Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rc7LTiNG30fVakdu19kZYpo1dJ8.roa
File: Rc7LTiNG30fVakdu19kZYpo1dJ8.roa (raw, json)
Hash identifier: GN6uPdoUVobbfeDfdo+XLD8rET4J1UY9ddy9GZFTeeI=
Subject key identifier: 45:CE:CB:4E:23:46:DF:47:D5:6A:47:6E:D7:D9:19:62:9A:35:74:9F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10D9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rc7LTiNG30fVakdu19kZYpo1dJ8.roa
Signing time: Sun 07 Feb 2021 12:49:17 +0000
ROA not before: Sun 07 Feb 2021 12:49:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 115.165.192.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4313 (0x10d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:49:17 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=45CECB4E2346DF47D56A476ED7D919629A35749F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ba:66:17:47:c1:b4:cb:f1:9a:2e:0f:e6:b2:
30:36:f2:a3:62:7f:1f:c9:92:2c:5b:a1:f9:7e:aa:
31:8d:f9:5b:6d:20:37:20:03:e7:c6:fa:e5:44:4c:
e6:d9:6c:2f:85:9a:ae:60:a0:95:4a:57:3d:43:38:
25:65:da:8a:ed:ec:ba:aa:c4:3d:3e:9f:6f:c2:8b:
3b:15:d8:dd:fa:4a:62:6e:8f:c4:e4:41:5b:9c:44:
c5:44:10:5e:e9:67:99:1d:46:99:37:d2:d4:94:88:
ab:2f:83:ff:46:d6:40:6d:83:46:c9:18:d1:78:8c:
83:64:ba:a2:f6:fc:fa:71:83:ef:80:70:d3:ea:f8:
f7:52:89:e9:57:37:46:52:fd:3e:19:84:5d:b4:ce:
90:d1:11:e4:50:bb:6c:a9:81:da:c6:fe:e5:3b:85:
b3:27:06:6e:5f:9e:bf:be:60:83:1d:9b:b4:cd:45:
78:e7:60:85:8f:a4:91:b7:b5:52:89:35:39:ed:a4:
ab:b4:50:e0:4d:5b:8f:e9:72:c4:ba:55:39:5f:15:
c2:2e:aa:0a:72:1a:83:20:64:b5:5b:2d:ad:ed:c4:
78:42:38:f8:24:97:53:87:39:76:04:b6:b2:4e:b2:
48:5b:98:96:95:af:73:de:6d:a8:49:6d:08:4b:d1:
2b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CE:CB:4E:23:46:DF:47:D5:6A:47:6E:D7:D9:19:62:9A:35:74:9F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Rc7LTiNG30fVakdu19kZYpo1dJ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.192.0/18
Signature Algorithm: sha256WithRSAEncryption
05:67:28:b7:74:03:82:02:6b:cc:d2:5b:0c:72:69:f5:d5:47:
38:a8:8c:3f:2c:57:1f:de:55:5c:38:50:6f:5c:2b:f8:c6:31:
38:05:71:46:88:93:f4:54:ee:2b:61:a3:c9:d5:92:56:51:e9:
0e:37:e5:1b:c7:9c:14:85:37:f1:c6:65:ec:36:c4:41:28:13:
bf:92:b7:38:3a:10:d9:bd:db:5c:7c:35:e1:6f:12:f3:42:7c:
fc:5b:7e:7c:60:40:bf:9d:dd:05:1d:3f:89:0e:49:a4:cf:b4:
6c:fb:98:90:f7:46:8e:6d:2f:50:1f:26:ed:a7:11:39:0c:84:
39:ad:26:62:13:78:f7:30:ee:80:a5:af:ce:f3:d2:20:0b:7f:
f0:e9:ee:5f:5e:1b:dc:22:75:48:2a:20:6c:c1:8b:e3:fd:fb:
26:8d:6d:a7:c9:3b:70:25:9d:79:0d:22:7d:91:77:f0:90:3f:
29:7f:b3:4f:a7:64:9b:aa:26:5d:f1:8c:bc:be:33:59:eb:58:
0e:22:28:88:2a:41:3f:2d:0c:13:ed:4f:99:e1:bd:7b:82:b9:
fb:c1:37:fc:76:1d:a0:14:74:91:cf:9d:9a:22:09:01:bb:f6:
ea:bf:9f:61:c7:b0:44:ed:bb:5f:c6:8d:56:54:ff:6b:2a:ca:
95:eb:44:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:48 2023 by rpki-client on console-fra.rpki-client.org