Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xSfL3Fd3poLC4nW3nqvQwkiWOh0.roa
File: xSfL3Fd3poLC4nW3nqvQwkiWOh0.roa (raw, json)
Hash identifier: 7Wx4KPMY5Prq/rEKfZonpCO3kvYzFGnK9tX0hL1CCDo=
Subject key identifier: C5:27:CB:DC:57:77:A6:82:C2:E2:75:B7:9E:AB:D0:C2:48:96:3A:1D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 124F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xSfL3Fd3poLC4nW3nqvQwkiWOh0.roa
Signing time: Wed 29 Sep 2021 02:54:26 +0000
ROA not before: Wed 29 Sep 2021 02:54:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 115.165.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4687 (0x124f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C527CBDC5777A682C2E275B79EABD0C248963A1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:97:c9:54:0c:7c:d7:6c:8e:26:f4:2e:e9:
4a:7a:09:73:17:09:c7:08:ef:f0:a6:dc:b6:af:ce:
e1:e6:f0:b2:d5:a1:43:39:c2:fc:92:88:5a:f3:08:
e5:91:a2:13:97:86:e9:13:80:19:70:d8:38:9a:4c:
80:15:c2:ea:ca:c0:8d:12:57:34:6a:b1:cb:8f:66:
af:ea:7d:7a:71:5c:a8:1f:6c:c7:0d:e7:0f:af:62:
96:be:5f:9d:e4:dc:d2:56:ca:d2:66:e9:b2:93:ec:
e4:a8:08:c8:2e:0e:11:bb:3e:1a:db:01:10:c0:f8:
b3:31:b1:ea:06:c1:54:d6:b5:de:06:f7:38:06:2a:
ef:dc:8e:23:3a:38:14:4b:01:80:7d:a6:23:ab:6b:
90:a9:47:02:af:88:98:26:6a:7a:be:b3:da:e5:c7:
61:ed:b2:f8:7d:3e:d2:ad:0a:9e:e5:9c:6b:b6:8b:
4b:03:5d:ae:80:27:9e:04:24:1a:9d:60:63:81:5d:
7a:70:ad:76:1b:75:ba:9f:f8:39:f1:c2:11:8d:3c:
16:6f:ba:97:93:19:42:23:dc:fa:e7:a2:e4:4a:f0:
84:cd:f9:66:27:28:a7:49:f4:29:59:4c:ae:e1:5e:
31:77:75:3e:61:bc:ad:ed:6c:77:62:29:f0:fb:90:
35:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:27:CB:DC:57:77:A6:82:C2:E2:75:B7:9E:AB:D0:C2:48:96:3A:1D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xSfL3Fd3poLC4nW3nqvQwkiWOh0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.248.0/21
Signature Algorithm: sha256WithRSAEncryption
61:9b:bf:60:1f:f8:9c:7c:56:19:59:40:0e:68:ea:f3:17:75:
7b:55:40:12:79:2d:ac:8d:5c:a6:88:4b:64:f4:99:f0:e1:6a:
b4:fc:d9:42:ce:75:54:2b:01:e6:09:8e:1d:1e:fd:a0:6a:96:
eb:d0:bd:e8:1d:9e:ff:7e:d0:d9:b5:eb:5f:33:64:23:a2:8d:
78:c4:79:5f:09:23:60:48:ff:ee:91:22:02:0c:cf:6d:dc:30:
3b:8b:5b:c4:92:ff:78:54:2b:f7:1d:5e:72:71:0b:a4:26:58:
db:9d:17:69:82:fe:ca:77:48:84:7c:0c:cc:aa:2b:de:43:65:
43:5e:1a:96:ae:a9:3b:e5:74:88:a5:19:7b:d6:22:0b:6b:a6:
e6:28:22:62:b7:ce:5b:31:73:5e:1e:12:d9:ea:a8:f7:ef:ca:
71:09:75:d7:49:02:b0:32:de:de:42:1a:f7:49:76:69:da:ea:
78:0a:eb:d0:72:c9:13:ae:1f:e7:03:c0:6e:9e:d6:20:24:ae:
79:16:38:a9:69:98:2e:5d:d1:14:d1:0c:5a:08:7a:16:d0:92:
26:68:3f:55:3b:22:e0:cb:35:5b:1a:26:86:bd:47:2c:b1:7c:
52:af:8c:bb:bb:b8:a8:cd:45:f2:42:a6:75:b7:08:80:7f:fb:
91:a7:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org