Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s21ZLhmyb_i5UCk87y_fTSoX8LA.roa
File: s21ZLhmyb_i5UCk87y_fTSoX8LA.roa (raw, json)
Hash identifier: j3zDmDd8syS6gCNqv63v7gdfNY4rD1DGEsqH15qMPLU=
Subject key identifier: B3:6D:59:2E:19:B2:6F:F8:B9:50:29:3C:EF:2F:DF:4D:2A:17:F0:B0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1AEC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s21ZLhmyb_i5UCk87y_fTSoX8LA.roa
Signing time: Thu 22 Dec 2022 10:21:27 +0000
ROA not before: Thu 22 Dec 2022 10:21:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 103.225.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6892 (0x1aec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Dec 22 10:21:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B36D592E19B26FF8B950293CEF2FDF4D2A17F0B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:ce:44:38:49:14:f0:0d:f5:c7:44:f8:75:
3c:18:43:9f:79:2f:34:cc:ad:65:52:42:b0:d4:55:
39:29:4c:be:d0:d4:33:46:5b:a9:54:c0:5a:9e:cb:
27:62:91:b7:3d:1b:9a:be:4a:08:5b:78:d8:1f:65:
86:89:c8:f1:de:d3:8a:83:e7:b2:8b:6c:fb:5b:f2:
91:c7:e7:dc:7d:c1:62:6b:3f:09:47:2f:d4:2d:45:
4c:69:a2:d1:1e:2a:13:3b:18:a4:58:ad:a0:18:33:
bc:76:90:e1:c5:6f:cd:d8:cb:ac:97:be:d7:d7:89:
f6:15:47:3f:2f:3d:34:08:11:db:4b:33:ea:74:a0:
4b:af:63:cd:04:7b:9e:a7:9f:d9:9c:ec:21:33:45:
8c:fd:29:3c:a4:7f:05:22:3a:aa:5e:24:f6:7f:03:
29:3c:69:0b:00:2c:48:21:a3:c2:9f:17:7f:91:37:
87:8f:7f:0b:36:f6:66:aa:4e:26:a5:14:aa:89:3c:
7a:64:9e:4f:f6:9e:5b:cf:00:b9:7e:80:84:62:07:
d2:e8:0d:4b:af:68:61:7b:88:5a:e9:bb:23:fb:4b:
8a:3c:c9:cb:b8:d9:76:26:8d:15:d4:e5:0f:5d:d1:
cc:87:ab:1d:e9:7d:11:79:73:9b:dd:ea:a0:70:37:
7e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6D:59:2E:19:B2:6F:F8:B9:50:29:3C:EF:2F:DF:4D:2A:17:F0:B0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/s21ZLhmyb_i5UCk87y_fTSoX8LA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.225.0.0/24
Signature Algorithm: sha256WithRSAEncryption
33:79:a0:29:86:b5:e4:b3:30:73:a3:61:b8:cd:06:b4:9f:11:
86:76:f9:1c:ea:36:39:d5:17:e2:18:31:34:93:45:03:87:95:
45:35:97:8d:c6:71:63:f2:c2:bb:7e:98:fa:1e:b8:33:93:c1:
b5:b7:ad:7a:99:f8:9a:d1:d6:34:46:93:9e:5b:85:13:54:52:
e0:94:e7:7f:da:93:5d:bd:77:95:ab:fe:eb:c2:69:ad:96:a6:
48:d5:37:22:36:56:d5:c7:6a:c0:9e:14:ec:c4:d8:95:8e:ff:
da:8d:00:64:39:65:cf:bc:3b:c3:45:73:e8:1f:7e:af:e0:2b:
c7:20:56:fe:cc:62:4f:c6:bd:99:65:f4:45:c9:f9:d9:b0:3d:
5e:33:1b:c8:6b:91:7c:cd:1d:6c:53:71:a4:f2:84:ea:cd:90:
8f:bf:86:f3:68:3a:a4:03:07:bf:cf:b0:36:f8:5b:30:df:fe:
da:a3:57:ae:1a:f0:a7:4d:81:b3:de:bd:a9:cd:4b:f2:cc:2f:
31:17:5b:4d:99:8b:7c:38:d3:36:ac:13:b4:4b:4b:1b:ef:7b:
ac:84:d9:f5:0e:54:4a:4b:29:02:31:1b:6f:5a:5a:18:b3:4c:
56:ff:3d:75:2d:94:58:87:88:a2:26:06:0b:7c:9a:f2:82:cf:
95:98:75:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org