Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_uCVWXCpEzMBi73lzu1sfOk54g0.roa
File: _uCVWXCpEzMBi73lzu1sfOk54g0.roa (raw, json)
Hash identifier: SIm6nnFFvn45mZ5c1UjfBVfKHNoWYS8LwfFo9N7ob+w=
Subject key identifier: FE:E0:95:59:70:A9:13:33:01:8B:BD:E5:CE:ED:6C:7C:E9:39:E2:0D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_uCVWXCpEzMBi73lzu1sfOk54g0.roa
Signing time: Thu 15 Sep 2022 02:35:34 +0000
ROA not before: Thu 15 Sep 2022 02:35:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 211.76.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FEE0955970A91333018BBDE5CEED6C7CE939E20D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:25:6e:13:67:8f:aa:9c:af:f0:2f:af:93:
0a:a9:6e:19:de:e4:48:3e:d4:fe:14:fc:ab:44:5c:
ab:3c:ac:d3:a3:f0:1a:e2:90:8b:36:d1:16:3c:4e:
dd:14:9f:27:fb:03:ac:cf:70:aa:09:73:39:1c:cf:
15:f4:52:15:f1:e6:c1:a7:4a:f3:ee:b6:bd:69:f9:
a9:76:ff:c2:27:6c:d1:6b:ae:e6:c8:e5:d8:ad:a3:
ef:cb:f2:7e:97:3f:5c:e0:3b:9b:3d:db:d1:53:af:
08:a3:b6:46:32:7f:48:ff:90:d7:30:11:40:b3:e3:
7a:d0:b1:13:49:79:4f:74:f2:80:69:cc:21:5e:a7:
77:1b:21:ac:71:59:4c:0e:f8:cc:00:de:a5:f6:4c:
e5:45:bd:b9:68:a4:e7:bd:32:04:4c:d6:9a:ec:cf:
7c:4f:0e:d2:cb:93:60:f0:18:14:19:60:c8:03:15:
14:1c:22:d8:b3:52:9c:64:8b:97:60:47:90:c7:0d:
ba:9d:49:8f:a4:14:3c:ec:45:ca:ce:a3:e5:d0:5a:
f0:07:99:bb:59:33:da:9c:9d:fc:9b:f3:82:a2:5b:
5d:0d:6f:57:ab:e9:98:89:c3:04:0c:3e:01:03:b2:
ad:25:33:99:0e:34:0c:f2:cf:6d:1e:46:ef:3d:0d:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E0:95:59:70:A9:13:33:01:8B:BD:E5:CE:ED:6C:7C:E9:39:E2:0D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_uCVWXCpEzMBi73lzu1sfOk54g0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.40.0/22
Signature Algorithm: sha256WithRSAEncryption
95:9b:71:07:53:6a:7a:a5:6f:c2:4e:77:97:4c:b2:a8:fa:37:
5b:0c:f0:1b:49:77:b7:72:7f:7f:c5:d3:f2:09:f0:00:2a:5f:
67:01:5f:0d:0d:c8:31:71:57:f3:25:2b:3e:b3:11:7b:5c:94:
0c:78:82:e6:b7:ce:93:ca:eb:1a:5d:c7:fe:3b:53:72:6b:f8:
8e:74:07:f1:3e:88:fc:71:e4:25:4b:5c:89:15:53:a5:d2:07:
80:e9:ec:b6:64:55:0b:b4:d4:08:98:1d:0a:f3:a2:33:cf:0c:
66:81:a2:bc:4f:38:d2:c3:70:47:d9:2c:3b:6a:dd:73:94:6c:
bc:f1:59:78:71:0d:91:5b:1a:1c:6e:cd:99:c1:99:42:f3:96:
dc:32:12:d2:31:49:05:83:6b:98:9c:f9:83:b4:8c:5f:d1:cc:
de:6f:c5:ea:b5:c6:71:42:7e:7c:63:d1:bd:d6:56:16:8a:18:
d5:ac:85:5e:47:56:60:10:63:a0:f2:a3:3a:a7:67:63:f8:93:
42:51:8c:61:32:b1:38:ab:98:49:ab:28:84:18:85:1c:c3:56:
43:50:03:ee:3f:17:fe:aa:7b:ec:87:71:ac:b0:c8:72:72:16:
d9:d5:44:96:4f:0b:f0:2d:45:fa:4b:28:49:7a:20:25:f3:f8:
97:f6:e7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:53:46 2025 by rpki-client