Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_PufdmOkvwZ5UQLyftSU8KKgYH8.roa
File: _PufdmOkvwZ5UQLyftSU8KKgYH8.roa (raw, json)
Hash identifier: qR3RLp6mTbTM5sXnZG6BKOH2/BojjWTkHWPJxxa6Z5g=
Subject key identifier: FC:FB:9F:76:63:A4:BF:06:79:51:02:F2:7E:D4:94:F0:A2:A0:60:7F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1119
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_PufdmOkvwZ5UQLyftSU8KKgYH8.roa
Signing time: Sun 07 Feb 2021 13:13:36 +0000
ROA not before: Sun 07 Feb 2021 13:13:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 115.165.208.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4377 (0x1119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:13:36 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FCFB9F7663A4BF06795102F27ED494F0A2A0607F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:3f:76:80:04:d3:86:a9:e1:f7:6d:90:3d:
c4:7e:e7:92:12:2f:00:5e:01:62:26:ab:d5:e8:7c:
17:48:a8:dc:9f:05:f2:20:5e:58:db:8d:94:3d:c9:
41:c2:28:7c:c4:a0:12:a4:87:2d:a9:b1:9b:29:12:
4e:c2:5c:33:6a:65:d5:97:f2:95:fc:e7:66:14:6a:
b2:54:44:b8:1c:80:ed:08:bd:05:45:0e:f3:f7:8b:
c4:14:88:f3:9f:cc:e6:7d:87:35:6d:1f:7c:5e:50:
a8:5e:ce:71:fc:e2:79:1a:14:14:c5:d5:df:a6:8b:
00:f3:4c:e4:13:86:db:4b:bf:28:49:c9:91:21:3e:
18:45:69:53:0b:7a:23:ed:8b:0a:22:9a:8d:6b:7a:
fd:5e:ef:ef:73:47:a9:8b:62:50:2d:de:f4:90:f1:
d5:fb:50:b1:05:bc:c1:75:64:e4:19:4f:fa:d4:8a:
44:51:63:33:51:d4:cb:58:31:42:c2:e1:8f:5e:15:
e3:6b:e1:90:b7:72:e8:9d:04:9f:b7:cf:a7:68:9a:
ae:69:8f:ae:04:15:8e:b0:97:f5:65:27:d0:9c:f5:
4f:64:ab:ac:49:58:ce:da:5f:52:5d:82:b4:3a:70:
f5:ef:f2:ff:90:06:c8:c5:5c:8b:28:9d:fb:65:35:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FB:9F:76:63:A4:BF:06:79:51:02:F2:7E:D4:94:F0:A2:A0:60:7F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_PufdmOkvwZ5UQLyftSU8KKgYH8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.208.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:ff:e0:16:71:c4:01:7a:aa:0d:71:5c:d7:f1:4d:f0:d9:92:
6c:92:da:f8:b0:a4:58:01:e9:06:8d:aa:52:78:4c:44:e9:99:
f6:a3:63:77:8f:07:64:06:fc:07:79:df:fa:0f:ac:e3:6e:c7:
bb:e4:1f:5e:26:a7:db:14:23:31:16:b8:dc:92:6b:32:14:32:
2c:81:6b:43:b7:d0:3e:58:dd:ac:40:9e:a5:aa:8d:ae:0f:72:
39:90:13:fc:5b:4b:51:ce:3a:75:5f:86:b4:66:3e:66:27:48:
4d:8c:c0:c8:74:ea:af:6d:de:cf:d0:e8:1b:a1:3a:0e:ef:83:
47:0d:d8:53:d6:fc:12:1c:03:61:3b:ad:31:2e:2a:47:13:41:
33:39:a2:8c:4a:4a:f5:92:8f:74:cd:ff:9c:08:6e:37:da:39:
bc:88:0c:e7:a5:37:7e:2c:ba:bc:ec:51:3d:29:44:5e:0e:c0:
e4:fe:85:71:b2:9f:54:5c:a5:50:a2:57:0d:1f:65:04:85:65:
e1:4e:4d:29:81:67:9e:45:68:22:ae:fe:0c:65:61:41:95:40:
80:d2:c7:18:75:7f:73:90:ff:55:96:ba:84:49:0c:1d:e8:3a:
8c:ab:11:48:3d:a0:75:64:59:e9:29:d4:70:74:02:28:97:d4:
1a:29:95:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org