Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eyVsXb49gt9aHoaZWX-vIUzDKe8.roa
File: eyVsXb49gt9aHoaZWX-vIUzDKe8.roa (raw, json)
Hash identifier: 4i1Mb9rkZgONlX4jgdVQndo0/J5pIQ06Pd17tUHvc9M=
Subject key identifier: 7B:25:6C:5D:BE:3D:82:DF:5A:1E:86:99:59:7F:AF:21:4C:C3:29:EF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 192C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eyVsXb49gt9aHoaZWX-vIUzDKe8.roa
Signing time: Sat 22 Oct 2022 06:06:11 +0000
ROA not before: Sat 22 Oct 2022 06:06:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.160.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6444 (0x192c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7B256C5DBE3D82DF5A1E8699597FAF214CC329EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:72:60:ca:32:25:9d:3e:34:e9:8c:0d:00:76:
61:86:2f:e5:71:5a:75:ff:40:af:76:57:35:31:2c:
da:14:32:af:ef:2a:35:e8:81:eb:ea:a3:9d:e0:32:
db:c3:31:ae:45:14:d0:12:64:da:04:e7:c3:89:97:
8d:eb:f9:26:1b:b1:3e:54:52:7e:77:c1:97:30:17:
fd:c1:b5:89:6e:50:b6:15:ee:3b:4a:db:1e:37:b4:
5f:ba:de:38:ec:e9:21:ec:8f:4e:ea:ac:94:52:b2:
16:a7:b4:bd:21:ba:46:46:03:5a:23:7f:7d:20:3e:
9b:23:99:74:93:71:61:1b:8a:69:e7:71:0b:81:06:
02:c9:de:d1:72:df:f7:70:f9:be:3b:7d:f6:29:66:
bc:bc:b1:43:21:eb:56:53:4f:67:d0:38:03:9c:ab:
85:c1:8c:1e:c1:3a:93:26:34:3d:71:33:78:9a:ef:
5e:14:2b:ee:ff:cf:b4:9f:a4:44:ca:e7:40:88:91:
a4:fa:3c:1b:92:1c:32:83:75:80:a9:10:01:c4:ee:
4d:51:0d:53:91:50:2f:62:d5:1c:10:8c:97:50:ba:
6a:8e:9e:04:30:fd:15:eb:f4:17:46:7d:06:9b:68:
30:19:ed:21:48:c2:5f:68:43:32:3d:f4:e1:ce:c3:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:25:6C:5D:BE:3D:82:DF:5A:1E:86:99:59:7F:AF:21:4C:C3:29:EF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eyVsXb49gt9aHoaZWX-vIUzDKe8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.160.0/23
Signature Algorithm: sha256WithRSAEncryption
17:75:54:7b:3f:e8:e1:4a:42:4c:05:81:5f:7c:80:92:a6:81:
f0:2e:1a:0b:11:0b:63:33:26:ee:ae:42:2a:ed:e7:ee:15:1e:
33:8f:f5:30:3b:91:b3:c6:01:27:f0:54:ef:0c:42:d9:c9:dd:
85:34:cd:0c:0c:68:c0:b3:99:24:73:0d:72:f0:58:d8:d1:1a:
77:24:22:50:14:f5:f9:c0:60:ff:51:d1:fa:50:67:67:89:67:
23:55:e8:79:ff:6f:a5:b6:ec:3e:08:42:14:81:f9:a5:c9:d9:
b6:da:bb:96:11:9d:30:a9:b6:0c:68:3d:2d:5b:e6:48:ef:bf:
de:af:3e:d7:62:07:db:03:8e:d2:d6:02:79:c3:73:ce:76:29:
55:61:9c:57:cd:9e:11:b0:bb:14:c1:0c:c3:ca:8a:b3:00:91:
2a:4e:66:d5:41:c2:8b:f4:69:d3:93:d8:5f:3a:4a:c7:85:09:
47:ca:ce:40:aa:b1:d5:90:1f:1c:ea:d8:ed:63:7f:56:7d:dc:
c3:76:bc:62:53:4f:da:f0:32:c8:76:02:e1:51:b5:7e:8a:ce:
5b:6d:a4:72:7b:c4:c6:c9:ca:86:15:a7:cc:89:78:84:92:2b:
5a:2d:ca:d9:ad:8e:1e:44:60:06:04:2f:d5:11:1c:6b:e8:bd:
60:a9:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org