Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2dxzHpLyvA91ajkoYYuI480_Rn0.roa
File: 2dxzHpLyvA91ajkoYYuI480_Rn0.roa (raw, json)
Hash identifier: 1R5OxlJ7WNm29wimcEsrTy1wUjsb/X6BbG+PPMM3TDM=
Subject key identifier: D9:DC:73:1E:92:F2:BC:0F:75:6A:39:28:61:8B:88:E3:CD:3F:46:7D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B67
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2dxzHpLyvA91ajkoYYuI480_Rn0.roa
Signing time: Fri 07 Apr 2023 07:24:55 +0000
ROA not before: Fri 07 Apr 2023 07:24:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 211.76.64.0/20 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7015 (0x1b67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Apr 7 07:24:55 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D9DC731E92F2BC0F756A3928618B88E3CD3F467D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:64:64:c9:9b:2e:77:72:98:c2:bd:65:23:d6:
5e:e3:33:44:0a:15:b3:06:ea:16:fd:ab:8b:4f:aa:
31:9e:41:fa:a8:04:80:5c:a3:4a:8a:10:dd:ae:e1:
fa:e0:4f:11:e0:d3:a3:a9:9b:e9:08:ee:d0:da:2b:
dd:d2:ac:2f:70:51:1e:11:fa:d9:06:23:85:d0:d1:
b6:e1:87:2e:73:5c:5a:79:6c:c0:c4:c4:e9:12:0c:
3f:15:57:50:93:c3:e5:d9:02:e8:37:9b:d0:bc:a9:
08:5f:ad:48:24:65:0e:8b:08:41:65:31:79:f2:5e:
8f:73:55:66:19:42:86:81:8b:00:ae:38:c6:42:12:
96:93:a2:7d:37:67:21:d3:65:8e:bf:f8:9b:60:50:
c5:c9:b4:82:89:1c:1c:bf:36:ba:25:d3:6e:01:0b:
a4:15:84:b4:52:8b:9c:53:d9:d7:63:b9:70:ff:3a:
a0:ac:37:05:fd:55:5e:60:83:2b:fe:77:fc:7d:61:
06:d2:d1:4c:1d:fb:82:34:9b:8f:75:51:e3:f2:f8:
89:54:29:ec:28:ca:b0:45:13:71:87:aa:dc:d7:83:
b2:38:99:ca:da:58:66:50:8f:89:39:09:b8:60:54:
3e:52:96:fd:a4:32:5a:8a:c5:da:84:22:5d:e5:0d:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DC:73:1E:92:F2:BC:0F:75:6A:39:28:61:8B:88:E3:CD:3F:46:7D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2dxzHpLyvA91ajkoYYuI480_Rn0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.64.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:df:12:a0:aa:a6:90:76:85:e1:03:8e:e0:3e:01:80:96:b0:
bf:f4:43:b9:01:5c:e5:4d:7e:5d:2d:57:32:c0:51:76:b6:02:
bc:37:83:40:40:98:8b:a3:fd:e4:9b:26:38:b9:8d:5b:34:51:
a8:2d:71:89:61:d9:c0:21:4b:4f:81:b5:61:e6:31:a1:c8:28:
8a:d5:47:cc:35:97:e5:fd:f1:34:87:5f:b4:d0:38:b3:4a:02:
76:cc:3b:02:22:49:f1:a1:4a:8a:45:24:e3:35:01:c0:18:97:
15:22:62:10:2c:2b:39:c4:a4:f4:c8:bb:c9:ca:12:a6:5f:b3:
00:4c:d3:68:7e:78:5a:6b:c5:7e:57:50:f2:20:f1:44:f1:81:
e8:9a:3a:98:c9:e9:cd:e6:84:79:13:15:b0:a1:70:04:b5:d1:
82:ea:1c:fb:d2:10:6b:a0:be:70:85:e5:5e:e5:bc:83:83:88:
a0:56:1d:26:eb:78:b9:f8:bf:9d:09:88:71:e6:9a:fb:0f:1c:
8a:e2:11:75:d0:05:ef:7c:03:4e:8d:8e:08:0c:f7:bd:f3:3d:
5a:19:6a:c3:5d:cd:b3:0c:d3:04:67:bb:98:f4:d6:dd:64:ca:
4c:54:32:23:ab:71:82:17:cf:39:32:45:41:4e:4d:4c:eb:e0:
39:2f:a3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org