Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-rIyFDjbUp1wMFEtycU1zaifM4s.roa
File: -rIyFDjbUp1wMFEtycU1zaifM4s.roa (raw, json)
Hash identifier: 940uYgdayOEXQ/Tpifh4NldpbWg+KCl60Ra7k2zRA4g=
Subject key identifier: FA:B2:32:14:38:DB:52:9D:70:30:51:2D:C9:C5:35:CD:A8:9F:33:8B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F89
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-rIyFDjbUp1wMFEtycU1zaifM4s.roa
Signing time: Sun 07 Feb 2021 12:34:34 +0000
ROA not before: Sun 07 Feb 2021 12:34:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 211.76.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3977 (0xf89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:34:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FAB2321438DB529D7030512DC9C535CDA89F338B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e6:a0:00:6e:8e:3c:43:25:99:65:ee:03:12:
80:be:00:29:56:b4:14:32:16:c0:f6:83:93:3d:36:
34:4d:df:22:9e:66:1d:fd:d8:c4:e3:da:42:8a:30:
76:f4:01:8a:d7:b3:90:c2:07:7a:c2:cf:0f:18:79:
30:2c:86:5c:0f:e3:e9:16:9c:03:1c:41:cd:7c:d8:
e0:8c:53:93:4c:39:ba:9b:2f:ad:28:bc:1e:25:b0:
24:57:2b:75:62:b9:8e:bb:99:7a:62:ea:29:bb:3a:
67:67:c3:51:be:80:d9:a9:7a:dc:03:1c:36:79:cc:
5b:cc:97:56:34:f9:3c:54:5e:fd:aa:84:15:1a:1d:
d7:d6:6f:ca:2b:7e:bc:59:dc:74:cd:e6:23:12:94:
9b:58:d0:f5:16:aa:a5:5f:d6:2a:cf:f0:44:7c:50:
2a:76:a0:9e:65:1a:fc:f1:06:7e:7d:9f:7d:c1:44:
9b:c3:bf:51:be:59:97:9c:4e:71:cf:34:2b:75:9a:
71:78:18:4d:f4:ec:99:18:d4:b3:88:5b:6a:73:1c:
62:97:ed:63:16:4c:cd:64:4e:0b:dc:d4:0e:cd:46:
a8:7a:04:44:88:a0:55:23:fa:c2:9e:b2:a4:42:00:
42:88:6e:7a:b2:e6:17:d3:f6:71:0f:81:1b:a8:2f:
08:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B2:32:14:38:DB:52:9D:70:30:51:2D:C9:C5:35:CD:A8:9F:33:8B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-rIyFDjbUp1wMFEtycU1zaifM4s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.56.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:c1:25:c3:d4:a3:0f:26:b3:24:ad:24:11:50:2c:8f:93:d1:
fd:e7:ff:b8:8d:2d:89:ba:76:19:90:9d:9f:12:49:d2:3f:90:
5c:c4:93:57:88:61:b1:90:fa:98:55:95:7b:0c:08:bb:4c:b0:
21:74:e4:12:18:63:d6:7b:c1:0c:a1:f3:ba:14:af:96:e4:6f:
6d:51:45:1c:56:ab:4e:aa:06:6b:54:9b:0a:dc:63:8d:6a:bc:
9b:d1:d9:6f:34:bc:b2:1c:d1:4e:b8:44:1b:6b:24:74:b9:0f:
73:c2:1b:40:37:ba:ad:e6:c1:94:a6:86:7a:65:89:65:31:7b:
c6:98:ce:ff:5b:b3:81:ae:62:84:d0:6c:27:49:d5:f5:f8:bd:
65:c5:50:13:b0:e9:5d:4a:ab:9d:3b:9a:fe:2e:62:ec:a3:46:
44:42:7d:b9:f6:bb:49:f0:e9:5f:28:be:a3:7e:49:0e:20:e5:
70:21:c7:f6:ff:6f:ef:d7:c9:04:57:9f:14:22:5e:da:e1:1b:
8e:09:f1:3b:eb:47:85:1e:ef:81:fa:a1:f3:66:38:6b:17:3b:
77:33:b0:8a:13:6d:bc:5a:27:97:b8:fd:2d:5b:94:e5:fb:ef:
44:ff:a3:fc:24:ce:71:74:a1:fd:d3:6c:66:ad:40:42:28:96:
9e:f8:09:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org