Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TkH7vz-2K9EcHdyVdzsATMpuqSw.roa
File: TkH7vz-2K9EcHdyVdzsATMpuqSw.roa (raw, json)
Hash identifier: pS9DhrphDI2e3XfGC05hY1PBZOj0EQ2jNVa3SEA8cH4=
Subject key identifier: 4E:41:FB:BF:3F:B6:2B:D1:1C:1D:DC:95:77:3B:00:4C:CA:6E:A9:2C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 111B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TkH7vz-2K9EcHdyVdzsATMpuqSw.roa
Signing time: Sun 07 Feb 2021 13:13:39 +0000
ROA not before: Sun 07 Feb 2021 13:13:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 115.165.218.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4379 (0x111b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:13:39 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4E41FBBF3FB62BD11C1DDC95773B004CCA6EA92C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:79:75:33:36:c1:a8:a4:ba:d2:94:00:94:
7e:ec:38:1c:3e:a6:af:85:0c:2d:31:cb:d9:bb:50:
23:82:5f:fe:ac:78:42:df:14:de:be:fb:0f:d5:11:
95:86:30:c5:e0:5b:b7:38:0b:b5:64:d4:91:18:dc:
80:94:34:65:0c:38:f8:4b:12:24:7d:5b:ae:9e:d0:
c0:cb:87:f8:4a:f0:43:a8:95:87:a4:bb:91:f1:71:
bf:5c:f8:09:df:da:02:df:62:ac:2b:c1:c4:32:28:
1d:b3:1a:cb:45:3e:c2:db:f6:29:36:20:a4:65:2f:
36:b0:87:5f:5e:ef:03:8d:20:83:be:94:66:3e:77:
d2:fa:14:a6:2c:38:ed:c7:11:97:ea:24:d6:72:9a:
af:e2:97:71:ee:9d:77:8e:01:8c:08:ef:e3:5d:56:
b4:17:9c:6b:2e:c1:83:ef:5a:d4:11:dc:4b:36:7d:
9a:2e:49:e1:3e:39:72:9c:72:9f:4a:0a:97:66:37:
31:c3:bc:26:91:5f:85:83:55:9f:9a:b9:24:18:a8:
a7:2d:14:ef:9c:3e:a7:7b:cb:e6:3c:fb:9b:bf:c6:
8f:ad:07:8a:fe:0c:c7:7e:be:0f:f2:f0:a8:d8:f1:
92:f6:e9:dc:b6:3a:ec:56:b5:13:1a:a9:3f:52:d5:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:41:FB:BF:3F:B6:2B:D1:1C:1D:DC:95:77:3B:00:4C:CA:6E:A9:2C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TkH7vz-2K9EcHdyVdzsATMpuqSw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.218.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:66:7f:50:36:ad:33:5d:9b:ee:55:10:aa:a4:76:f7:c6:08:
14:3c:c3:b0:10:eb:e1:3e:48:05:87:6b:b4:6a:76:02:69:79:
82:16:49:b7:13:97:77:4b:7d:dc:df:b6:46:10:86:39:09:a6:
b7:4a:04:7b:96:b0:89:a6:c8:f3:4c:fa:3c:27:34:4c:ca:f4:
35:78:cb:b2:47:61:9c:ff:0c:78:4d:86:06:0f:4a:2a:1a:b0:
ad:12:1e:57:1b:13:6c:95:df:72:32:dc:bf:96:d1:1d:0e:22:
80:db:11:71:04:4e:da:8b:26:93:62:93:92:92:b3:35:d3:7c:
4b:10:c9:b9:e7:93:a9:22:ea:6c:2b:d9:34:69:76:7e:87:e8:
dd:81:53:c9:b8:e2:c8:df:e8:e4:84:a5:bb:31:83:e8:f4:1f:
34:82:6d:a6:5d:6e:e4:a2:83:1f:4b:91:f6:90:ac:85:ce:ed:
8d:d3:ad:46:4a:a5:af:5b:67:7d:38:aa:97:f5:a1:a5:d9:04:
47:9a:57:92:ed:f6:78:ff:ca:3d:c3:32:e5:4a:38:ff:df:76:
a2:17:48:96:3c:29:1e:61:aa:82:1a:cb:46:eb:cd:a2:88:e3:
4d:84:71:1b:6c:d0:4d:01:54:2f:f9:2d:e7:f0:29:1b:60:c9:
51:c4:94:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org