Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l1OAP54mZ2i-1vPG6OGaNvi0GbI.roa
File: l1OAP54mZ2i-1vPG6OGaNvi0GbI.roa (raw, json)
Hash identifier: Q8TGy6l2R0z7JB9tG77PYnpAedXQ6YkEsPnCIlJMrIg=
Subject key identifier: 97:53:80:3F:9E:26:67:68:BE:D6:F3:C6:E8:E1:9A:36:F8:B4:19:B2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18DA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l1OAP54mZ2i-1vPG6OGaNvi0GbI.roa
Signing time: Sat 22 Oct 2022 06:05:48 +0000
ROA not before: Sat 22 Oct 2022 06:05:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 115.165.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6362 (0x18da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9753803F9E266768BED6F3C6E8E19A36F8B419B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:16:bb:1c:34:01:6f:9c:ef:d2:f1:e5:29:
a3:04:29:cc:49:8e:79:19:f3:13:7e:a3:4a:88:f2:
7b:9b:4d:03:dd:07:11:71:94:1e:9d:24:f2:21:4b:
ef:e5:f3:7d:e6:30:2e:e7:c1:69:74:e7:84:6f:f6:
58:c5:c5:56:9b:44:76:b7:80:f1:ee:85:7f:c1:07:
68:14:78:d3:39:dd:96:04:05:45:0a:a1:19:64:19:
df:c6:99:09:ca:6e:ea:62:09:89:9d:8d:03:71:78:
03:94:ac:0a:e2:e9:d2:c5:f9:70:d2:0a:53:ce:4e:
32:b3:e2:97:0f:f1:f1:82:e9:93:59:7d:72:55:54:
95:81:62:51:55:9d:3a:67:5e:f6:77:be:76:2a:96:
1f:29:2c:58:9a:2b:82:49:fe:b3:ce:ee:5d:e4:e6:
4c:41:12:cf:1a:1a:40:ad:4c:2c:3a:d1:49:19:94:
1b:26:a9:02:6b:42:c2:74:b7:f8:7e:26:ce:24:83:
d6:07:86:71:3c:e4:fb:a9:46:6b:83:61:1f:91:d9:
4b:34:bf:61:b9:8b:3e:8f:40:7a:16:5f:5e:3b:4d:
96:0d:13:cc:c3:aa:88:89:63:a7:51:c6:6e:39:01:
bf:8e:82:d7:cc:56:50:4a:e2:d4:e6:07:7c:02:22:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:53:80:3F:9E:26:67:68:BE:D6:F3:C6:E8:E1:9A:36:F8:B4:19:B2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l1OAP54mZ2i-1vPG6OGaNvi0GbI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.192.0/22
Signature Algorithm: sha256WithRSAEncryption
87:d2:75:9f:03:e8:ff:f5:cc:18:b1:14:9f:fe:3d:c9:ad:f7:
d5:5a:19:45:24:28:73:db:ac:ab:58:40:f6:85:43:06:42:a7:
52:34:00:2f:4d:20:e3:68:91:51:fd:67:54:c0:3a:24:b8:d0:
86:47:e4:38:71:56:4b:e0:ae:f8:c9:b8:bd:71:ca:f9:62:b6:
30:65:1b:30:8f:9c:19:6e:10:fe:48:75:b6:a2:cc:99:4d:d8:
cb:30:5e:4f:dd:3d:76:ff:c9:da:75:bf:8d:57:ed:0a:88:ad:
2a:c4:a8:98:62:64:a6:30:00:f3:ad:60:41:47:5d:2d:f5:ec:
fd:b9:0a:fc:51:c1:98:d5:f2:f3:06:91:a3:3a:57:ae:89:bc:
a3:d0:4d:44:25:e7:a4:e5:bf:2d:ad:7e:46:b5:76:90:bc:2a:
06:c0:9f:64:5f:73:28:df:64:8c:94:19:25:b3:aa:3b:96:95:
b4:88:2d:f4:cd:b5:b4:33:de:da:9b:e5:6c:e1:aa:c7:1c:1c:
e2:a7:91:10:c6:93:33:4f:e4:78:c5:d0:50:72:87:f3:5f:e5:
02:03:47:06:42:00:0e:68:ba:c1:8a:9e:56:fb:54:3c:30:b0:
6c:3a:1c:88:b3:5f:ca:da:8b:20:5b:e0:e0:44:89:6b:19:22:
15:dc:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org