Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cFRYCch3EL-1gz8Zp-i4hx8WhSk.roa
File: cFRYCch3EL-1gz8Zp-i4hx8WhSk.roa (raw, json)
Hash identifier: 2+gTtuqcelUPEEvXL3+mDIpa/Vw6+Nm5Q5bioWhDoTE=
Subject key identifier: 70:54:58:09:C8:77:10:BF:B5:83:3F:19:A7:E8:B8:87:1F:16:85:29
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cFRYCch3EL-1gz8Zp-i4hx8WhSk.roa
Signing time: Thu 15 Sep 2022 02:36:41 +0000
ROA not before: Thu 15 Sep 2022 02:36:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 115.165.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=70545809C87710BFB5833F19A7E8B8871F168529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:ce:a5:2e:64:7a:01:12:11:bf:5c:c5:7b:
bd:2e:cd:5d:07:0d:2e:fe:b4:79:4f:a3:36:0d:1d:
ad:ba:69:30:f0:18:2f:d3:31:a4:c2:1a:c9:8d:45:
2f:92:be:f4:f2:1f:6b:a1:18:4e:e6:5a:4f:7c:3c:
81:65:fe:7c:b0:9c:98:6c:71:80:17:be:b3:e0:83:
b5:9c:d0:56:6b:63:f0:fe:d7:87:a8:67:c5:61:e1:
45:68:bc:ca:dd:03:b9:fb:58:62:07:b0:a8:ac:da:
2c:23:3a:2c:26:c0:7e:72:cd:ea:70:27:01:cc:4b:
2e:b6:95:a8:41:62:11:4d:15:07:a0:7a:64:d8:15:
ea:f8:20:b1:0f:1b:f0:07:41:9b:9b:f0:77:64:6e:
f5:e9:f8:93:ee:89:20:7d:a0:f1:d8:37:eb:e2:a9:
2e:0f:da:3c:f3:e9:5d:84:67:94:9c:e0:c1:04:67:
57:5a:37:c2:ca:55:46:4e:1f:7b:73:71:53:3f:69:
ee:37:b0:23:a0:1b:9c:6e:0a:4d:48:cf:b0:1e:9c:
67:69:51:6b:24:f0:f3:26:9a:97:83:81:8e:bb:a2:
83:52:ff:3e:8f:eb:b8:2d:71:89:ce:80:d4:1e:4b:
6a:bb:3f:33:7a:8d:1c:36:5e:33:c4:af:91:88:07:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:54:58:09:C8:77:10:BF:B5:83:3F:19:A7:E8:B8:87:1F:16:85:29
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cFRYCch3EL-1gz8Zp-i4hx8WhSk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:19:4c:a5:bf:78:f6:c5:54:0f:b3:0c:11:83:2c:4c:03:1f:
02:c2:68:ea:af:37:47:69:62:b7:7f:f4:a2:f7:61:73:4e:72:
01:fe:54:3b:98:ca:b9:b8:d6:37:3b:1b:be:43:69:b4:ee:ff:
c4:75:cb:a3:e0:ea:fd:6b:d6:75:a5:f5:e4:47:60:7f:66:ea:
e8:6c:c8:4b:80:30:a9:75:81:df:a6:66:e3:b0:60:70:2c:4d:
eb:13:99:1b:48:bc:c4:ae:20:65:16:0f:4f:bf:81:f3:91:49:
04:09:20:7e:6a:75:3f:ce:22:db:8a:eb:e8:3c:16:f3:80:b3:
5c:24:2d:82:90:89:92:2b:53:30:5d:df:86:0b:ff:60:29:15:
e3:54:a3:30:88:f3:99:3f:b2:99:63:8a:53:05:8d:86:12:e0:
f4:82:c2:59:20:1d:18:3c:c4:2f:1f:16:43:63:9c:5e:10:43:
44:5c:26:ee:4f:bb:df:39:61:16:99:0a:63:cd:5d:2f:92:25:
a5:e5:f3:23:ed:76:16:ea:d1:63:4d:2c:d3:29:81:6d:72:77:
c0:e0:89:bc:89:46:f3:73:cc:f0:67:1d:77:18:4c:94:ae:44:
cc:98:a4:5a:b8:bd:69:aa:99:2a:64:ab:53:61:83:9f:b8:06:
2b:64:81:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org