Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/779ib--si1qy_X1jp5aTCvp9sU0.roa
File: 779ib--si1qy_X1jp5aTCvp9sU0.roa (raw, json)
Hash identifier: QlLP7ffftdCdqp6Ut+ACtqm8OnNUxkAh9TMFyGCexnQ=
Subject key identifier: EF:BF:62:6F:EF:AC:8B:5A:B2:FD:7D:63:A7:96:93:0A:FA:7D:B1:4D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A3B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/779ib--si1qy_X1jp5aTCvp9sU0.roa
Signing time: Tue 25 Oct 2022 01:17:18 +0000
ROA not before: Tue 25 Oct 2022 01:17:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 61.64.24.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6715 (0x1a3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 25 01:17:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EFBF626FEFAC8B5AB2FD7D63A796930AFA7DB14D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:61:b4:8f:a1:37:30:1e:f0:1b:e5:bd:9a:
82:d7:21:af:8e:a5:c9:b4:d3:86:96:98:6d:70:a5:
44:36:63:18:30:a2:5e:94:7a:f1:b8:3f:83:6d:fd:
a4:fd:01:d2:c7:39:43:47:10:46:ce:26:57:ba:af:
dd:f1:dd:aa:5d:15:96:92:0d:54:4b:37:32:f7:3a:
03:af:f4:8d:d6:8e:2c:6b:54:e9:9c:78:35:c7:9b:
b3:48:a2:e2:4b:4f:12:3f:8a:c7:88:45:92:b5:63:
39:15:87:32:9e:f9:76:1d:6d:3c:41:a2:9c:60:75:
e8:a4:11:00:a4:df:44:22:d4:2f:2e:92:b7:5c:55:
3d:bf:3c:4f:f9:c7:2d:b8:39:ed:aa:9d:ab:70:82:
93:d2:28:91:18:0a:ac:0c:a4:13:54:a9:92:df:7e:
f6:50:4f:f5:43:a7:71:b5:88:b2:9c:d7:2e:e7:dd:
6d:87:59:f4:7b:e9:09:5e:c3:19:fb:0f:c1:ef:e7:
b6:65:f0:6a:37:e9:6e:de:26:6c:f8:96:cc:19:53:
5b:04:53:74:e8:6a:19:4f:a0:fc:63:be:ee:4d:bd:
45:01:f1:bf:6e:b8:9d:44:2d:2b:4f:17:44:58:0b:
70:b5:5a:f7:75:de:e4:f5:e3:df:a5:66:6c:d6:ac:
63:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BF:62:6F:EF:AC:8B:5A:B2:FD:7D:63:A7:96:93:0A:FA:7D:B1:4D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/779ib--si1qy_X1jp5aTCvp9sU0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.24.0/21
Signature Algorithm: sha256WithRSAEncryption
69:5a:0b:a4:76:5f:ef:a5:24:93:00:5f:90:c3:72:9c:2c:ef:
55:74:41:fc:37:ed:bd:23:6a:cb:5e:6c:18:a9:be:4e:9b:de:
03:dc:f9:39:46:05:9a:83:cd:49:8b:17:21:33:12:93:31:1a:
b8:d5:f2:ba:94:be:2c:6a:1a:93:b3:10:c2:b5:99:b3:6c:d6:
df:45:f3:91:6f:87:95:37:ba:55:7e:ea:fe:dd:64:c4:3f:29:
0c:19:c0:4a:49:c2:a8:80:9b:81:fb:c5:2a:ac:40:cf:44:69:
5a:81:43:52:4d:83:22:40:85:50:10:76:ee:ce:da:8a:fc:c4:
ad:16:23:c4:b7:be:66:f3:6b:e9:f2:78:20:58:f8:1b:1a:ce:
88:41:06:27:31:05:b4:f2:20:7c:fe:47:58:54:ca:6b:db:32:
1a:48:17:dc:c2:2f:71:4b:9a:3f:53:e5:2f:57:f6:5e:f0:15:
01:ba:47:32:61:a2:f9:2b:37:5e:6a:12:b3:a4:f9:26:bc:bc:
6c:99:b8:ea:c2:26:b2:0a:9f:27:aa:0b:88:0b:ad:e4:f4:49:
75:69:72:7e:56:dc:0e:18:9a:1f:4c:28:3b:c1:66:6d:58:0d:
c0:fa:b6:26:15:40:0d:46:d5:f0:1c:04:d1:7f:4d:b0:f2:fc:
b4:86:be:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org