Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PXy_Lb8PeaxnifuoBeFGlqU7aQQ.roa
File: PXy_Lb8PeaxnifuoBeFGlqU7aQQ.roa (raw, json)
Hash identifier: C802aHjZI95l1QQJq1CSWPM66i0njyMekZau3HDHW9g=
Subject key identifier: 3D:7C:BF:2D:BF:0F:79:AC:67:89:FB:A8:05:E1:46:96:A5:3B:69:04
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1AD0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PXy_Lb8PeaxnifuoBeFGlqU7aQQ.roa
Signing time: Thu 22 Dec 2022 06:13:29 +0000
ROA not before: Thu 22 Dec 2022 06:13:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 115.165.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6864 (0x1ad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Dec 22 06:13:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3D7CBF2DBF0F79AC6789FBA805E14696A53B6904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:d7:47:d0:77:fb:81:a5:e3:b9:36:e8:dd:
ac:49:bc:f3:f1:d4:ce:13:7d:b9:6b:f3:b2:48:75:
29:62:9d:a8:30:32:47:df:83:22:a3:fa:16:ad:ec:
2b:54:42:ce:73:db:52:20:1e:56:ca:27:3f:e2:bf:
8a:67:30:c2:14:5d:d9:e4:84:4a:1d:3c:ca:a0:68:
e4:f3:72:72:a1:8b:b6:d4:90:b2:4e:ff:d8:77:92:
59:09:97:44:31:79:93:8e:c1:33:9d:94:72:77:b3:
9f:52:55:f6:75:5a:b8:05:e2:05:5c:7a:45:24:a5:
2d:81:a0:5b:a4:fe:54:7b:5c:58:75:1d:35:a7:d9:
d2:d7:99:7a:4e:48:58:58:fb:5b:d4:75:5c:f0:bc:
e3:c4:16:14:05:1a:58:2b:4f:47:94:46:0e:e1:af:
a2:c1:2a:64:3b:a6:0d:f0:be:8e:1f:b4:9e:d2:87:
d1:f1:c1:8d:84:eb:76:d8:7c:0f:94:da:ec:1f:f1:
63:82:69:43:b2:57:37:59:b8:2e:fe:55:10:1e:f0:
bd:f2:21:cc:7d:0d:ff:d6:fa:c8:d5:55:ba:79:a9:
ae:35:36:6e:a7:75:a9:82:eb:d2:99:be:66:07:44:
d0:78:55:2b:d3:8f:46:6f:d2:5a:e8:35:88:e3:19:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7C:BF:2D:BF:0F:79:AC:67:89:FB:A8:05:E1:46:96:A5:3B:69:04
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PXy_Lb8PeaxnifuoBeFGlqU7aQQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.192.0/18
Signature Algorithm: sha256WithRSAEncryption
77:d5:91:df:89:e2:8e:88:fd:a1:9b:af:f7:36:18:d3:63:be:
02:37:96:68:eb:1f:c4:fd:ba:98:e6:1a:7f:d2:18:ba:28:7a:
d2:de:77:e0:db:c1:41:aa:b9:cb:7f:40:bf:97:27:20:0e:5a:
14:08:c0:8a:39:65:55:7c:3d:53:ec:1a:8e:94:ec:08:84:5b:
c0:eb:a0:17:90:39:09:2b:c2:23:78:0e:24:58:5d:33:0e:c7:
48:88:c6:00:bc:ad:4d:7a:63:4a:70:8a:12:d3:cf:d9:2b:f2:
70:b4:1e:3f:44:f4:b2:e8:f3:b3:7c:44:f5:ce:09:05:47:18:
97:c8:31:02:64:f4:e0:11:dc:f9:12:95:c2:34:88:13:0b:c4:
7a:8d:18:5d:0c:26:7e:9f:34:28:e0:af:ac:f2:24:76:5d:45:
69:88:cf:c3:08:68:59:89:76:fd:68:6b:b8:93:1f:01:b2:af:
1d:ff:23:de:f0:0e:1e:1c:17:0f:dc:24:87:d7:77:bc:cc:92:
49:40:c7:8e:4d:3b:d6:1d:ee:b9:1a:97:76:98:ed:5f:8f:45:
78:7b:28:0b:3a:8d:7c:61:62:83:1c:76:db:a4:2b:3e:85:9b:
33:e3:bd:4d:ac:40:ad:8f:50:09:62:42:de:50:4c:15:4b:94:
4f:a8:0d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org