Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rIeOjoqP5PiCnyRZVzF3ij5ORJ4.roa
File: rIeOjoqP5PiCnyRZVzF3ij5ORJ4.roa (raw, json)
Hash identifier: XYYsohDi3gojpVEaSvgXfm2a2882UZnaTpRFULopg2I=
Subject key identifier: AC:87:8E:8E:8A:8F:E4:F8:82:9F:24:59:57:31:77:8A:3E:4E:44:9E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rIeOjoqP5PiCnyRZVzF3ij5ORJ4.roa
Signing time: Thu 15 Sep 2022 02:35:57 +0000
ROA not before: Thu 15 Sep 2022 02:35:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 45.64.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AC878E8E8A8FE4F8829F24595731778A3E4E449E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:1d:8a:c3:e2:03:84:26:eb:e1:6d:ec:42:
e6:01:4c:ee:8a:55:3d:f7:50:f8:f9:9b:3c:34:1a:
72:1b:d6:d4:42:a8:9a:f7:59:0d:fb:2a:b0:73:76:
03:d1:3d:94:17:5f:e6:f1:4f:77:39:44:69:65:ff:
60:13:51:65:c9:66:da:c4:63:4d:a5:c3:40:a0:a5:
76:a1:b7:7d:e2:6e:c5:49:9b:0a:44:a9:10:a9:a0:
63:f6:f1:09:cf:58:77:24:79:05:ac:ad:6e:54:44:
ce:f2:16:ba:20:60:a2:b0:3e:3e:2f:74:11:d4:15:
61:20:55:ef:e7:52:73:35:4b:24:d4:04:5f:ba:51:
a5:85:c0:f7:67:76:15:4f:7a:99:4f:00:7a:52:5d:
53:87:18:47:be:a8:2c:66:cb:5a:eb:79:d4:55:c3:
db:a4:e8:6b:98:41:84:56:5b:5f:94:b1:86:c0:4a:
56:a0:2c:5c:a6:dd:a1:dd:9b:3b:2d:2f:2d:03:bc:
4b:67:c8:a9:28:9e:0f:f9:2f:76:b3:57:99:33:72:
0e:26:c9:ff:65:1c:b8:e5:c1:9d:a1:dd:74:d0:3d:
fe:4b:1b:09:c8:de:9b:b1:43:47:10:f8:27:63:ef:
7b:ae:ff:b9:d4:aa:fc:a8:07:91:3c:58:29:2c:23:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:87:8E:8E:8A:8F:E4:F8:82:9F:24:59:57:31:77:8A:3E:4E:44:9E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rIeOjoqP5PiCnyRZVzF3ij5ORJ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.32.0/22
Signature Algorithm: sha256WithRSAEncryption
17:56:2d:70:45:2b:2f:b8:a9:7e:e3:f9:6b:73:6b:98:d1:64:
3f:86:6f:79:36:5e:12:bb:e9:e9:f2:30:ee:8b:55:33:ca:9a:
0f:4a:32:90:41:db:e5:47:c1:05:f0:0f:dc:3c:5b:c6:3f:3b:
1d:0e:e8:54:82:7b:66:7d:bf:17:4f:cf:1d:6e:d0:00:cc:f1:
81:78:33:c4:e5:e2:19:23:23:a0:b5:fa:4f:99:83:58:1e:23:
9f:e9:52:03:51:f9:05:ea:d4:cb:1a:37:3f:19:45:b1:e4:2d:
ae:94:eb:e2:d7:d4:da:ba:46:58:5e:9b:43:5a:51:7f:f1:4f:
b6:c1:5c:01:e2:d3:57:f9:95:81:d5:06:64:65:ae:5b:6d:10:
2e:48:57:a4:fa:5d:07:ce:30:31:31:04:a3:e5:b2:8f:6f:a6:
e1:66:c4:d3:04:11:3c:76:75:66:94:ab:d4:01:7c:c1:ae:f9:
d5:45:a1:04:ef:2e:84:1a:27:c1:96:99:c5:1f:1c:38:02:61:
93:05:8d:23:1d:38:70:0e:66:bd:2c:52:26:f4:0f:bd:41:d9:
f0:b3:7d:15:d4:77:81:c9:bf:56:70:1f:9a:fe:4f:81:4e:e3:
96:c0:c0:fd:b5:ba:dc:53:20:61:71:9b:52:3e:07:02:54:e2:
f1:b1:e3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org