Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZVI6tzP-dyGC4K2SOCpEs706wKM.roa
File: ZVI6tzP-dyGC4K2SOCpEs706wKM.roa (raw, json)
Hash identifier: sELa4PzLkDQ2G5q5R1QnyOJsCDTWu+e+mMcSi4DSwUA=
Subject key identifier: 65:52:3A:B7:33:FE:77:21:82:E0:AD:92:38:2A:44:B3:BD:3A:C0:A3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1248
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZVI6tzP-dyGC4K2SOCpEs706wKM.roa
Signing time: Wed 29 Sep 2021 02:54:24 +0000
ROA not before: Wed 29 Sep 2021 02:54:24 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 115.165.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4680 (0x1248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:24 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=65523AB733FE772182E0AD92382A44B3BD3AC0A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:09:65:82:a3:d7:54:3f:31:74:96:1c:ca:
a4:1a:b9:e9:3d:53:28:d6:b8:73:ce:4b:e9:cf:f6:
3c:b7:ec:22:db:32:92:e0:3f:68:e2:68:77:dd:51:
7d:b5:7e:e5:56:07:69:a2:58:d1:5c:9f:24:05:7e:
1d:b5:b5:70:2c:16:4b:63:7b:6e:9f:7f:4c:a9:b1:
fa:a9:3f:6a:30:aa:8a:11:44:d3:2f:9e:00:13:e9:
ef:e3:dc:0a:3f:e4:68:6c:7a:dd:d9:7c:91:d1:19:
ec:84:6f:2d:e3:2d:7b:f6:cd:40:01:a0:58:6b:2e:
36:44:13:70:36:19:8e:95:6b:22:62:42:0c:17:7b:
8f:30:69:33:a4:35:a0:ec:00:87:74:bd:41:29:34:
78:c5:68:3c:92:fb:6e:63:91:3a:0d:13:e8:0e:17:
70:b2:19:73:66:51:b2:01:e6:ce:65:06:77:c8:e7:
47:47:9d:7d:09:63:88:1f:b3:01:a1:14:a2:fc:83:
43:47:e1:83:c4:1c:a2:5e:98:7a:00:f0:d3:49:d0:
83:6c:d8:d3:14:16:77:88:f1:86:c8:52:93:aa:0f:
ea:74:75:72:ca:a2:af:8b:ca:b7:12:b2:44:84:bb:
71:b1:ef:9e:72:b4:af:60:36:35:79:a3:7b:12:bd:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:52:3A:B7:33:FE:77:21:82:E0:AD:92:38:2A:44:B3:BD:3A:C0:A3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZVI6tzP-dyGC4K2SOCpEs706wKM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:e5:82:31:63:39:af:b8:86:2b:82:3a:d1:74:39:ff:99:bb:
32:8c:33:3d:5a:36:7e:5a:b0:f0:98:58:87:f3:2b:db:1b:21:
fe:fd:18:a3:15:b1:41:9c:9c:a1:41:1d:7a:6f:c4:10:d8:d7:
18:7b:eb:b3:89:11:73:8a:7e:b8:d1:4f:ce:b5:01:d2:73:52:
0e:0a:39:aa:69:59:c2:e1:65:fb:53:21:de:5b:36:cd:04:ee:
91:8f:4d:c0:ae:f8:e0:bf:13:ee:ff:e7:7d:f3:1a:3b:56:f5:
d8:08:ea:7f:22:a7:ee:4f:b0:88:d4:d8:2a:88:da:b1:2a:b0:
2f:50:ce:ed:bb:59:18:a5:f3:fb:fe:d1:98:0c:8b:e0:f6:57:
d3:7b:73:f6:42:df:d9:a0:7c:9e:c5:9f:b4:96:50:b4:c8:be:
53:da:42:5b:35:08:f0:0c:e5:04:70:72:87:56:94:4c:2e:a1:
79:cf:a2:74:1d:82:8a:4f:43:93:ef:62:2f:b2:6c:df:22:f5:
1e:d5:ab:47:66:fb:78:94:0d:19:91:41:3b:f1:6f:7d:e9:7e:
84:72:9f:6e:ae:97:21:4d:8c:e2:7f:41:27:11:c8:86:aa:d7:
57:9f:75:5a:ba:56:ea:8f:04:f1:09:df:ce:b1:e3:9c:40:e5:
82:0e:3c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org