Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ysXuQ4ppZNjypDuqZN_DYatK46A.roa
File: ysXuQ4ppZNjypDuqZN_DYatK46A.roa (raw, json)
Hash identifier: hUGKcNl6OictWOqliKDtHtz2LUVqiMylHeeBUsFiPeI=
Subject key identifier: CA:C5:EE:43:8A:69:64:D8:F2:A4:3B:AA:64:DF:C3:61:AB:4A:E3:A0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ysXuQ4ppZNjypDuqZN_DYatK46A.roa
Signing time: Thu 15 Sep 2022 02:36:33 +0000
ROA not before: Thu 15 Sep 2022 02:36:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 115.165.218.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CAC5EE438A6964D8F2A43BAA64DFC361AB4AE3A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:6d:68:5e:89:c5:63:a5:9f:2b:23:04:94:
fb:d2:68:fa:aa:a6:2b:20:df:a2:f3:f8:94:78:3a:
59:b7:13:d6:25:6d:b9:12:1f:e5:9c:78:35:61:72:
7a:d6:80:ce:c8:40:a8:ef:5f:bd:8f:8d:7f:ba:4b:
37:56:35:dc:c0:ee:06:08:6c:bf:3b:d9:b2:99:59:
88:10:95:fe:8c:c2:e4:a1:82:47:59:cd:c0:0e:27:
e3:0b:b4:14:25:e5:71:3a:e7:f1:cb:02:6c:7d:70:
fd:15:5e:6d:a7:68:2c:3d:e5:5b:d3:57:ec:db:cf:
b1:6d:b0:f3:a4:d5:c3:b6:81:b5:f1:84:32:7c:d7:
37:43:8d:09:2d:5b:2f:bb:5d:af:fc:b3:d5:7e:7f:
d8:cc:3a:b3:92:74:80:7f:41:72:94:2e:60:a7:4d:
69:45:6f:a2:9b:63:b4:8c:1f:c4:28:ad:a8:dc:2b:
99:b3:1c:b0:17:dd:06:1e:db:2c:79:33:29:97:63:
0c:1c:69:c0:45:0f:8a:e6:7f:e6:ee:e4:f1:ba:b8:
3e:51:9b:fa:e8:cc:3a:7b:0e:e8:9d:6b:62:36:27:
d1:24:f3:46:25:a1:dd:60:7a:8e:7d:8b:45:70:2b:
0f:74:1f:ac:7b:cb:32:25:12:0c:d4:73:0c:34:a2:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C5:EE:43:8A:69:64:D8:F2:A4:3B:AA:64:DF:C3:61:AB:4A:E3:A0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ysXuQ4ppZNjypDuqZN_DYatK46A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.218.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:92:a5:ba:76:8e:e9:c1:29:d6:0e:68:d2:3f:ac:62:1a:78:
73:fc:4b:90:57:75:52:3e:d7:cf:6f:b6:15:46:95:19:f4:25:
05:1c:f8:b1:b4:c8:81:dc:3f:59:f1:72:fb:a1:f4:cd:32:c6:
29:5d:0d:a2:07:cc:61:b1:58:05:a8:c5:df:71:eb:59:38:6c:
c6:f6:ce:5c:76:69:24:f4:1c:5e:66:90:37:e1:27:6e:40:76:
f7:c8:49:a1:cb:0a:ae:f1:68:95:a2:92:d8:9d:c8:ec:14:42:
fb:f2:6b:fb:4d:f4:0b:20:c9:58:1c:37:07:a3:49:2f:3d:3c:
ba:ee:8b:82:6c:8c:e5:6e:3f:2a:fb:3c:e7:ed:9b:68:28:b7:
46:33:a3:4e:cc:34:00:63:c2:e0:68:a0:8a:03:51:ca:a9:d5:
10:28:e2:f6:22:37:ba:cb:4e:dc:b6:2f:30:60:21:2c:2f:66:
13:2f:df:a6:88:76:0b:ec:92:ba:62:1a:fa:0b:50:7d:37:b2:
31:ba:1d:a5:21:f1:11:4f:e4:cc:a0:e6:e8:c1:00:b7:b1:9d:
70:c1:3b:98:d5:ef:8a:b5:8a:ba:5f:62:56:82:b7:86:69:24:
23:7f:aa:2b:f2:e8:5f:ab:77:c4:f2:12:ef:09:94:43:f9:04:
16:3a:18:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org