Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8BL-SKfrTlKSOvpYDfkNUD20SDk.roa
File: 8BL-SKfrTlKSOvpYDfkNUD20SDk.roa (raw, json)
Hash identifier: rN5mwA0U0ZfhN9gTLUE4liiFD/Ww/I4UmIB3Rk1pbHs=
Subject key identifier: F0:12:FE:48:A7:EB:4E:52:92:3A:FA:58:0D:F9:0D:50:3D:B4:48:39
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1476
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8BL-SKfrTlKSOvpYDfkNUD20SDk.roa
Signing time: Mon 06 Jun 2022 13:59:00 +0000
ROA not before: Mon 06 Jun 2022 13:59:00 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 2407:4b00::/32 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5238 (0x1476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jun 6 13:59:00 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F012FE48A7EB4E52923AFA580DF90D503DB44839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7e:db:df:4e:3d:5c:43:8e:2a:ec:2d:74:cd:
7d:5b:7f:a8:73:8d:eb:af:ad:4f:56:93:75:38:c3:
9a:24:63:9f:4a:62:22:2e:9b:cf:47:60:63:2e:fc:
49:21:db:f4:b9:0b:fe:f1:f3:f5:30:40:a1:d1:da:
13:7d:2c:27:53:f1:f5:f4:e0:0c:78:bf:a0:92:3f:
c1:08:2b:f9:2b:3f:01:fa:4f:47:a9:c5:4c:3a:72:
be:d4:c1:d3:3c:53:a6:56:ad:12:34:c0:22:9e:7b:
62:87:c4:00:0a:54:53:fe:b4:92:54:12:a2:fd:b2:
95:0e:c7:20:99:7e:e9:e1:d8:0b:6a:b1:a4:23:27:
c0:fe:44:8c:ba:bb:81:80:9c:23:ba:07:b1:f2:2d:
10:5e:b5:f9:9a:c6:1b:05:7f:48:75:6a:26:46:94:
9a:2e:2f:af:70:c2:e4:cf:65:11:60:c1:ca:c6:41:
58:ba:08:2b:9c:4f:74:0d:e4:96:69:53:f7:39:a3:
e4:a0:ad:b8:c9:5c:d1:d4:14:91:f9:64:6d:2a:44:
06:62:3d:cd:0b:87:6e:d5:0f:9f:c6:e6:e2:fe:5c:
c3:a1:21:bc:ac:73:e4:df:dc:a9:54:e2:f6:93:8f:
b7:f3:4c:d7:0b:c6:f4:ab:35:b2:de:1f:8d:46:59:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:12:FE:48:A7:EB:4E:52:92:3A:FA:58:0D:F9:0D:50:3D:B4:48:39
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8BL-SKfrTlKSOvpYDfkNUD20SDk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4b00::/32
Signature Algorithm: sha256WithRSAEncryption
07:1f:be:cf:4b:5f:a2:9a:08:5a:bc:9d:3d:57:04:39:eb:d9:
be:9b:58:88:e0:53:28:e7:68:7f:72:a4:45:c6:eb:3d:6d:dc:
df:d3:b2:90:a5:6f:c1:2e:06:61:87:f1:86:5c:a6:e4:d3:46:
77:56:50:4b:3f:59:55:4d:1a:7c:7f:22:9a:81:d6:fb:94:b8:
2c:30:84:46:90:18:60:64:f5:b0:39:0d:5a:b3:ac:16:f2:91:
7d:44:7d:dc:24:d8:36:b4:e7:45:96:01:76:d5:6f:31:00:5a:
9a:45:6e:a7:e4:25:fd:0c:e3:b7:de:1c:c9:37:1f:ac:22:2e:
91:b5:8a:09:64:78:d7:83:6a:f3:d6:25:a6:9a:7f:63:cb:7f:
6f:09:cc:72:0d:e2:b2:50:1c:04:3f:90:19:77:2a:a0:10:c4:
3a:52:b3:7a:f8:e5:2f:f9:d6:b8:a7:a5:ec:49:9f:5f:eb:ec:
18:02:8f:cc:f0:fa:82:ae:76:53:bf:a1:bf:00:5b:bb:b0:80:
ab:92:b7:a4:1e:90:b5:e9:b8:9d:34:8b:7e:d6:82:4a:04:7e:
9d:ca:d9:6f:b2:1e:93:90:b2:c5:8c:10:c3:58:8f:16:08:d5:
d0:55:91:a4:34:db:9e:fa:fe:15:8c:af:81:3c:be:3b:fd:de:
ef:79:db:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org