Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zAM0oj2bKJ857zfARace1Xyj4Cs.roa
File: zAM0oj2bKJ857zfARace1Xyj4Cs.roa (raw, json)
Hash identifier: a499misit2mB5uiheMAN43mlTe/o6xNlT1hJC12wqE0=
Subject key identifier: CC:03:34:A2:3D:9B:28:9F:39:EF:37:C0:45:A7:1E:D5:7C:A3:E0:2B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B35
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zAM0oj2bKJ857zfARace1Xyj4Cs.roa
Signing time: Tue 29 Sep 2020 10:08:08 +0000
ROA not before: Tue 29 Sep 2020 10:08:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 115.165.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2869 (0xb35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:08 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CC0334A23D9B289F39EF37C045A71ED57CA3E02B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:28:2c:76:41:c0:42:f2:3e:d8:16:97:3e:d6:
72:69:bd:e8:74:68:97:6f:49:5b:0c:40:fd:42:72:
08:66:3b:9b:76:aa:e8:a1:6e:10:9d:8d:25:67:50:
c4:50:a5:cf:ec:91:c1:48:34:a2:fd:69:22:28:e4:
a6:10:02:b4:88:55:10:9e:e6:0a:63:77:99:ef:4f:
81:ca:6a:44:4e:75:9e:9c:11:ed:e6:4f:44:26:b9:
94:10:aa:fc:39:92:06:74:68:06:04:d1:aa:92:b0:
6d:71:8b:4e:54:dc:75:57:82:f2:c4:04:ed:8b:47:
f0:31:13:55:70:0e:67:94:9a:74:c5:2c:fc:dc:94:
d5:0b:d4:80:f9:20:3d:91:15:17:04:c4:40:67:1d:
54:fa:2a:bd:f1:e0:85:e1:69:e8:1c:fe:ee:ea:90:
2c:e6:f1:20:d7:f5:39:32:9f:b0:b7:de:e2:11:78:
44:d0:e0:76:a2:8c:13:2e:91:08:f7:6f:15:60:71:
ca:da:81:44:ec:8e:cd:60:d2:51:e3:31:23:45:bf:
ff:9a:06:bb:0d:79:cf:0b:00:d5:48:f9:4e:c5:a0:
0e:c7:cc:c2:5a:f3:6e:3e:98:1d:5a:0e:bf:03:22:
d5:c4:d4:30:ce:43:e9:45:ce:8f:b7:63:8d:72:3f:
3a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:03:34:A2:3D:9B:28:9F:39:EF:37:C0:45:A7:1E:D5:7C:A3:E0:2B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zAM0oj2bKJ857zfARace1Xyj4Cs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.192.0/22
Signature Algorithm: sha256WithRSAEncryption
81:cf:98:e5:74:d7:e0:1f:aa:1c:34:6a:a9:94:48:ea:0b:d6:
82:ce:e5:62:2a:b0:0f:5d:53:6f:72:45:5c:e7:1f:09:44:cf:
85:61:05:90:f2:fe:25:87:68:76:91:ad:3e:d5:18:e2:d9:2a:
bd:85:37:2b:38:58:46:6b:bb:b0:b0:34:60:c0:2e:72:fd:98:
72:4c:18:10:6a:e1:7c:01:c5:f1:1a:0b:21:79:d6:53:d9:ca:
b8:59:2c:12:8c:5d:cb:1f:49:86:ac:61:e4:b2:4e:72:ed:7b:
75:4f:e8:ac:94:be:e6:bf:94:35:12:6e:d8:2f:3e:dc:f4:e3:
03:06:c3:03:8a:23:2f:65:81:2b:a7:c6:14:3a:bc:7e:e3:91:
b7:b6:ad:4b:58:76:2a:47:15:b4:14:b3:a2:f2:38:9d:30:56:
10:9e:b4:88:75:d5:c1:17:c9:dc:c9:cd:1c:d6:97:90:a4:35:
77:71:8d:6a:d2:be:46:f6:c1:9f:6d:d5:fe:0e:be:bc:4d:de:
c5:eb:07:2a:a4:fc:20:02:71:fa:bd:f9:b1:30:9f:db:22:a4:
7f:ef:68:f2:13:d8:2d:7b:c8:ec:1a:e4:d2:e1:31:9d:72:ca:
92:2a:10:75:5e:c6:de:d6:de:60:0e:d6:cb:81:75:59:f6:4a:
86:56:c6:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org