Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dEWBJjb5PGNehUdIn7-6VSI4S_8.roa
File: dEWBJjb5PGNehUdIn7-6VSI4S_8.roa (raw, json)
Hash identifier: kOJstYatAj8YdbfN1zB3oZOO3ScwyFWwt85hoA3OtNA=
Subject key identifier: 74:45:81:26:36:F9:3C:63:5E:85:47:48:9F:BF:BA:55:22:38:4B:FF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B36
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dEWBJjb5PGNehUdIn7-6VSI4S_8.roa
Signing time: Tue 29 Sep 2020 10:08:09 +0000
ROA not before: Tue 29 Sep 2020 10:08:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 115.165.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2870 (0xb36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:09 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7445812636F93C635E8547489FBFBA5522384BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a4:91:b2:92:99:5a:17:ae:e4:0a:68:0d:e0:
44:01:48:a0:1a:c8:86:c6:35:49:bd:71:b8:c5:af:
55:cd:28:e2:ce:77:7d:fd:a4:69:91:0f:b0:73:bc:
62:a7:a7:84:03:0b:cb:2b:e3:63:b4:0d:62:b1:c2:
4f:d7:4c:97:f3:30:45:55:28:2b:18:13:5a:94:98:
eb:85:2d:26:ef:2a:de:8b:e3:b3:62:46:e2:a9:fb:
28:e2:55:1b:e3:ea:3f:62:58:2f:ab:9c:36:d4:e3:
47:e3:60:c5:bd:4e:d2:ec:ce:98:5d:49:99:f2:2b:
39:22:dc:f1:e3:60:18:e7:ff:56:40:3b:ea:b7:68:
98:00:36:c5:28:97:e7:88:aa:d3:b1:6a:6c:84:88:
96:44:75:c1:67:25:cb:e8:42:28:09:ce:a8:68:ba:
8e:1e:17:d7:d4:0f:53:d9:11:84:d9:61:ff:82:14:
53:a3:04:82:50:f3:36:b2:fa:ef:d0:37:55:20:b3:
55:61:35:17:f2:9d:98:8b:12:62:9b:96:52:f6:df:
7b:0c:d0:89:88:80:63:ec:25:45:6c:2b:3a:dc:1e:
26:d3:28:4e:ff:86:0f:e0:d2:53:2b:42:4b:d9:03:
15:81:ff:40:cc:35:7f:3c:27:73:2f:e8:48:58:25:
d2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:45:81:26:36:F9:3C:63:5E:85:47:48:9F:BF:BA:55:22:38:4B:FF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dEWBJjb5PGNehUdIn7-6VSI4S_8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.236.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:3f:ac:19:b8:a8:79:f3:ac:e8:82:48:01:5b:fd:d9:08:01:
02:71:2a:69:04:bd:f0:0d:09:d1:f3:8d:d6:e6:26:6f:ea:14:
31:b4:c0:f5:47:ae:e6:64:3c:0a:d4:96:fc:33:3a:0c:2e:cd:
cc:17:c7:ef:9b:63:c0:c3:98:79:81:15:31:65:19:79:11:b3:
e7:23:1b:2e:61:4f:5f:fe:fb:c5:75:2a:28:6f:d9:49:4b:71:
dd:7f:d9:fc:ef:77:d4:46:09:57:58:14:bb:1a:87:c4:a7:f6:
23:f1:9a:3d:77:3c:f5:b8:34:66:00:4f:e2:ac:a0:4d:77:4e:
21:31:32:56:7d:1c:c1:d3:be:44:66:1f:ff:60:2d:61:90:44:
f4:94:a5:fb:e1:66:c6:67:7b:12:c5:f9:cd:37:84:fe:25:a8:
2a:d6:58:05:dd:6e:db:e1:5f:4e:14:80:54:ca:f2:1d:83:65:
25:12:64:f0:75:51:1c:c8:87:4f:b8:18:68:a3:ea:90:a0:66:
4e:cd:b4:b6:dd:89:33:28:71:8c:c1:59:f4:2e:c4:2c:06:3d:
9f:05:3c:9c:d3:6c:11:8c:bb:da:9b:e2:ad:cb:7f:e7:06:b5:
24:47:d0:f5:5d:1e:f6:1f:7e:09:64:b1:ea:7c:26:18:90:bf:
59:2f:66:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org