Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mogN0FGEvP_dyvY3IBMzVjVkal8.roa
File: mogN0FGEvP_dyvY3IBMzVjVkal8.roa (raw, json)
Hash identifier: dBXXQqGh9o81CNByvIVmpEyUBiJgwYrx8WmAH/lxt+Y=
Subject key identifier: 9A:88:0D:D0:51:84:BC:FF:DD:CA:F6:37:20:13:33:56:35:64:6A:5F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F37
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mogN0FGEvP_dyvY3IBMzVjVkal8.roa
Signing time: Sun 07 Feb 2021 12:33:18 +0000
ROA not before: Sun 07 Feb 2021 12:33:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 115.165.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3895 (0xf37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:33:18 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9A880DD05184BCFFDDCAF6372013335635646A5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:72:8d:e5:1e:3a:51:1e:e7:9d:63:1a:a5:81:
e4:78:35:2d:c7:e2:1a:0f:fd:2e:75:ac:4e:9c:dc:
65:12:43:18:71:ad:81:8c:14:40:10:5a:09:93:55:
bb:bb:ea:e3:f7:dd:35:e5:81:18:8d:e6:d1:31:43:
95:47:81:a4:5a:e7:08:98:e9:24:3a:34:0d:a8:a4:
b4:ca:00:36:a6:e6:ca:56:82:35:2f:ca:33:b5:fb:
ad:4b:38:66:87:07:b3:d0:86:b0:39:58:a6:33:f3:
59:e3:ec:10:49:1e:8d:77:d9:49:9f:29:a1:34:7b:
1a:81:1c:fc:d6:ba:32:b1:d8:5a:3e:cb:37:8e:39:
f5:7f:03:bb:17:44:90:b0:de:22:0b:71:d4:e4:e9:
ef:2f:4f:b5:60:ae:28:23:95:76:8b:78:73:6c:bc:
e2:c3:35:dd:bb:17:f5:9e:f2:3d:74:80:e6:7f:b9:
b7:45:39:87:67:33:75:bc:20:44:5b:7b:c0:17:1f:
1b:8d:5b:b4:b8:99:f0:ef:93:b5:a6:fb:c4:cd:38:
52:0f:d1:71:69:1f:0a:7e:43:09:70:fe:c4:5b:c9:
27:66:dd:ae:b9:05:8e:36:4b:fe:0b:37:69:e5:c5:
4f:99:85:26:44:24:a2:39:e9:8d:aa:45:1f:7d:2b:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:88:0D:D0:51:84:BC:FF:DD:CA:F6:37:20:13:33:56:35:64:6A:5F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mogN0FGEvP_dyvY3IBMzVjVkal8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.240.0/21
Signature Algorithm: sha256WithRSAEncryption
32:1a:a0:c7:fa:4d:76:76:18:78:8e:27:cb:fc:a5:af:fe:40:
b0:21:ab:dd:cc:01:bd:6e:bd:9b:e4:0d:ed:b6:c5:9e:0f:89:
17:91:f2:8e:3c:cd:39:4e:cf:9f:f9:c2:21:ca:bc:c5:78:cd:
53:f3:05:18:36:e6:dc:47:97:c1:ed:49:6d:6c:10:43:cc:2c:
61:2c:77:d8:03:97:87:20:94:a3:9f:67:19:c9:7c:07:01:5b:
74:34:9b:b3:64:1a:a7:26:2c:42:c0:fd:78:a5:59:bf:0c:f8:
57:df:8a:13:71:73:91:23:c4:3c:94:34:4c:cf:61:3c:c5:32:
aa:cf:46:ca:ff:7a:d0:a3:6d:75:d5:40:90:69:4c:76:55:16:
aa:dd:b8:85:b9:94:5b:69:a1:62:2b:97:10:ca:38:5a:0b:d5:
7c:1d:f8:c8:8f:15:e6:57:08:d5:d7:0b:b0:0a:0e:69:05:e7:
fa:50:12:2e:10:9e:40:75:9b:27:a0:8d:05:00:2a:a2:6a:4d:
36:66:c6:c3:3e:88:55:c1:99:80:b9:90:b3:57:52:30:97:b5:
b3:85:94:a9:9d:34:aa:a0:45:51:f1:dd:e4:97:fe:13:da:c9:
f3:5d:ec:6f:30:6e:04:e2:71:90:bb:69:b1:60:45:06:20:84:
ae:b3:06:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org