Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/igoZZHtnKmG7c3SFnHihPb3Zeb8.roa
File: igoZZHtnKmG7c3SFnHihPb3Zeb8.roa (raw, json)
Hash identifier: nfusIDUi2ssQPVvXTh+mT1OmvkqIG1g5fNECdsop/yE=
Subject key identifier: 8A:0A:19:64:7B:67:2A:61:BB:73:74:85:9C:78:A1:3D:BD:D9:79:BF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1AA5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/igoZZHtnKmG7c3SFnHihPb3Zeb8.roa
Signing time: Thu 22 Dec 2022 01:26:09 +0000
ROA not before: Thu 22 Dec 2022 01:26:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 103.225.0.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6821 (0x1aa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Dec 22 01:26:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8A0A19647B672A61BB7374859C78A13DBDD979BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:86:c6:9d:29:07:46:79:00:55:85:a0:1d:
d5:58:31:f2:09:22:a6:d8:80:62:dc:14:11:82:28:
d2:1d:4b:fc:f1:13:b4:ea:1a:4a:67:2e:f7:ce:57:
b7:86:b4:6c:08:d9:3c:04:9a:c4:ae:2a:3a:90:d1:
7f:c5:1e:2f:92:4d:e2:6c:ae:47:7d:99:16:11:82:
26:5e:22:b2:26:a2:62:16:a1:d7:2c:61:a8:90:65:
1a:dc:7c:65:45:2c:ee:da:a6:c5:46:c7:65:c9:fd:
26:1b:f1:a2:f6:0c:a7:73:af:5e:f7:ea:38:fb:36:
24:af:a9:8c:53:49:4d:1b:aa:a1:30:9e:c2:5d:dd:
23:90:ff:b8:1c:71:35:45:3c:5d:fb:03:35:4d:b7:
51:6d:7c:f7:7d:b5:b7:b7:c5:3d:88:70:9b:5c:a1:
42:23:eb:33:34:db:d7:f9:5b:e4:8f:20:3f:5c:0a:
97:c4:82:ff:7f:07:2e:7f:b8:a3:5a:a9:64:64:f4:
60:ce:34:67:7f:d5:37:dd:70:47:27:c5:f2:3b:9b:
77:e5:3c:4b:34:44:0b:8e:1b:ae:2b:6f:4c:65:64:
46:8e:b6:a0:4b:1c:4f:b7:b4:63:65:8b:a8:cc:80:
16:38:8e:74:ea:ea:f4:76:f4:fd:60:ab:bc:b7:c6:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0A:19:64:7B:67:2A:61:BB:73:74:85:9C:78:A1:3D:BD:D9:79:BF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/igoZZHtnKmG7c3SFnHihPb3Zeb8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.0.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:41:1d:79:a5:d5:3f:a8:4a:9a:03:d5:45:5d:e9:15:dd:86:
68:e9:82:fe:a6:e2:1e:02:c6:c8:42:af:7d:c8:36:c3:78:7a:
50:e7:5c:df:d3:72:fa:42:d5:54:68:68:b6:61:80:b2:08:4d:
97:c1:29:0a:9e:03:1a:d6:9d:31:17:6a:68:7f:76:5f:a2:26:
e8:5e:30:2b:5b:90:b9:9f:d1:57:14:d3:a1:88:aa:6f:37:8e:
31:ed:7b:cc:bb:f2:d0:fe:c9:43:6d:c4:db:b7:d2:32:3c:c7:
cd:b1:7d:31:67:4d:ee:bf:aa:8a:8b:ca:2d:33:e4:8c:2e:d7:
aa:1e:a1:ea:ab:02:bc:b4:a2:ab:de:4f:73:8f:56:72:03:61:
27:fe:f4:f0:b5:36:d8:cf:eb:11:80:65:07:96:c0:ef:2e:e1:
9c:45:fa:fd:78:dd:70:d4:99:7f:14:d6:5a:e2:bf:a2:b6:a7:
7d:87:b8:3f:75:90:b9:60:62:07:b0:d9:a4:b8:1c:77:93:2d:
13:6a:87:28:bb:76:1c:91:85:88:67:c1:3f:59:0d:b4:a2:c1:
a6:a1:a6:0b:85:94:b5:23:9e:c1:9b:c7:76:2f:bd:33:b0:ca:
13:ff:db:36:b7:b0:22:5b:8b:02:3a:86:27:e7:1e:77:1b:20:
fc:f9:a3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:40 2025 by rpki-client