Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VJaj_bb42cO4KeSO3UkvVImuvQ8.roa
File: VJaj_bb42cO4KeSO3UkvVImuvQ8.roa (raw, json)
Hash identifier: kXHnI7fOHGomVwz5no2Ew6QTk7r+P3u8OerLtBC86S0=
Subject key identifier: 54:96:A3:FD:B6:F8:D9:C3:B8:29:E4:8E:DD:49:2F:54:89:AE:BD:0F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1ACC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VJaj_bb42cO4KeSO3UkvVImuvQ8.roa
Signing time: Thu 22 Dec 2022 06:13:01 +0000
ROA not before: Thu 22 Dec 2022 06:13:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 115.165.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6860 (0x1acc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Dec 22 06:13:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5496A3FDB6F8D9C3B829E48EDD492F5489AEBD0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:7f:a0:1b:01:2c:9a:91:0a:4d:4f:9e:d8:
eb:50:35:b9:33:bb:31:82:c8:72:88:09:07:91:59:
74:be:59:d4:fe:d5:6e:8b:ba:f5:44:86:97:4b:e0:
0c:83:a0:3a:f3:f3:97:70:8f:24:8a:47:c1:2d:74:
46:04:40:20:9c:c7:ab:fc:62:0f:b4:ef:2f:83:f8:
1f:1a:cd:4d:e4:fb:49:38:f4:d5:0e:7e:1a:f9:3f:
90:5b:06:b5:e2:26:c7:ab:1f:7b:32:9f:bf:43:72:
4a:91:47:a8:c9:b7:ba:2d:ba:e4:ae:87:14:55:af:
35:42:49:a7:a8:fe:63:11:77:7d:bf:d2:52:1a:65:
bf:53:1f:e8:9e:67:5c:a9:e0:51:ea:63:5f:b2:9b:
4d:fe:5b:02:80:f9:31:e9:99:34:67:1c:46:43:1b:
4c:cd:83:db:da:b0:b3:43:8a:7e:7b:b7:08:5a:14:
fe:f7:2a:5f:2d:78:bd:86:b7:6c:f5:d8:9c:a2:a0:
c2:54:88:f2:56:bd:63:66:e4:d4:77:cb:e1:ef:7e:
42:e2:a3:3d:4e:68:11:f6:4c:a2:1b:73:d6:99:6b:
7f:6f:f5:24:de:c2:87:5f:a3:fc:42:25:4b:6b:6b:
6e:df:c9:3b:d6:c7:d1:38:1b:ba:1c:63:e6:08:8a:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:96:A3:FD:B6:F8:D9:C3:B8:29:E4:8E:DD:49:2F:54:89:AE:BD:0F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VJaj_bb42cO4KeSO3UkvVImuvQ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8b:6f:4b:14:b1:52:36:ed:fd:14:04:cd:aa:12:91:da:ef:e6:
23:8a:fd:02:a7:08:44:46:ca:05:bb:01:1c:0c:93:ee:6a:d5:
6a:75:e0:44:ff:67:fb:c0:fb:29:a6:b8:46:19:5c:dd:b0:16:
bd:89:a8:a5:d3:76:ec:25:c5:49:0f:ee:43:fa:21:56:23:24:
57:32:63:61:36:02:0c:42:c6:b1:5a:00:1e:33:ad:64:e9:76:
a7:5d:02:b9:8f:36:5c:6c:77:81:3e:c1:1c:a2:a9:f2:de:73:
51:1f:80:ba:a0:f5:79:8c:28:b4:fa:f8:dd:3d:85:6d:44:1d:
73:62:c3:ff:bf:91:8d:98:24:b5:fd:f2:a4:35:06:1b:a3:bb:
3b:e8:e3:66:e9:9d:37:4b:48:a8:4d:23:d1:b9:e2:46:47:16:
1a:4b:30:aa:31:b3:54:5e:5b:b1:fc:9b:9f:93:e2:4d:88:fa:
04:50:37:fc:57:a8:ad:da:c6:29:ee:81:c0:7e:8f:62:36:fd:
77:b7:e4:26:8b:79:30:5e:a5:be:46:74:f8:16:68:d9:e3:91:
26:f9:6d:45:f5:fc:44:a6:13:ee:c0:a0:29:4e:e1:5f:cc:c5:
4b:8b:a0:b4:16:6b:96:8f:e3:de:3e:98:54:8f:1d:e5:a7:6d:
fd:18:65:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org