Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sTSMZIkdrCPzmo0P00dktVTqpKk.roa
File: sTSMZIkdrCPzmo0P00dktVTqpKk.roa (raw, json)
Hash identifier: NS2tNj4KGifxNCvJLpZ3C2mbe4GdeNQfsNqFIFvPfUo=
Subject key identifier: B1:34:8C:64:89:1D:AC:23:F3:9A:8D:0F:D3:47:64:B5:54:EA:A4:A9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B20
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sTSMZIkdrCPzmo0P00dktVTqpKk.roa
Signing time: Tue 29 Sep 2020 10:08:03 +0000
ROA not before: Tue 29 Sep 2020 10:08:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 114.198.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2848 (0xb20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:03 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B1348C64891DAC23F39A8D0FD34764B554EAA4A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fb:c3:3b:66:53:3e:15:89:d8:30:05:84:4c:
c2:2f:f2:63:a0:36:43:26:c4:d8:d6:ae:a1:e3:68:
19:24:fe:7f:c0:65:21:66:8c:83:ba:d3:7b:f6:61:
6d:27:8a:ef:18:79:12:1e:54:27:79:67:e1:9e:2c:
23:b2:60:f5:83:f7:86:6d:04:f4:22:6a:55:cb:a7:
de:de:97:0a:8c:10:24:82:cb:40:10:d0:cc:1d:fa:
e0:fd:0d:2d:8a:17:9c:1a:66:67:31:60:00:8e:10:
be:b3:b1:0b:b1:98:2f:59:f8:b4:6f:f0:a6:aa:6d:
2d:73:e5:66:b0:6e:d1:a7:2e:27:48:1f:af:a8:9f:
81:69:fc:8b:78:d4:71:b5:df:8d:ab:e4:b4:f2:a0:
7e:b9:2b:96:d7:e9:86:f8:11:6f:42:7c:f1:63:b1:
73:50:9b:f6:fe:17:e7:3e:59:54:d0:b9:0d:00:0e:
fb:0c:ea:37:4b:e2:da:1e:87:89:2b:11:c5:28:c7:
29:9b:14:b6:6d:aa:a7:80:ad:54:e4:82:93:b4:76:
8d:93:61:57:45:ba:e2:61:2e:8b:96:cf:5c:9d:df:
b1:a0:6d:48:5f:c7:ee:ad:65:45:ed:a9:5e:35:c1:
78:b0:f6:ec:ce:b6:aa:ef:f5:e6:5d:06:c3:9b:02:
09:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:34:8C:64:89:1D:AC:23:F3:9A:8D:0F:D3:47:64:B5:54:EA:A4:A9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sTSMZIkdrCPzmo0P00dktVTqpKk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.163.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0e:97:15:77:26:2b:ae:79:aa:0c:bf:4e:2b:17:96:d7:5b:
48:58:2e:85:5c:30:dd:9f:0d:cb:ba:ea:e0:13:fd:fe:ee:2f:
ae:1f:fa:8b:de:a1:af:b6:21:41:5c:38:96:97:ab:e5:de:80:
88:a1:b7:20:dd:ff:2b:07:4b:4c:19:af:3b:0f:6f:09:98:ba:
aa:5f:f3:1c:25:1d:f7:34:d3:08:39:21:9a:59:75:93:5e:fd:
45:5a:2c:4a:f1:d6:0d:78:88:cd:79:4b:65:70:bb:33:36:6b:
61:6f:26:7c:32:95:e1:92:1b:c3:cb:67:f2:b0:fc:39:f5:93:
e1:25:4e:f5:a6:d1:79:84:91:ac:0c:68:14:d7:e6:b2:f5:75:
b7:5a:51:06:ad:b1:65:71:ab:96:50:c1:2c:71:c6:2f:5d:d2:
7d:0d:2e:2e:63:bb:0d:9e:00:db:c0:ef:16:46:aa:bc:06:f2:
14:5b:43:97:c0:81:fb:19:f5:5e:24:44:93:a0:88:28:e0:e9:
02:ac:ec:9f:5c:d3:5d:fa:c3:ba:78:fc:ba:53:18:5f:d5:77:
80:f7:07:ba:70:4a:d9:d1:11:f9:ce:7c:da:0d:e2:87:af:c5:
22:78:61:18:9f:35:ec:b8:a7:15:87:3c:fd:73:0a:87:a2:50:
b1:48:5a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org