Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ULLKCWsopAoJ5uW7B4Gb7kGt4JI.roa
File: ULLKCWsopAoJ5uW7B4Gb7kGt4JI.roa (raw, json)
Hash identifier: SmHx4A0BtZ8wfFrdc0Rmy3NMleK8bVFECFlNi+rxSbk=
Subject key identifier: 50:B2:CA:09:6B:28:A4:0A:09:E6:E5:BB:07:81:9B:EE:41:AD:E0:92
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0D1F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ULLKCWsopAoJ5uW7B4Gb7kGt4JI.roa
Signing time: Thu 14 Jan 2021 07:12:13 +0000
ROA not before: Thu 14 Jan 2021 07:12:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 115.165.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3359 (0xd1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 14 07:12:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=50B2CA096B28A40A09E6E5BB07819BEE41ADE092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:94:8a:51:41:80:20:0e:51:95:11:47:33:
1a:d9:d8:ce:b1:42:5f:8a:df:54:10:dc:a6:07:bb:
ac:38:ed:04:5c:46:78:5a:b1:45:c3:9e:39:d6:ce:
00:70:91:87:d7:07:ec:36:76:c1:f3:84:00:d0:0d:
d1:21:3c:15:57:a7:1f:7b:b6:87:60:e7:df:33:00:
80:c8:e8:22:09:be:2f:da:32:9e:37:eb:9c:11:14:
10:f7:28:30:03:47:9f:0d:4d:f3:cc:61:85:3e:48:
1d:dd:c5:f5:50:d7:7d:de:56:9e:5c:aa:cf:87:c2:
7a:e7:2d:2c:e3:fd:dd:32:b1:af:fb:a2:95:d5:ea:
0e:cb:04:e5:93:42:7b:f4:1d:86:da:be:65:8f:22:
c4:9a:f8:c4:09:28:da:9e:08:e0:b0:54:cd:f0:9b:
9b:a7:3b:b3:b2:2e:b4:6b:36:07:6a:80:d5:65:8a:
d1:7c:77:a0:3d:e7:fc:fd:17:f2:14:bb:ad:3f:36:
22:98:f9:d6:84:dc:4b:37:dd:c1:23:b8:a2:d6:d4:
9a:e5:a4:7b:b5:ba:76:40:ff:39:59:1c:7b:c3:8e:
34:4e:37:8f:32:0e:a5:98:a5:13:70:f6:9c:45:db:
d9:9d:5e:af:e8:6c:12:0b:3f:72:41:8a:4e:1f:ad:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B2:CA:09:6B:28:A4:0A:09:E6:E5:BB:07:81:9B:EE:41:AD:E0:92
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ULLKCWsopAoJ5uW7B4Gb7kGt4JI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.248.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:d5:57:04:54:ee:89:05:a3:9c:c5:99:94:46:05:19:45:29:
ae:61:20:8e:27:c2:11:1e:68:66:29:a4:e4:90:23:fb:62:6b:
4d:e3:11:50:df:29:2c:ba:eb:dc:80:b0:f8:66:dd:1d:01:fe:
a3:ee:26:e6:1f:39:f1:a8:6a:ed:7d:cc:ab:81:5d:fb:dc:f6:
d5:0f:b6:20:8d:b6:13:5e:07:9a:54:79:4a:95:ca:b1:5b:be:
30:97:e8:fa:90:29:5b:b4:40:b4:e2:a5:7d:98:fa:9e:10:1e:
5f:1b:a0:ba:69:b3:5f:4e:34:21:fe:70:63:15:a5:8e:aa:50:
fe:4e:e9:f1:1a:9c:b0:01:cf:f6:c5:f9:1a:6a:7e:cb:26:a6:
6c:bd:32:6d:6e:de:fc:c7:5d:e9:b8:4f:d4:ec:e8:7d:10:3f:
41:d0:cf:5e:20:04:c0:8c:a4:48:a5:d4:06:d2:dc:79:72:37:
dc:b6:b7:59:9e:91:43:5b:23:ac:9e:48:d0:e9:e7:9b:72:aa:
f4:89:99:7d:d4:52:d5:7b:68:bc:e5:fc:3b:ac:fc:ff:82:3f:
be:a2:71:05:58:7e:3b:b4:28:ce:53:63:52:cb:99:d1:7b:47:
7f:e6:25:91:90:90:5b:5c:73:8a:cd:e7:9d:42:05:6d:88:fc:
9c:f4:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org