d:dc:20:10:b1:31:
ea:16:0b:4d:24:d3:bf:56:32:56:95:83:bc:fc:c9:ae:d9:b8:
80:8f:49:81:78:0f:2b:90:57:df:d4:57:ba:f0:8d:d0:38:8a:
84:36:7c:d5:21:e1:c5:68:fc:47:6f:86:67:5a:85:f6:65:47:
8a:92:83:05:7f:71:79:3e:3a:4c:1e:4c:2a:24:b6:cd:49:2e:
99:d7:fb:42:ee:9b:6d:92:98:23:95:7d:b0:33:c1:8d:c4:f9:
89:e8:47:69:21:8b:61:78:e3:4c:7d:6a:5a:20:18:3a:c9:54:
44:18:41:41:d6:b8:bc:44:f8:b0:85:58:fa:73:46:78:ad:91:
b3:65:10:dc:a0:80:46:df:a0:7c:12:31:88:8b:47:f7:d9:e6:
1a:d1:63:b9:5b:46:21:cf:2a:fb:4b:e9:c0:f1:89:c4:ac:99:
71:bf:c0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:33 2025 by rpki-client