Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eX2paPUUx3jZopRhCafdWo8im9E.roa
File: eX2paPUUx3jZopRhCafdWo8im9E.roa (raw, json)
Hash identifier: 5ZkhurUe4sPvExwGwexZf43MxcJjxZFrlEBOitKelYM=
Subject key identifier: 79:7D:A9:68:F5:14:C7:78:D9:A2:94:61:09:A7:DD:5A:8F:22:9B:D1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1117
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eX2paPUUx3jZopRhCafdWo8im9E.roa
Signing time: Sun 07 Feb 2021 13:03:34 +0000
ROA not before: Sun 07 Feb 2021 13:03:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 115.165.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4375 (0x1117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:03:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=797DA968F514C778D9A2946109A7DD5A8F229BD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a1:55:ee:24:13:22:89:2e:5f:e1:72:ac:eb:
ba:6c:e0:d5:b4:81:fc:24:5e:a4:bf:43:8b:cf:96:
9e:04:b3:d0:c1:20:92:a7:d1:84:22:7e:e2:dd:19:
02:bb:5e:f7:1c:d9:de:eb:39:28:db:7f:a6:24:10:
40:5d:2d:8c:34:0a:9f:75:7e:21:6b:e0:a1:9c:aa:
18:7c:d3:c0:35:25:31:4d:8a:99:00:b6:18:45:18:
79:75:4c:c2:cd:86:d9:53:81:62:37:48:43:ef:0c:
ad:60:dc:a2:8d:da:57:ca:cb:72:26:2b:1c:ef:83:
8f:1a:62:0c:f4:e0:1d:6f:df:d3:c1:12:6f:63:59:
c7:16:5e:0d:bd:57:7f:93:a0:14:b8:e6:89:8c:34:
c3:ea:f2:5b:a2:3e:b2:be:2d:4f:b9:8a:d8:cb:00:
3c:22:4e:96:a6:45:21:1f:a7:2a:84:0d:d3:be:e0:
4a:25:11:77:6a:dc:da:f8:dc:ca:3e:a9:56:91:ab:
26:8b:1b:46:07:e1:f3:92:0c:46:3d:f2:59:f5:64:
95:c1:be:95:4b:11:21:bf:d6:98:55:79:83:67:34:
42:45:a0:57:cc:cd:30:8e:6e:71:10:09:b1:5e:c6:
29:b4:61:d8:13:27:ce:06:b3:1d:d5:17:f5:7e:92:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7D:A9:68:F5:14:C7:78:D9:A2:94:61:09:A7:DD:5A:8F:22:9B:D1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eX2paPUUx3jZopRhCafdWo8im9E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.196.0/22
Signature Algorithm: sha256WithRSAEncryption
21:39:c2:12:e3:8e:18:aa:97:47:11:a2:13:bb:c4:03:79:22:
11:6e:52:b0:b1:8a:01:18:a9:9f:fd:c8:7f:71:af:a0:e4:8f:
7f:66:61:2c:38:b8:a6:5e:71:66:ed:e8:12:01:ac:0c:b2:38:
4d:07:d6:62:d7:e8:3b:1c:b5:ff:0e:17:d1:e0:b8:e6:24:a3:
15:c6:b3:a9:f7:f6:8c:91:44:3b:dc:43:03:7b:43:f1:6a:12:
6f:43:67:ec:63:23:a1:f7:b7:11:b0:c3:e2:ba:4f:3f:b6:df:
f0:20:69:b1:4c:5a:4d:f0:47:7a:fc:b0:02:10:ff:77:29:ab:
ee:0c:79:d0:1f:73:d7:4a:45:fc:51:ef:f4:14:09:04:87:8a:
f2:6b:4b:60:46:ce:8c:53:8e:3d:60:85:56:18:a7:da:68:e8:
41:24:47:75:46:76:83:56:d4:73:c9:45:06:a0:1b:47:17:a0:
09:05:3d:44:e6:4b:29:b0:b6:5e:35:e6:5d:16:5b:66:d3:a5:
bc:59:89:cc:08:86:00:be:4b:da:fe:d4:98:7d:97:f2:6b:f3:
c7:8e:a8:c7:ae:15:4f:ed:c9:d6:a5:2b:73:bd:33:bb:7b:ce:
a4:fe:37:c0:0c:41:ce:56:4e:b4:b3:46:75:c2:a1:cd:dc:a6:
7e:45:21:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:38 2023 by rpki-client on console-ams.rpki-client.org