Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7f-sEA1OfmuiYJxD24pr3mHBFgU.roa
File: 7f-sEA1OfmuiYJxD24pr3mHBFgU.roa (raw, json)
Hash identifier: jEvSa9CJdJaMCNtTczdmJv7VnI7h9mn4jfZUy1L9GBM=
Subject key identifier: ED:FF:AC:10:0D:4E:7E:6B:A2:60:9C:43:DB:8A:6B:DE:61:C1:16:05
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1276
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7f-sEA1OfmuiYJxD24pr3mHBFgU.roa
Signing time: Wed 29 Sep 2021 02:54:36 +0000
ROA not before: Wed 29 Sep 2021 02:54:36 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 211.76.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4726 (0x1276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:36 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=EDFFAC100D4E7E6BA2609C43DB8A6BDE61C11605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c3:f5:09:ce:50:fc:3b:b8:f3:28:87:b4:26:
71:dc:3b:99:2f:5d:eb:8f:fc:67:da:83:a8:25:1c:
b1:bb:aa:c3:ef:e3:e8:87:47:6a:83:e4:42:16:cc:
71:91:0a:43:81:a7:e1:15:94:a3:ce:5c:64:73:a4:
23:26:cb:37:9f:fc:86:8d:c4:8a:37:e1:01:21:22:
0e:3c:80:f3:e1:de:9c:61:76:c6:58:44:6c:c8:14:
ef:d7:af:94:5c:fc:93:00:fc:76:bc:ea:00:64:7a:
33:1d:fe:66:d1:14:b2:18:fb:2f:87:0f:8c:47:31:
c3:d2:ab:3a:a6:4a:e7:1c:57:87:67:bf:a2:32:e9:
ce:c3:e4:c6:4f:ec:85:ed:e6:36:7c:9c:9e:63:79:
65:0c:40:5f:d7:40:d4:9b:22:fa:cd:9e:14:15:50:
69:4c:e1:50:ab:b2:3d:1b:26:21:39:77:89:95:fe:
5e:36:ea:be:22:11:1e:b5:41:af:48:d4:70:e7:33:
09:0b:ca:7f:e0:8f:2c:50:86:f7:8a:51:d7:4c:f6:
f0:65:fc:65:8a:bd:75:6a:92:88:2c:e6:58:84:c8:
c9:ae:ec:ba:0b:d3:cf:63:50:79:bb:52:77:1a:49:
f7:b5:29:60:17:4e:c6:17:a9:2e:9d:e3:5f:de:ea:
11:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FF:AC:10:0D:4E:7E:6B:A2:60:9C:43:DB:8A:6B:DE:61:C1:16:05
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7f-sEA1OfmuiYJxD24pr3mHBFgU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:01:5a:61:ba:37:36:0d:7f:75:7a:eb:82:25:5f:bb:b8:1c:
f7:2d:69:a2:ae:64:b2:4e:07:ec:e9:69:23:a4:e9:66:da:d8:
fc:d3:ae:6f:1d:1e:97:00:14:3c:1c:4e:1b:31:03:ee:a9:f2:
a1:94:4c:71:2a:e1:1e:16:4f:10:ca:be:5a:d3:01:8f:e4:27:
69:65:93:05:f8:be:f3:1a:ec:78:da:b4:e7:79:a4:4c:13:da:
e0:57:fd:df:db:cd:81:15:b5:1a:e2:c7:05:89:52:43:c5:90:
ce:22:bf:07:f5:63:c9:bb:23:bd:6b:64:7d:23:19:27:1e:1d:
17:82:50:e6:43:8b:8c:fa:c7:16:b9:63:87:d9:7f:ff:65:b4:
14:c1:71:bd:d3:f3:6c:c3:3d:5f:12:d1:12:24:38:9d:1c:ca:
5b:1e:0b:1c:3d:24:9a:8d:1f:81:4d:43:2a:20:81:b4:d8:34:
c0:2b:d8:15:d5:6d:b3:8b:d5:7c:c6:9a:06:e4:4f:02:b9:d2:
9c:3b:39:72:ee:88:8a:75:15:d1:99:72:17:06:4e:07:de:b3:
c1:71:40:4b:e1:20:b7:d3:b5:35:a9:1b:c9:e8:5c:93:61:bf:
e2:60:0c:98:36:68:6f:8b:ea:2f:69:9f:fb:96:34:ab:72:28:
f1:e1:a6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org