Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/O2TzwKAEgir7EvW4VN9P-3ahk-8.roa
File: O2TzwKAEgir7EvW4VN9P-3ahk-8.roa (raw, json)
Hash identifier: ICqo4LmP3NlynLVPnT81WW4Nc0s0/7Y/pM8HRoMkIDA=
Subject key identifier: 3B:64:F3:C0:A0:04:82:2A:FB:12:F5:B8:54:DF:4F:FB:76:A1:93:EF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/O2TzwKAEgir7EvW4VN9P-3ahk-8.roa
Signing time: Thu 15 Sep 2022 02:36:24 +0000
ROA not before: Thu 15 Sep 2022 02:36:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 211.76.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3B64F3C0A004822AFB12F5B854DF4FFB76A193EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:48:c9:cc:82:2b:e8:66:48:c9:b9:e3:69:
9e:d9:23:23:5b:df:da:9c:94:c8:f6:1c:46:99:66:
b9:98:77:30:e5:b9:83:18:fc:84:21:ee:5f:82:35:
e5:a8:2c:6b:82:a0:da:60:b3:5c:68:00:de:21:ed:
14:9b:7f:6e:72:9a:4a:d6:96:3d:a6:f6:55:06:6f:
a9:e3:31:b5:98:46:f9:3b:5c:e3:6a:d4:4b:c7:74:
b2:00:ae:0f:66:88:af:d4:8c:67:63:97:25:99:bf:
2e:b6:69:9a:67:1f:8b:15:b6:84:30:fa:94:d5:eb:
97:8e:17:a8:16:f4:f3:eb:d8:57:be:4a:d4:e9:d0:
25:45:8c:1f:0d:cc:89:58:ab:fd:5d:ae:4f:d8:ed:
1b:9c:a8:46:8c:21:77:69:0e:12:1c:15:3d:04:44:
af:ae:e7:57:08:bb:c7:81:90:c7:01:ea:8d:e0:10:
ba:e4:cc:61:e8:d3:35:b8:0a:1a:c3:8b:40:f4:00:
65:45:0f:80:1f:1d:b5:88:97:67:94:f4:0a:08:a0:
27:de:c8:55:52:20:88:9d:50:aa:aa:70:b6:42:39:
ea:9a:f6:bf:0f:82:e4:bc:21:cf:f4:42:10:32:d2:
10:17:cf:99:04:b4:85:b8:60:20:25:c2:b4:71:c4:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:F3:C0:A0:04:82:2A:FB:12:F5:B8:54:DF:4F:FB:76:A1:93:EF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/O2TzwKAEgir7EvW4VN9P-3ahk-8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.48.0/24
Signature Algorithm: sha256WithRSAEncryption
30:95:dd:49:a7:58:9f:c4:0f:f3:8d:e5:47:ab:91:9b:9b:eb:
67:aa:9e:82:5e:89:1a:8a:4d:63:e1:3a:0a:1f:a5:96:d5:e2:
c0:90:85:c8:e0:12:53:be:4e:29:7b:ed:be:bb:1d:66:fb:c5:
fc:cf:94:9b:fe:1e:c8:cd:35:e2:ca:ec:ca:95:af:37:3f:a3:
70:eb:ea:ff:ae:ed:2e:43:3a:3c:a4:b3:bd:1a:6f:60:e2:2f:
c2:32:b6:c5:98:81:61:21:41:17:2d:1b:6d:64:eb:a9:69:71:
49:26:48:6c:19:6d:05:62:d1:f5:a8:28:ce:6e:85:66:a1:62:
ef:4a:0a:f1:a4:3e:df:1c:04:02:8e:5e:a5:c7:f7:2b:17:78:
e4:78:fc:6c:b0:79:ad:2d:95:5b:be:51:cc:28:15:34:9b:44:
16:1c:bf:ce:4f:66:e9:11:f1:08:21:cf:6e:2b:e3:d1:0a:b8:
3d:fb:6a:db:0f:a1:83:60:75:5d:eb:b2:42:3d:a8:18:2c:ad:
9c:2a:db:41:61:c4:dc:ed:7c:8a:e2:61:89:a4:38:da:55:a3:
f0:d3:df:0b:a1:7b:33:59:d4:c0:8e:d3:d0:e6:d8:85:d1:c1:
dd:29:e5:e5:da:c1:ee:09:43:33:f9:c1:8f:ce:b2:5a:fa:a6:
bd:e9:cf:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org