Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VS32u7qVUshZ_fyEQa-eElaKdjE.roa
File: VS32u7qVUshZ_fyEQa-eElaKdjE.roa (raw, json)
Hash identifier: ACAKkGWSiQl79auvZY1YepdG5jFxz4uvoA75jPKNRak=
Subject key identifier: 55:2D:F6:BB:BA:95:52:C8:59:FD:FC:84:41:AF:9E:12:56:8A:76:31
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 124E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VS32u7qVUshZ_fyEQa-eElaKdjE.roa
Signing time: Wed 29 Sep 2021 02:54:26 +0000
ROA not before: Wed 29 Sep 2021 02:54:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 115.165.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4686 (0x124e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=552DF6BBBA9552C859FDFC8441AF9E12568A7631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:8c:d5:65:20:e8:63:2d:d0:a1:75:01:86:
19:b1:64:55:94:94:82:f8:7d:94:8e:76:02:3b:50:
e9:a1:3c:41:df:c0:29:50:d0:22:25:6c:8c:e0:ea:
ff:37:51:84:0f:05:f5:4e:a4:04:30:7f:1f:fd:18:
f4:86:e5:4d:8c:ce:86:a3:77:84:63:88:e9:57:0f:
5a:31:91:7d:30:6f:c1:95:17:a5:1e:a0:3d:6d:b8:
2c:25:9e:03:d7:dd:b9:b2:33:f7:7f:df:7e:6f:4c:
5c:63:fc:58:4a:f6:36:74:57:e7:26:d7:5d:17:0b:
fc:2c:be:30:93:d2:b8:6e:93:c9:e5:22:be:b7:d2:
da:62:b5:5c:bb:d6:e1:bf:d4:48:f7:f1:3a:7a:60:
ab:3b:9c:aa:f5:16:83:f9:df:bd:b4:ed:59:31:8c:
0d:0e:f9:44:fc:40:7b:c9:0e:d4:06:24:7f:ff:4f:
8f:06:e5:4e:cd:f2:01:69:04:85:ad:f5:81:2e:de:
8e:2a:13:5a:f9:a4:7b:23:49:be:a5:98:a5:20:76:
22:96:6a:8f:de:c9:15:ac:fc:53:e6:11:5b:db:86:
85:f6:c8:0c:c5:21:44:a6:22:75:98:9e:1d:32:22:
21:34:6c:11:a5:66:6f:31:85:94:38:d9:b9:67:c5:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2D:F6:BB:BA:95:52:C8:59:FD:FC:84:41:AF:9E:12:56:8A:76:31
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VS32u7qVUshZ_fyEQa-eElaKdjE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.240.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:db:43:85:52:01:27:d4:74:b8:e5:de:9c:3f:36:92:7b:63:
06:0c:be:57:44:da:d6:e8:82:a2:3e:13:53:11:bb:9c:2e:39:
b4:32:7e:96:aa:67:12:07:c2:50:4b:25:7a:90:d2:f1:19:fc:
b5:b5:fd:59:02:a9:5b:b3:74:7e:47:cb:ad:2c:34:1f:fc:98:
76:c4:0a:4e:82:08:0a:d5:35:46:aa:63:fd:2a:d4:f1:cf:67:
da:4f:73:85:cd:a8:59:26:c0:9b:64:20:c8:73:21:40:82:bf:
ed:71:c2:48:7a:61:2f:2a:e8:52:1c:94:90:5e:21:14:c4:0a:
d9:1f:28:18:d3:d1:05:93:d7:49:ad:fb:19:92:6c:fb:9b:58:
e8:18:fb:d5:66:a4:0f:01:f5:9c:ee:2d:6a:80:75:ca:87:30:
18:0c:6f:f6:e0:bf:07:9b:87:9c:c6:ba:8b:6f:91:d8:29:a7:
3d:d8:fb:6d:9e:63:12:c6:53:85:06:70:2f:4a:0c:b2:85:23:
85:4e:b9:f4:ff:d0:a7:c4:c6:6e:6e:f0:89:10:15:e6:f9:9b:
ac:f9:b0:a2:de:8a:0f:d9:0e:87:2c:0a:6a:46:45:9a:aa:a0:
8f:ad:bd:33:99:57:eb:d5:fa:26:c7:3b:b1:b2:ac:3b:da:0f:
76:32:63:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org