Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/14p_wvlFIuPWV48win_UZWIHHbA.roa
File: 14p_wvlFIuPWV48win_UZWIHHbA.roa (raw, json)
Hash identifier: fTPBe/UZyxxd8H/cV/ohBsH5XxzbGn9bVn+Y6khNa14=
Subject key identifier: D7:8A:7F:C2:F9:45:22:E3:D6:57:8F:30:8A:7F:D4:65:62:07:1D:B0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1361
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/14p_wvlFIuPWV48win_UZWIHHbA.roa
Signing time: Wed 29 Sep 2021 02:55:42 +0000
ROA not before: Wed 29 Sep 2021 02:55:42 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 61.56.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4961 (0x1361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:42 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D78A7FC2F94522E3D6578F308A7FD46562071DB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:e4:b6:62:21:71:ee:02:0c:20:50:91:d2:
e3:85:df:9d:b9:5a:5e:01:2c:75:d7:a5:89:42:9c:
04:6e:a8:bc:a9:b2:d2:4a:a5:dc:dc:71:28:57:bf:
05:17:fb:85:1e:63:77:59:a9:da:f0:5a:86:0d:c3:
19:43:9e:ec:67:f0:35:55:c8:ca:ba:0e:5c:93:b7:
23:b3:34:7f:58:38:84:a5:c6:bd:4f:17:81:26:1f:
a6:f2:03:c9:da:84:11:76:c8:2f:7e:e8:30:90:af:
3b:39:18:80:58:5a:05:5c:7c:68:43:1f:88:53:42:
27:56:61:34:95:43:a0:34:2d:a7:1b:72:99:37:4c:
74:d3:a6:52:78:c0:de:f3:66:d7:92:40:40:53:5b:
45:cd:4c:2a:09:fe:cb:b7:79:28:70:83:a8:19:bf:
89:d6:98:48:6b:aa:68:bb:e8:1f:e8:5b:35:29:e2:
b9:cb:64:20:7e:73:d1:ae:d9:db:81:46:23:20:6d:
ff:2e:72:9f:5e:b8:73:f8:41:1b:d0:fd:62:ed:8e:
69:e0:1e:63:63:33:db:73:c0:91:5f:a0:c8:96:3f:
61:d9:7c:1f:4b:f5:81:51:29:0d:cf:a5:06:5e:ae:
7a:ee:2a:74:63:f6:72:ad:4a:72:88:db:2f:07:61:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8A:7F:C2:F9:45:22:E3:D6:57:8F:30:8A:7F:D4:65:62:07:1D:B0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/14p_wvlFIuPWV48win_UZWIHHbA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.168.0/21
Signature Algorithm: sha256WithRSAEncryption
48:5e:4d:99:a9:22:b1:73:93:9e:38:0e:23:f5:37:a0:36:e0:
7c:5d:aa:83:10:12:3a:a1:10:52:8e:6d:12:4c:ae:85:6c:29:
b6:c7:f9:9b:13:07:4d:26:19:20:ea:30:b6:98:43:4b:9b:61:
2c:e1:8f:f8:6e:df:ab:69:de:ff:35:3e:8e:0d:60:53:cf:9b:
08:92:dd:1c:e8:e4:92:8f:be:28:40:49:0b:97:bc:3e:9b:e8:
c5:1c:e1:eb:c8:8d:61:59:d1:84:c3:49:bf:f7:1d:2a:b5:66:
59:e6:25:af:8a:3d:f2:c2:45:67:75:93:85:d9:f5:60:92:6c:
bb:2b:c5:21:73:66:12:c0:d6:5b:ac:93:85:0f:14:67:ab:c2:
b4:c3:76:77:18:47:07:88:63:f5:0a:4d:e1:0f:c4:95:fd:87:
29:a9:c2:4b:d6:17:ff:8f:53:c4:c0:2c:68:1d:50:24:c3:af:
a4:c0:90:cd:bf:af:5e:38:44:79:6e:6d:2b:72:4e:c1:ed:d9:
73:2d:c4:5e:96:ec:17:e5:e1:ac:6a:d5:ff:8b:45:b4:d0:ff:
5e:62:ea:46:3c:85:df:30:7e:aa:71:32:57:8c:62:0e:6a:66:
5f:b4:67:ec:45:e4:f2:6e:a7:aa:94:fb:16:45:80:f6:1b:9d:
12:6b:ee:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org