Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iD48Nuzsal_rksgItW6UIOpKpRI.roa
File: iD48Nuzsal_rksgItW6UIOpKpRI.roa (raw, json)
Hash identifier: 2MaGurCZpmKRswiT6NazqLyYjMVUirzHsaoeu3oQsuw=
Subject key identifier: 88:3E:3C:36:EC:EC:6A:5F:EB:92:C8:08:B5:6E:94:20:EA:4A:A5:12
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1AEE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iD48Nuzsal_rksgItW6UIOpKpRI.roa
Signing time: Thu 22 Dec 2022 10:33:49 +0000
ROA not before: Thu 22 Dec 2022 10:33:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 114.198.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6894 (0x1aee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Dec 22 10:33:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=883E3C36ECEC6A5FEB92C808B56E9420EA4AA512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:c3:e9:38:4c:55:a9:92:04:4d:d2:e3:df:
bd:f4:82:27:50:8d:6d:96:f5:9d:0b:fd:8c:07:16:
34:38:89:a2:6e:3e:68:d3:74:eb:9f:19:22:d4:b1:
97:f0:5f:b3:df:2d:a9:fa:f9:2a:39:af:57:c6:c9:
d7:05:d1:5b:94:76:56:b9:75:27:e9:fb:e5:82:79:
52:5d:86:d4:39:65:b7:a6:c3:2f:de:e4:87:08:3b:
db:1c:e2:91:7d:f5:65:c5:68:26:6c:bb:48:eb:85:
13:21:8a:6b:1c:80:5d:e9:2f:7b:5d:ad:1a:41:6b:
7b:ce:6b:fb:72:a7:51:c5:e7:6e:b5:89:41:88:92:
ca:dd:e4:6b:f4:a8:1b:fb:62:99:d1:94:9b:d1:a1:
b3:91:6f:af:29:b4:88:2f:87:03:26:4a:7c:0b:bc:
3c:d5:f2:6b:63:91:12:97:ce:b8:c6:de:13:56:a9:
a3:09:d2:11:70:be:a4:67:69:92:25:a3:13:7e:81:
15:f8:11:09:ed:7f:e0:d1:08:08:4e:60:2c:ff:98:
5c:d0:67:db:2b:1f:1b:ed:c8:2c:94:14:8f:72:7e:
dc:2d:74:79:71:fb:8d:a3:f0:5a:fe:b8:82:38:3f:
99:9a:51:75:ef:4e:23:fa:82:fc:3b:7c:4d:b9:90:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3E:3C:36:EC:EC:6A:5F:EB:92:C8:08:B5:6E:94:20:EA:4A:A5:12
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iD48Nuzsal_rksgItW6UIOpKpRI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.160.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:55:ea:20:c6:60:27:0b:47:0f:62:1c:d4:49:c5:f3:26:8b:
67:1b:65:dc:7f:50:9e:46:f1:f0:8b:22:c0:b0:2c:b9:d4:0a:
1e:87:ce:26:e1:11:0e:3f:7c:5e:70:e1:16:fb:38:9b:d0:d4:
fa:40:43:b9:fb:ee:09:59:be:4f:5b:a4:66:a9:78:69:f2:68:
63:0e:cd:2e:b4:89:a2:1c:6d:57:96:9b:b1:30:3e:bd:b9:9f:
82:49:ec:d7:0d:c3:5e:d8:59:a7:78:c0:88:b6:8d:47:94:0d:
03:02:bd:0e:bf:79:3e:3b:dc:ca:9a:65:af:31:97:1b:46:26:
39:c3:40:80:67:4b:9e:8d:31:a4:b0:ec:33:85:96:3a:a3:a6:
61:4d:19:31:76:ca:1d:54:4c:fb:81:f7:ad:26:37:5a:87:67:
d3:00:f0:8b:0b:9b:bc:19:de:45:85:73:46:8f:f9:17:f4:fe:
7e:a0:f5:51:5b:80:e3:d2:a4:62:92:77:7e:fa:62:6e:75:19:
4b:a6:22:62:93:c5:9a:13:87:86:6a:c7:f2:8c:16:9f:f5:12:
f2:91:1d:dd:b8:1a:a2:31:e7:de:4a:93:be:01:2f:6f:b3:5c:
eb:4f:93:2c:3a:f3:1d:dd:c0:e8:9f:ca:60:0c:2d:ad:9f:40:
e3:3b:98:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org