Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o5AiMYTeb-gwUwRH80SUcn_b4V8.roa
File: o5AiMYTeb-gwUwRH80SUcn_b4V8.roa (raw, json)
Hash identifier: SthoKTVHOTXRQWCkWnsgl01jMnOAFbyPRQiKUjvLVfA=
Subject key identifier: A3:90:22:31:84:DE:6F:E8:30:53:04:47:F3:44:94:72:7F:DB:E1:5F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18F6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o5AiMYTeb-gwUwRH80SUcn_b4V8.roa
Signing time: Sat 22 Oct 2022 06:05:56 +0000
ROA not before: Sat 22 Oct 2022 06:05:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 114.198.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6390 (0x18f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A390223184DE6FE830530447F34494727FDBE15F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:f5:60:13:b3:2b:06:18:74:9c:db:5b:2d:
77:cf:9a:1c:c7:b8:32:37:21:b6:70:ff:90:9e:6d:
51:25:c5:f1:3f:d9:54:7e:a7:1d:4c:85:df:ea:d7:
56:82:79:0a:c3:cc:5a:e7:07:50:9c:db:17:25:76:
4c:43:22:39:67:76:e0:d4:0b:db:ba:f7:71:75:f9:
d6:57:b5:d1:3e:f7:00:a7:71:e9:43:01:06:cc:6e:
99:e6:85:58:a1:94:8b:bb:cb:e9:e2:8e:21:45:90:
cd:86:20:d0:6e:c9:a5:4b:48:c8:d5:51:d3:06:3c:
90:4e:83:c0:0b:fe:c9:51:0b:b7:47:5a:a9:75:79:
7f:2a:e4:f1:e8:62:ed:08:53:13:e6:de:95:bd:79:
ce:fd:c4:28:83:ad:a5:98:84:85:a1:dd:61:07:36:
63:32:25:6f:76:01:06:5f:a0:a6:4d:7a:86:54:06:
c4:3a:99:cc:0f:2d:76:16:0c:bf:08:59:78:c4:1d:
18:57:a8:2d:fc:28:9c:81:47:4a:67:c8:bd:47:16:
26:c9:2e:88:8c:54:8a:00:83:29:61:b7:a6:2b:62:
72:13:f2:11:bb:c1:a2:54:91:e4:3c:65:4f:a2:5e:
dc:26:7b:a8:85:b6:0a:2f:53:a8:82:92:1e:aa:05:
75:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:90:22:31:84:DE:6F:E8:30:53:04:47:F3:44:94:72:7F:DB:E1:5F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o5AiMYTeb-gwUwRH80SUcn_b4V8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.176.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:b3:56:5f:30:bb:89:12:df:c5:cf:47:a0:34:59:ad:e5:6a:
3b:b6:2c:7d:62:a4:d2:12:38:2f:54:14:82:55:39:96:03:c9:
c8:eb:d4:ee:67:dc:2e:c7:c5:44:7e:50:75:da:e1:cd:c2:a0:
de:76:c0:b4:5f:94:1f:e9:87:e0:44:de:de:7a:08:c0:fc:73:
ec:70:3a:a7:a7:ab:b2:8b:b4:85:cd:17:cd:59:71:63:d3:99:
6e:21:93:43:ce:af:d2:c9:f3:8d:eb:db:36:89:b2:48:25:ff:
8e:5a:e3:16:9b:01:55:a6:07:f5:ff:13:94:d8:bf:5f:4e:51:
00:74:9a:b8:59:bb:a7:2e:cd:ae:9e:52:ca:2d:0e:db:eb:a0:
47:23:9e:56:6c:19:23:81:89:39:66:5c:79:a8:4a:f9:e1:c8:
12:b9:0f:c1:1f:64:b0:ee:1a:ba:17:1a:3e:c3:48:be:1c:e4:
db:96:d1:10:ab:da:bd:c3:39:01:03:2e:cd:c3:83:10:02:2b:
7d:79:b2:f3:c0:b5:b2:01:4e:b4:5e:67:e5:9d:20:bb:cc:0b:
16:b4:0b:7a:78:95:6f:93:70:db:1f:60:e4:77:19:fc:ff:07:
62:57:42:ba:c6:62:94:7e:47:ec:58:ee:8b:fc:d2:66:f8:f0:
ab:5a:20:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org