Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/edoX1nM9t8h2IAdObCuWknar0PA.roa
File: edoX1nM9t8h2IAdObCuWknar0PA.roa (raw, json)
Hash identifier: keDc6VaHNA7hJbSyYPZmpXgP9oPq0pmFztVvcUpdVIo=
Subject key identifier: 79:DA:17:D6:73:3D:B7:C8:76:20:07:4E:6C:2B:96:92:76:AB:D0:F0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1245
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/edoX1nM9t8h2IAdObCuWknar0PA.roa
Signing time: Wed 29 Sep 2021 02:54:24 +0000
ROA not before: Wed 29 Sep 2021 02:54:24 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 114.198.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4677 (0x1245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:24 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=79DA17D6733DB7C87620074E6C2B969276ABD0F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:9d:ad:c5:f7:23:ff:06:b3:1c:7b:dc:e9:
85:06:c4:90:ca:db:9e:b1:6b:37:d8:1f:5f:9f:ba:
7b:6c:81:8c:37:48:a3:a4:cf:06:05:de:26:89:98:
b3:fa:46:dd:ca:2b:62:77:9d:0a:9d:a9:19:7a:d2:
82:b9:22:f3:97:35:96:4b:4b:56:64:d6:4c:42:bf:
72:82:79:fb:96:3e:74:b8:cf:3d:b4:e9:b8:0e:73:
b3:48:fc:65:94:29:be:61:1e:54:26:5b:64:ec:bd:
1b:51:ad:99:c3:1d:1f:c0:c8:8e:da:c9:75:04:89:
a5:20:ea:63:d3:c8:97:b3:a6:aa:80:6a:64:98:91:
86:0b:61:61:8e:37:44:65:01:fc:9f:50:96:a3:15:
07:63:03:cc:7e:ac:21:40:53:17:17:52:63:a6:9c:
3e:21:71:9a:ee:2b:b5:a8:f3:b0:9b:24:e2:26:30:
37:29:c9:d5:db:a3:e5:74:4a:83:37:4d:6b:a6:b0:
ab:49:b2:ed:05:bd:c1:ec:33:88:f6:f3:b3:e7:2e:
db:d8:65:87:32:9e:5a:de:70:76:d2:f8:72:66:f6:
84:7a:cd:b2:6d:36:90:92:4e:6d:a4:dd:64:fb:64:
42:35:f0:c6:5f:6e:97:1e:cd:07:01:12:3f:f9:e7:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DA:17:D6:73:3D:B7:C8:76:20:07:4E:6C:2B:96:92:76:AB:D0:F0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/edoX1nM9t8h2IAdObCuWknar0PA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.184.0/22
Signature Algorithm: sha256WithRSAEncryption
93:ef:99:77:d9:02:21:11:cb:c3:4c:c9:cd:29:6a:03:c2:9e:
8f:ef:05:68:51:f5:74:d5:13:39:20:98:ea:79:89:b8:43:f6:
da:b4:71:8c:55:23:00:d2:5a:2a:17:56:0c:36:f9:af:d4:b5:
6d:33:4e:7a:de:82:b1:12:f0:ee:d6:91:d3:55:e0:b2:ee:0b:
b2:d1:13:7e:d0:a8:0e:ad:a5:56:0a:05:e5:f6:00:ac:9d:b1:
2f:48:a1:ac:e0:a2:e1:40:68:0b:41:c6:b3:bb:de:21:0c:c6:
d2:a9:28:2a:59:51:29:01:01:e5:ea:4a:22:4e:13:d1:5c:a4:
f4:23:9d:f9:a0:69:9e:68:44:fd:b7:ab:4d:52:9c:77:eb:77:
1d:ce:6b:6d:54:22:e9:4f:5d:12:ce:13:da:7a:bc:5a:7b:0f:
38:f8:c0:e2:43:3a:69:b0:95:79:5d:63:2a:19:46:dc:b2:55:
a2:48:66:fb:3d:47:a5:9e:d4:e2:a1:9f:97:a7:fc:d3:e5:21:
5a:c1:28:c3:2c:fd:e0:fb:ea:76:d3:f3:0a:d0:75:ca:40:00:
77:18:10:5e:6f:78:26:b0:b9:38:74:b0:31:94:15:ec:e7:f9:
77:84:44:07:f7:dc:ed:2d:e3:37:a6:07:89:32:44:c0:11:14:
c4:d8:2e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org