Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U26vu9q-KwGMnFkYddqHsnpE9Kg.roa
File: U26vu9q-KwGMnFkYddqHsnpE9Kg.roa (raw, json)
Hash identifier: EpZ9ef8NXBhO7mZY7ym9KvWLsdHLoutNdTjmYZZBDTY=
Subject key identifier: 53:6E:AF:BB:DA:BE:2B:01:8C:9C:59:18:75:DA:87:B2:7A:44:F4:A8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 123F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U26vu9q-KwGMnFkYddqHsnpE9Kg.roa
Signing time: Wed 29 Sep 2021 02:54:22 +0000
ROA not before: Wed 29 Sep 2021 02:54:22 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 114.198.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4671 (0x123f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:22 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=536EAFBBDABE2B018C9C591875DA87B27A44F4A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f9:56:8e:bd:7d:7e:8d:c7:ad:7c:93:8d:b2:
dd:cb:16:55:10:1e:02:42:35:26:3f:39:d3:66:ce:
33:d6:82:a5:58:94:56:cc:c6:51:6c:80:c4:e2:70:
14:71:3a:29:4d:1f:91:cb:d9:5e:18:b6:18:40:8e:
9e:cf:cb:dd:1c:4e:a6:32:78:98:28:6f:68:d7:a4:
57:dd:0c:18:81:ad:f4:bb:b2:99:c2:97:86:b8:24:
e9:5c:66:2e:ac:ed:46:c2:46:bc:35:2c:10:24:c4:
00:db:01:6e:11:b0:e3:8a:3b:eb:41:7f:3a:51:0f:
68:37:46:63:4d:39:ad:33:5b:02:ac:c3:71:85:d4:
3b:5e:63:0e:ac:7e:b0:00:5a:0e:8b:9b:65:2b:34:
dc:ce:df:2e:79:65:78:6b:80:f8:c3:22:20:1c:49:
a4:64:4d:29:eb:b8:8a:39:5a:6e:f6:eb:96:19:62:
fd:d6:c5:ce:a4:63:e9:e4:75:d0:52:5f:b9:60:54:
d4:11:04:25:c1:34:97:29:3b:bb:fd:60:65:e4:51:
d2:0c:0e:b6:b7:40:f5:91:dd:4c:de:57:6f:56:96:
98:b6:3b:ab:e7:98:cd:37:dd:49:9e:1e:da:2a:14:
05:dd:8f:5e:f9:04:c2:3e:46:0b:53:b7:7b:fc:48:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6E:AF:BB:DA:BE:2B:01:8C:9C:59:18:75:DA:87:B2:7A:44:F4:A8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/U26vu9q-KwGMnFkYddqHsnpE9Kg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.164.0/22
Signature Algorithm: sha256WithRSAEncryption
46:f3:51:50:7a:2a:73:19:34:35:e5:cb:c9:b3:8c:4a:fe:f1:
95:37:12:eb:e5:22:b3:9a:88:c0:29:61:30:8b:7f:2d:44:c7:
f9:76:a8:37:6d:6a:17:ae:57:af:cf:15:33:92:98:23:68:f5:
48:11:74:52:f1:b4:47:9a:5c:5d:ef:15:3e:48:51:d7:a3:cb:
59:e1:e3:90:ce:2d:8f:cf:33:84:a5:3c:0a:19:8c:d0:a9:e8:
62:60:a9:6f:a2:64:d7:37:22:0d:b9:58:11:97:b6:2d:30:5d:
38:2e:d2:71:86:1c:5d:17:21:40:01:3e:95:2b:d8:4e:f8:2a:
41:0d:3d:a4:a0:2b:2f:15:90:5a:65:f7:9c:3e:31:45:8c:30:
95:b3:34:ca:c3:b4:47:7c:7b:23:f4:1f:05:59:ed:20:af:b4:
f3:65:e8:a9:b3:f4:40:38:f6:15:23:83:70:f4:cb:75:29:28:
a5:2f:6c:19:aa:a7:b7:3c:dc:98:5b:1c:ed:10:3a:13:84:79:
11:e2:06:9c:0e:c3:e4:24:09:5c:88:6e:07:92:1a:df:94:01:
69:df:37:83:76:c3:68:8e:be:76:e6:5c:66:5f:04:2c:d2:70:
b8:9e:53:8c:92:c7:4a:66:fa:b7:20:f2:94:bc:a4:db:fe:b4:
2c:f8:ed:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org