Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YDT27bxNa9GlrmTJfGAG0SPMU_Q.roa
File: YDT27bxNa9GlrmTJfGAG0SPMU_Q.roa (raw, json)
Hash identifier: +0wxuaQ1fe85v+T+CvHlSKzH3oHUwMNd8QchN1pV+Zs=
Subject key identifier: 60:34:F6:ED:BC:4D:6B:D1:A5:AE:64:C9:7C:60:06:D1:23:CC:53:F4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B1E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YDT27bxNa9GlrmTJfGAG0SPMU_Q.roa
Signing time: Tue 29 Sep 2020 10:08:02 +0000
ROA not before: Tue 29 Sep 2020 10:08:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 114.198.160.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2846 (0xb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:02 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6034F6EDBC4D6BD1A5AE64C97C6006D123CC53F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b5:13:12:86:8d:f9:cb:8d:47:e3:b0:1f:a9:
b2:1f:ec:6c:11:7c:6d:c5:fc:cb:44:8b:9d:05:b4:
e2:21:29:51:50:eb:4c:87:c8:e5:aa:23:ac:c6:34:
36:e0:a8:c3:7a:2b:e0:5e:82:9e:cf:ed:a8:e8:b1:
78:91:cb:1c:e3:91:2d:6b:0e:cd:ea:f5:89:8c:24:
cf:ba:da:1b:7f:df:fc:87:6d:90:2b:90:0f:73:2c:
c2:9c:13:4d:48:8a:c2:d7:4a:6d:7f:88:5f:fc:67:
02:1a:74:c6:c2:5e:54:1b:c9:09:fa:20:f5:34:19:
01:26:aa:96:64:4d:d4:c8:7e:86:47:4f:2f:11:a7:
b4:71:9b:bc:02:a4:3f:8d:2e:59:49:ef:8e:1d:69:
ac:7b:ff:00:b4:84:60:72:e7:7e:5f:04:c8:21:31:
be:d4:be:55:f9:11:4b:2f:a0:69:cf:33:4d:9d:84:
24:b3:89:5d:fa:4e:39:0d:12:ad:31:a1:b3:4d:8e:
78:2a:91:7c:1d:db:c4:18:91:13:12:cb:05:28:8e:
45:9e:6c:3d:fd:f9:60:fd:51:cd:e6:32:98:6f:48:
9a:d6:c8:ea:0c:ef:70:08:12:5f:b4:7e:f2:27:20:
6f:20:bd:be:d0:ab:89:14:24:da:ef:a4:70:31:1a:
26:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:34:F6:ED:BC:4D:6B:D1:A5:AE:64:C9:7C:60:06:D1:23:CC:53:F4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YDT27bxNa9GlrmTJfGAG0SPMU_Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.160.0/23
Signature Algorithm: sha256WithRSAEncryption
57:c2:1e:46:7b:5a:75:85:27:c8:71:24:e5:16:24:ed:2a:d3:
52:49:2c:d7:96:71:54:f1:a2:bd:0c:95:c7:7d:c2:89:43:35:
c7:48:30:6e:32:7b:8a:8f:d4:d4:e5:30:0b:31:e1:9d:5f:71:
dd:47:74:c3:0a:56:db:72:64:5d:65:d4:03:e9:79:c5:14:13:
79:03:93:b3:06:1d:be:f4:5d:75:eb:bb:87:f4:a5:8c:15:bb:
21:d1:f3:18:da:b6:1a:d0:56:1f:3f:19:82:8a:d8:af:aa:48:
1a:77:9e:11:f8:6f:b9:62:26:2e:97:bc:2a:f7:28:4b:bc:9d:
a7:85:78:54:32:3a:f9:dd:1f:c4:d7:d6:aa:64:ca:f9:dc:55:
db:35:4d:c8:14:8f:54:dd:ca:a8:62:a4:eb:64:b3:43:44:61:
e0:a9:62:ea:40:5f:83:b2:f1:83:c1:eb:e2:b7:5f:56:fb:78:
28:12:88:1f:74:9a:28:9d:7e:89:a9:70:21:e5:90:38:01:de:
e5:93:00:1b:6d:42:9b:08:8d:25:61:25:8d:0d:2f:58:f7:fd:
5f:34:9d:8d:44:db:e8:ef:f5:d1:04:06:3b:4a:1e:2e:11:c2:
c3:0e:df:0d:94:5e:d8:cb:61:89:30:e3:d2:6e:76:20:a7:a1:
bb:84:01:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:37 2023 by rpki-client on console-ams.rpki-client.org