Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SwKjvhzbVo8yb5OTCrhRWXk53UY.roa
File: SwKjvhzbVo8yb5OTCrhRWXk53UY.roa (raw, json)
Hash identifier: tagyGyScdRrQzDts05POMTnic9pdKwX+YdACDOc9hxw=
Subject key identifier: 4B:02:A3:BE:1C:DB:56:8F:32:6F:93:93:0A:B8:51:59:79:39:DD:46
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SwKjvhzbVo8yb5OTCrhRWXk53UY.roa
Signing time: Thu 15 Sep 2022 02:36:43 +0000
ROA not before: Thu 15 Sep 2022 02:36:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4B02A3BE1CDB568F326F93930AB851597939DD46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a1:c4:50:b0:0c:d0:f1:45:d7:39:f0:29:a3:
f3:9e:e4:04:0d:30:5c:3a:0d:5f:95:20:d9:0d:fc:
b1:e0:38:e4:a8:5d:ff:bf:aa:0a:c1:01:cc:c9:17:
99:6e:fc:8f:04:5c:44:fd:85:b8:62:65:46:2c:fc:
93:ac:a4:8c:a9:ba:45:4e:f4:2e:dc:30:6e:7a:c0:
1a:25:6d:65:6e:e6:50:f3:a6:65:67:1d:86:27:de:
77:fa:89:78:1d:5b:ba:f2:49:cc:8c:c5:55:cc:0a:
03:0f:75:ca:64:d6:4a:35:98:88:02:4a:1f:31:dd:
67:79:48:d2:41:c3:a8:26:aa:05:c0:7a:a7:1d:f3:
11:72:e1:41:7c:b3:be:dd:d5:29:07:f8:7d:d2:bb:
87:bd:2d:22:3a:fb:19:d2:1a:ba:76:b0:32:f9:80:
52:16:f7:7f:cb:7a:64:54:b4:01:31:bb:d5:52:4d:
93:49:4f:a6:c2:5c:9e:56:06:0d:b8:8f:1b:1b:ca:
dd:05:e5:eb:57:df:7e:bd:2b:54:6d:a3:18:7b:8a:
ef:0e:0d:10:67:62:2f:ee:72:04:26:b2:8c:aa:ba:
1d:1b:80:bd:3f:77:92:91:76:7e:fb:5a:29:03:7c:
4a:8d:62:ac:d1:a6:55:8c:bc:21:9a:20:87:e0:6d:
83:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:02:A3:BE:1C:DB:56:8F:32:6F:93:93:0A:B8:51:59:79:39:DD:46
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SwKjvhzbVo8yb5OTCrhRWXk53UY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.184.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:85:33:6a:e0:42:7f:33:f7:64:c0:c5:97:a7:34:df:75:f4:
02:07:be:25:25:bf:b8:71:23:af:d8:d4:fb:07:4a:60:d3:9d:
67:81:5f:2c:e6:eb:a1:42:f5:af:74:e5:5b:23:1f:f7:00:fa:
f2:35:42:20:6b:be:8e:36:ec:84:14:2f:4f:0d:e2:40:a2:d6:
82:b4:05:d5:e4:33:33:79:cd:63:cf:e0:b1:ab:2a:2a:51:d8:
32:28:76:99:2a:42:9e:39:5d:1b:9d:cf:bf:5a:52:cc:9f:c4:
87:0a:6b:a1:d5:49:d4:d3:0d:bf:2c:3b:83:5c:b8:0b:0a:7a:
48:89:23:7d:bd:f8:d0:db:5f:73:8d:bc:f9:73:fc:1e:60:60:
67:3f:f4:1b:26:9c:7f:d3:cc:22:82:73:89:13:6c:02:a5:43:
1f:b7:4c:f8:c0:91:17:e3:90:ab:a4:a1:fb:8a:aa:d5:66:19:
65:44:05:56:2a:84:1c:f8:0a:37:69:ed:90:ae:d8:d9:5d:64:
60:6b:45:71:0c:92:89:85:2e:80:3e:69:09:bb:49:89:2d:ae:
e5:ac:15:ba:7e:fb:a5:1a:e4:19:a7:0b:79:bc:09:4e:00:fc:
ab:64:7d:ca:92:fb:85:4b:2c:fe:31:20:0f:9d:a9:d1:a5:76:
f8:87:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org