Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/atqgm23ldHNdIIgr95tsMTKBtp0.roa
File: atqgm23ldHNdIIgr95tsMTKBtp0.roa (raw, json)
Hash identifier: xQUQ+Vs2UKijfddddSNH2SXQArRNXttwZw4UhyGKlhw=
Subject key identifier: 6A:DA:A0:9B:6D:E5:74:73:5D:20:88:2B:F7:9B:6C:31:32:81:B6:9D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B25
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/atqgm23ldHNdIIgr95tsMTKBtp0.roa
Signing time: Tue 29 Sep 2020 10:08:04 +0000
ROA not before: Tue 29 Sep 2020 10:08:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 114.198.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2853 (0xb25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:04 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6ADAA09B6DE574735D20882BF79B6C313281B69D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0c:03:f0:92:74:cf:15:aa:0d:24:35:3e:92:
85:19:9d:b3:b2:df:05:92:c7:42:00:cd:59:da:3e:
44:01:fd:e2:3d:1b:ad:a6:21:6f:d1:a4:a3:5e:fc:
0f:04:14:0d:36:97:74:b9:8b:e9:0a:e6:ef:65:50:
91:07:b9:fa:e8:7d:7c:e4:18:7b:92:dd:4c:27:ff:
62:74:19:7c:db:15:e4:37:9f:86:65:8b:ba:2d:8d:
1c:95:61:6c:7b:96:34:eb:4a:13:cd:ae:98:6f:2e:
7d:b6:3e:54:1c:96:f3:03:8e:ca:c7:2d:3d:57:3f:
03:78:6d:a8:4a:26:b7:1f:f2:db:b6:a7:2f:37:90:
f5:63:d7:75:97:f4:84:99:2d:02:5a:1b:b1:68:63:
bb:b0:96:8a:49:47:4c:d7:d3:67:06:12:95:d5:0f:
1c:8a:7c:86:ac:8c:ba:82:ac:29:c0:50:9e:de:01:
13:de:b3:cb:6d:57:f7:e3:94:71:af:90:9d:bf:03:
ab:36:ee:d8:b7:1e:a8:d9:62:1c:4b:eb:0d:f7:13:
34:42:ee:8e:6e:a9:eb:d1:6b:e4:6a:18:39:a5:bb:
0f:48:d9:75:f6:b3:34:7b:cf:78:d1:e0:55:da:9a:
c5:c6:e5:ef:0b:65:35:39:18:74:6d:22:23:d7:d0:
5d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DA:A0:9B:6D:E5:74:73:5D:20:88:2B:F7:9B:6C:31:32:81:B6:9D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/atqgm23ldHNdIIgr95tsMTKBtp0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.172.0/22
Signature Algorithm: sha256WithRSAEncryption
90:38:55:47:6f:2d:cd:31:01:ff:63:39:87:19:3c:1e:ab:0a:
da:39:d4:cd:9a:ac:51:be:fa:63:c2:31:ca:a6:6c:9c:09:30:
d2:a1:44:1e:b1:fa:ce:c9:87:e9:f7:ce:ea:3d:53:41:3d:fc:
a6:55:5e:78:ff:bf:8f:46:22:42:d4:35:dc:48:ed:2f:80:d9:
c0:ee:2e:82:0e:7b:55:e8:0d:12:ff:9f:0a:b8:32:8f:58:a2:
db:09:9b:14:f3:d8:1a:c2:e3:ba:67:1a:df:03:38:16:9f:93:
fa:16:60:58:1b:c8:6f:09:8d:0e:94:0f:58:fe:49:2c:73:02:
38:86:f9:8a:5e:86:0d:4e:90:38:fd:f1:3b:be:b7:86:73:6b:
6e:f7:72:20:7b:74:54:06:57:96:f5:b3:57:72:82:74:32:6b:
f1:f4:94:9a:9f:f4:dd:ec:41:25:26:84:b3:a7:fc:20:15:3f:
eb:f8:6e:39:e5:d0:66:62:c0:59:2f:9f:7c:6a:83:42:81:a5:
9d:d9:ec:80:b9:22:9e:f3:29:26:c7:de:20:76:0b:b0:44:e0:
20:19:39:b3:bd:68:f8:e8:db:b4:46:05:be:ee:99:62:d3:94:
fa:e7:04:5e:31:1b:63:7c:5a:3f:f6:e8:21:ca:90:c2:b9:83:
ff:78:ce:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:23 2025 by rpki-client