Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8fyMze46VBVaF96_4z14M3FRYEE.roa
File: 8fyMze46VBVaF96_4z14M3FRYEE.roa (raw, json)
Hash identifier: DXxMuYxBvLPMsFdeepvjs8ZC/7Sgwmziao4oUJUXUG4=
Subject key identifier: F1:FC:8C:CD:EE:3A:54:15:5A:17:DE:BF:E3:3D:78:33:71:51:60:41
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19EA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8fyMze46VBVaF96_4z14M3FRYEE.roa
Signing time: Sat 22 Oct 2022 06:12:52 +0000
ROA not before: Sat 22 Oct 2022 06:12:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.56.176.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6634 (0x19ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:12:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F1FC8CCDEE3A54155A17DEBFE33D783371516041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:13:a2:b4:b1:3e:00:f9:ba:cc:36:ef:ea:
65:e9:9a:0f:08:70:46:59:fa:d0:8e:21:72:c5:0f:
ff:b1:6e:47:ae:ec:22:d1:81:c5:fa:84:77:13:b1:
9e:7a:66:90:b7:5a:62:1b:79:cb:b8:69:db:a9:24:
67:c9:3e:63:c7:d1:e2:31:20:b1:63:67:9d:af:43:
a4:8c:c3:8c:b7:6b:93:75:ef:4a:f8:b7:33:aa:67:
3a:65:d2:50:ec:6a:33:97:ae:8c:aa:9a:30:00:5a:
e3:2d:dc:fd:14:aa:05:5d:2c:cf:b8:f1:b4:eb:4e:
62:3d:dc:0a:57:d1:00:2d:6b:97:b3:f3:ca:16:c2:
6b:47:8a:45:53:88:41:73:66:68:8d:b7:b6:5c:3b:
b1:d9:1a:15:df:2a:f6:b8:45:4d:0f:ac:b0:62:41:
96:94:f2:75:56:60:e3:9a:89:a5:cd:b7:d2:e4:ef:
27:50:33:3f:12:7d:51:1e:f4:b1:48:85:03:ae:0c:
22:1b:be:fc:dc:6b:45:a7:e6:d8:19:56:95:cd:e4:
cd:83:73:41:6f:d9:b1:58:6b:5d:dc:07:22:bd:29:
22:d2:10:b8:56:c3:c7:ec:23:89:b9:20:3c:41:a5:
dd:09:e6:ed:fe:39:96:4a:45:b1:8e:c3:53:21:a0:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FC:8C:CD:EE:3A:54:15:5A:17:DE:BF:E3:3D:78:33:71:51:60:41
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8fyMze46VBVaF96_4z14M3FRYEE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.176.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:5b:38:f8:e2:ad:f1:26:f1:93:44:85:e2:a2:e6:e6:ee:a8:
52:5f:d2:3e:02:8a:5a:0d:f2:a2:23:cd:84:6b:30:2e:32:4f:
13:00:d5:d5:e3:a2:b8:fe:b0:ca:a1:f6:1c:5a:d5:27:c3:05:
dc:62:7b:03:9b:7b:39:6a:c6:ca:d3:76:4c:e6:67:95:ce:6d:
31:b0:16:8a:78:7b:6a:58:c7:cd:1c:5e:3a:bf:7f:44:a8:9b:
b8:b1:ed:29:8e:60:75:93:d1:1c:66:d6:06:f8:18:53:12:1c:
49:45:d0:ed:04:e0:82:44:a7:8b:6e:10:b4:d2:ed:65:f8:6b:
30:b2:02:ba:05:ff:58:ff:28:15:64:fb:bc:61:0f:ae:f0:42:
6e:67:43:9f:a9:a9:3b:48:0a:61:23:99:86:aa:7f:24:84:46:
eb:80:da:b9:8c:57:8b:44:56:d4:07:7c:2a:2e:e5:b3:80:12:
de:dd:d2:c1:7d:d8:db:3c:b4:ee:23:81:fd:6e:1a:fb:bf:46:
8c:94:05:35:50:ec:ac:5b:aa:23:25:cf:62:3c:60:be:d1:36:
7d:9b:42:40:83:17:16:09:9f:9c:14:f8:b9:c2:bb:79:69:7a:
53:16:46:56:ff:14:1a:9d:45:ec:45:90:d5:93:a8:32:83:4d:
db:8e:b7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org