Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ejAMMV0yiqAsc6P-QOeHl1WRIfE.roa
File: ejAMMV0yiqAsc6P-QOeHl1WRIfE.roa (raw, json)
Hash identifier: S06PXzEJSeOqmZoOXe1qrtF2oWN1BYQYnbIdtXGMX88=
Subject key identifier: 7A:30:0C:31:5D:32:8A:A0:2C:73:A3:FE:40:E7:87:97:55:91:21:F1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1535
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ejAMMV0yiqAsc6P-QOeHl1WRIfE.roa
Signing time: Fri 21 Oct 2022 08:45:08 +0000
ROA not before: Fri 21 Oct 2022 08:45:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 211.76.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5429 (0x1535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 21 08:45:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7A300C315D328AA02C73A3FE40E78797559121F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:9b:ef:de:2a:d5:41:39:0d:5e:8f:67:f8:
ad:03:85:1e:30:b9:c9:1a:96:81:ec:47:b3:25:4e:
54:ce:cc:96:da:c5:10:c3:13:02:68:15:bf:03:9a:
2c:00:43:2c:47:47:2a:67:7b:9e:6d:8a:67:b0:a5:
6d:0b:14:80:a5:d4:c8:d1:c0:f3:5b:e9:27:8d:9e:
07:0c:ad:02:6e:67:15:86:38:cd:3f:65:26:c1:36:
a7:b3:75:24:9a:d6:95:dc:b2:66:4c:df:5f:c2:e1:
75:d3:ef:c8:a0:5d:90:85:ab:49:31:d2:4e:fe:a1:
33:70:73:ba:22:02:40:49:99:68:0d:4a:44:9f:f1:
ad:b2:31:23:cd:9d:c6:56:58:78:56:7d:fd:8f:f4:
74:be:63:4d:16:ee:28:cf:5b:3a:c4:0f:de:65:a9:
11:66:1a:91:1d:68:39:0a:7e:d6:5a:d1:84:05:bf:
c7:ef:4e:91:cf:c5:a9:b8:b2:82:6c:b8:4a:f3:68:
8c:b3:2b:aa:a6:fc:0a:46:f6:11:14:9f:44:9d:33:
95:7b:a9:a2:ac:1b:aa:a1:a6:6d:ba:c8:1b:fc:ce:
31:01:13:3b:49:4f:1b:0b:e3:14:b0:cf:a7:6f:e6:
23:1d:67:63:a6:19:8d:42:80:86:26:25:e4:ad:da:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:30:0C:31:5D:32:8A:A0:2C:73:A3:FE:40:E7:87:97:55:91:21:F1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ejAMMV0yiqAsc6P-QOeHl1WRIfE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.48.0/22
Signature Algorithm: sha256WithRSAEncryption
49:e6:4a:93:8b:43:a7:80:85:2a:f6:75:b0:db:ef:52:0b:51:
7f:4c:91:37:f5:6d:32:3c:23:11:2e:41:83:fa:8f:96:4f:2f:
d3:b9:09:11:25:7b:1f:e4:9a:ce:84:6d:ce:26:47:b1:33:2c:
5b:fb:16:49:1c:f0:91:97:8d:a4:9e:0f:8a:bc:f8:50:ea:8e:
95:60:3b:45:9d:2d:e4:96:91:ef:0c:43:45:13:24:d7:4d:5d:
d9:7d:ee:43:f5:e5:0e:45:2f:75:b5:32:43:b1:19:9e:9e:d1:
f0:95:be:1e:cd:60:91:4d:3c:8a:a5:85:fc:b9:cd:75:10:7c:
2e:90:9f:21:68:09:8a:83:4d:88:68:ac:16:53:39:f9:f3:4b:
94:82:73:bd:1f:60:af:c4:e1:fe:73:16:3b:51:83:b6:69:26:
25:89:09:23:33:85:21:1c:6d:6c:26:6e:e3:12:96:cd:34:27:
f1:e0:94:0e:67:44:5a:21:25:11:b9:95:d9:7c:83:32:09:21:
c1:36:00:d4:cc:a7:6b:79:86:6c:ce:5b:3a:58:88:80:c0:0a:
5d:9d:12:f0:ef:9b:ec:bd:b6:36:80:b7:9b:16:72:8c:df:c5:
e8:43:13:8b:9b:0c:a6:c6:82:25:eb:40:02:35:1c:e2:0a:93:
20:80:d3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org