Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hZBAe0BdAwfdNTOkOKoRxKxeiV4.roa
File: hZBAe0BdAwfdNTOkOKoRxKxeiV4.roa (raw, json)
Hash identifier: JPLG1vCt8D8NEHzVhs9jIZIDopM24hCIIB/CrmYclac=
Subject key identifier: 85:90:40:7B:40:5D:03:07:DD:35:33:A4:38:AA:11:C4:AC:5E:89:5E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 111D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hZBAe0BdAwfdNTOkOKoRxKxeiV4.roa
Signing time: Sun 07 Feb 2021 13:13:43 +0000
ROA not before: Sun 07 Feb 2021 13:13:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 115.165.220.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4381 (0x111d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:13:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8590407B405D0307DD3533A438AA11C4AC5E895E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:94:31:6d:4d:e5:f7:76:bd:2d:46:f0:cf:
31:24:49:6e:4e:f6:de:93:42:34:38:7a:ed:b7:69:
11:da:9c:5a:52:11:9b:74:61:86:f4:e4:a7:93:fb:
77:7c:dc:5e:bf:41:74:27:d2:47:e3:cd:46:c8:8b:
f0:5a:91:0f:33:42:4a:1e:69:52:66:ee:3a:77:1d:
03:7c:48:01:95:7f:6b:03:b6:48:9e:25:be:aa:72:
5e:83:5e:e3:bc:31:51:fb:c0:fa:a7:09:f6:c9:62:
26:a3:6a:37:e8:a4:06:63:b0:e8:aa:a1:ab:e3:54:
f8:1d:33:49:ed:71:49:3c:de:d3:44:a7:b7:ea:c7:
97:f3:05:a7:93:c5:2f:63:03:e1:f2:ab:c1:9a:78:
a7:57:6a:c7:81:44:d6:6f:89:5d:82:5c:0e:1f:a4:
99:f1:11:9c:78:d4:b3:f8:1d:e5:f5:a8:33:46:e3:
57:9f:aa:20:6c:a7:85:d9:b8:49:70:55:96:d5:cd:
c1:2f:f4:a3:f4:90:e8:d0:dd:58:c6:aa:ad:8e:e0:
78:92:16:56:ad:d1:02:17:cb:cc:8b:a6:e1:e6:64:
12:a1:c3:48:1a:59:8a:2a:a4:09:44:a3:07:f5:6b:
fc:e9:57:6e:3c:a3:5f:fc:f9:c5:c6:fc:1f:cb:9f:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:90:40:7B:40:5D:03:07:DD:35:33:A4:38:AA:11:C4:AC:5E:89:5E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hZBAe0BdAwfdNTOkOKoRxKxeiV4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.220.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:c9:96:c8:46:8a:54:28:17:07:2e:a6:7b:91:29:e5:0a:33:
05:da:21:cb:a0:07:80:c0:88:e4:55:66:8e:ba:da:93:a6:0d:
44:ab:a8:5d:93:04:5c:ce:f9:d6:34:d7:de:bc:17:f8:dc:47:
5a:49:de:d3:7b:d8:59:ff:4d:ee:0b:73:c3:e7:71:77:bc:62:
b4:8c:a9:27:99:63:94:76:c1:0d:54:77:e9:59:61:a1:1f:cb:
68:6a:3b:22:80:ea:8c:28:df:3a:c3:b4:aa:3a:b0:e8:e3:ee:
87:32:0f:e0:ed:5d:84:f4:75:ab:3d:7d:10:60:58:aa:97:a8:
5c:54:c9:52:4b:29:8e:5e:b8:da:3c:2b:f6:90:a1:54:7a:ad:
df:e2:7f:4b:c8:2c:50:01:f6:be:61:23:2d:7c:98:f2:f0:e4:
7d:31:3d:3a:40:5e:c0:32:85:62:d5:b0:c5:b3:8b:84:8d:eb:
16:db:52:a7:0b:79:67:d7:7d:02:b4:5b:4f:c3:13:43:72:50:
66:8c:b3:3c:98:86:1f:4b:7e:3b:2b:77:65:56:e8:96:7a:16:
7b:5a:a1:5b:55:29:d1:30:52:0a:91:01:d9:98:65:95:1f:f3:
86:f4:6d:7d:55:89:a3:3b:96:29:59:5d:4e:b7:5d:3d:8d:da:
21:db:da:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org