Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OQWEqOWXtm92ggQ0HMBYXpxFkdI.roa
File: OQWEqOWXtm92ggQ0HMBYXpxFkdI.roa (raw, json)
Hash identifier: mrUdbA+rCoGuytf7Z8dJO9yQD95bgXxYhREkkkEpTHo=
Subject key identifier: 39:05:84:A8:E5:97:B6:6F:76:82:04:34:1C:C0:58:5E:9C:45:91:D2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14CE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OQWEqOWXtm92ggQ0HMBYXpxFkdI.roa
Signing time: Thu 08 Sep 2022 03:43:13 +0000
ROA not before: Thu 08 Sep 2022 03:43:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 115.165.200.0/21 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5326 (0x14ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 8 03:43:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=390584A8E597B66F768204341CC0585E9C4591D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:a9:77:6b:c6:a8:03:53:a3:8a:4e:b0:3a:
2f:e3:f8:73:96:70:3b:b5:ba:ed:ae:57:26:74:1a:
41:d1:31:e3:05:92:82:48:c6:d8:cf:46:3f:82:45:
0b:29:da:ae:c2:0d:72:b8:7d:23:db:7d:67:9a:64:
ee:c4:43:ba:a1:80:75:0b:12:cd:48:e0:66:dd:81:
f6:e8:2c:b4:73:38:c2:5d:8f:44:4a:5c:0d:3f:5d:
a4:94:f2:65:ce:fb:09:01:7a:7d:04:b8:43:a1:07:
0a:32:8d:24:74:b1:4c:39:ef:98:50:86:91:fa:c2:
ea:3f:6f:93:10:de:db:14:c5:a5:c2:38:52:7f:6d:
26:1a:41:34:37:0d:c8:fa:51:40:fe:74:61:49:56:
c1:b0:83:82:4a:b5:b1:cf:fd:c3:65:d1:fe:bd:7a:
d9:a1:01:73:48:1a:50:29:43:23:a1:59:1e:27:f3:
39:1d:2b:a3:4d:7b:6a:6d:bf:4b:9e:de:00:b2:43:
c3:a0:7f:ea:47:4f:85:16:01:4d:2d:c2:07:69:aa:
e4:66:47:98:02:e0:c1:24:36:64:fe:35:08:56:08:
c0:fe:d7:5a:c7:a2:c5:c6:2f:b0:6d:21:06:b1:11:
3f:e3:f2:83:68:69:e5:76:e4:7f:bc:58:39:c5:68:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:05:84:A8:E5:97:B6:6F:76:82:04:34:1C:C0:58:5E:9C:45:91:D2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OQWEqOWXtm92ggQ0HMBYXpxFkdI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.200.0/21
Signature Algorithm: sha256WithRSAEncryption
53:0e:77:aa:3f:8a:76:99:cb:f4:eb:21:c9:b8:ab:cd:1a:14:
cc:79:e4:6c:cf:96:77:e6:f1:16:27:95:7c:b1:ca:08:84:ab:
72:59:e7:d5:2a:2d:42:d2:e8:56:b6:16:0d:ca:9a:d7:19:86:
72:a8:50:2b:1a:82:cc:7e:fb:7c:bb:99:ca:05:76:1e:a9:f1:
90:f6:d7:02:fc:e5:2f:94:1d:5f:99:f5:5a:35:0a:5d:4d:df:
32:72:4c:fe:5b:7c:8e:b8:0c:cf:65:ed:12:a0:0e:f4:75:1e:
6d:4d:75:78:44:21:9b:34:98:04:df:7e:be:80:2f:a4:ee:28:
a7:31:d1:10:b3:32:c2:7c:9e:f7:41:a1:85:ad:85:61:bc:87:
8b:b2:1b:45:4a:2b:f5:e2:3d:89:a1:a8:72:7c:16:68:42:d6:
8b:ce:ef:7e:7e:b8:3b:18:4e:1b:47:e9:22:f2:e9:46:d5:dc:
d8:ef:39:d6:1c:7e:45:b6:99:78:ba:71:91:1e:3f:f5:b9:5c:
94:5a:e0:15:bd:79:bf:7c:ba:b7:dc:97:c7:9a:98:c3:8c:90:
a8:75:fa:96:1f:f9:03:1a:8c:a9:3b:35:1e:17:8b:9c:bb:3a:
bc:2a:9e:04:ac:a7:9e:9b:26:ff:1e:10:8a:c6:a9:73:98:75:
c2:66:d8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org