Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YyuHM9hw05rDVl2lpKg5yk8lRvw.roa
File: YyuHM9hw05rDVl2lpKg5yk8lRvw.roa (raw, json)
Hash identifier: sdGKsPTFcz0i3pUDc6N3fY7bgKNbbEIcoYkeDMR/QOQ=
Subject key identifier: 63:2B:87:33:D8:70:D3:9A:C3:56:5D:A5:A4:A8:39:CA:4F:25:46:FC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1984
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YyuHM9hw05rDVl2lpKg5yk8lRvw.roa
Signing time: Sat 22 Oct 2022 06:06:37 +0000
ROA not before: Sat 22 Oct 2022 06:06:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 115.165.208.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6532 (0x1984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=632B8733D870D39AC3565DA5A4A839CA4F2546FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:c1:8c:c8:fa:27:38:7e:d1:ce:dc:62:d5:
90:af:4a:43:a3:7c:4b:1a:0b:be:00:70:be:e1:cd:
11:72:c9:d5:36:e8:01:fc:ff:49:01:4b:bb:b4:a1:
bd:4d:c9:ce:7c:fa:79:c8:04:69:18:08:0b:7e:8d:
77:dc:e9:e4:2e:34:ef:e2:44:cc:a4:16:a7:b8:00:
71:e6:d8:97:84:db:bf:3d:7c:50:9b:3e:b8:01:f9:
fd:18:d4:68:66:be:4a:90:de:48:26:6c:aa:61:8a:
f1:56:95:60:48:e0:4e:d4:55:99:c2:ce:35:90:8a:
85:40:73:73:38:1f:bb:62:ba:39:63:81:70:f4:9d:
30:d5:bc:ae:1c:6e:dc:a3:c8:78:a6:cf:b8:33:53:
2c:b4:9f:c0:d4:33:cb:dc:44:a3:72:b8:ee:6b:b4:
1a:bd:ca:a6:ad:19:d8:5a:d5:db:f5:ec:b4:91:7b:
14:88:f3:cc:77:d7:d3:77:da:48:75:1b:c7:0d:6a:
dc:3f:8e:fb:20:73:f6:0c:52:33:f2:91:34:84:fb:
7d:23:2d:07:7f:6b:fd:94:e8:52:67:92:92:88:90:
59:63:1b:9d:c7:b0:7a:36:ff:e9:3d:50:87:57:3b:
cd:36:6b:56:f7:ae:62:33:01:75:3f:d7:90:72:5f:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2B:87:33:D8:70:D3:9A:C3:56:5D:A5:A4:A8:39:CA:4F:25:46:FC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YyuHM9hw05rDVl2lpKg5yk8lRvw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.208.0/23
Signature Algorithm: sha256WithRSAEncryption
21:69:81:54:5d:67:6c:b0:30:8d:f1:e4:03:1e:d0:af:a9:e5:
dc:3f:c7:e1:54:55:c0:f0:ea:e6:8b:76:bc:b3:7d:80:70:d3:
02:9a:14:91:07:69:be:90:2b:c0:e9:44:47:ba:8f:75:fe:70:
00:91:7c:6b:76:26:89:51:82:32:b7:b8:fb:ce:07:c3:60:b7:
3a:ac:48:bc:d3:79:2b:86:d9:64:c3:39:59:1a:45:70:46:40:
17:6b:78:bd:e4:5b:91:3b:fa:ba:a5:59:92:b0:d6:b3:14:ee:
09:3c:a0:b4:95:74:b6:db:a7:54:3a:f2:4a:aa:ec:75:08:a2:
56:c2:71:00:b4:e9:13:d3:7e:60:f0:36:6b:c8:55:30:a1:37:
9e:e1:db:67:02:7e:4c:02:bb:f9:31:c8:cb:41:50:5d:52:85:
a7:8f:46:ea:7f:e4:81:76:e2:3f:74:11:f7:4b:11:b1:00:15:
22:c2:81:a1:b1:92:e2:20:0f:ed:e0:74:7f:7e:2d:83:0a:e0:
a1:29:27:5e:99:fa:35:15:9e:8b:d7:70:ee:e7:dc:44:12:8a:
1b:6c:f5:27:28:e4:36:4d:bd:45:4e:48:a1:b0:71:9f:61:2d:
51:8f:7f:e0:25:ca:c5:56:0c:1b:72:ed:72:b1:5d:4e:c4:2b:
11:1c:08:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org