Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8nQGnF4xmUnxbL7DUtsfo9Eg_8s.roa
File: 8nQGnF4xmUnxbL7DUtsfo9Eg_8s.roa (raw, json)
Hash identifier: V+muTc9oZabKqSo1rfVX91hpia9FbmNBigKucxptq/g=
Subject key identifier: F2:74:06:9C:5E:31:99:49:F1:6C:BE:C3:52:DB:1F:A3:D1:20:FF:CB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0D64
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8nQGnF4xmUnxbL7DUtsfo9Eg_8s.roa
Signing time: Thu 14 Jan 2021 07:46:51 +0000
ROA not before: Thu 14 Jan 2021 07:46:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.60.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3428 (0xd64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 14 07:46:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F274069C5E319949F16CBEC352DB1FA3D120FFCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:f2:6d:4e:74:e1:0c:5d:42:ef:45:5e:4f:
28:85:64:6d:f8:a5:33:76:5c:16:c3:03:1f:3a:a6:
74:ad:39:7d:4d:76:27:fb:c4:47:9e:b0:4e:0e:5f:
65:09:b6:ec:5a:81:71:6d:5d:2f:88:fd:2d:e4:18:
ab:23:84:bb:cd:d9:99:d5:a2:bc:42:c1:24:3a:77:
56:81:88:f5:1f:3a:ce:70:0b:13:6e:7a:99:51:f6:
17:c2:fe:20:cf:40:74:85:a4:81:96:ce:46:31:27:
fa:35:c6:27:52:d7:15:35:78:2d:18:10:69:56:dc:
d9:a2:1e:22:fd:fb:9d:b0:69:13:7e:ba:50:7d:3b:
2a:b5:99:7b:ad:87:f0:42:ca:18:f9:ee:1a:64:77:
a4:c2:5e:eb:cf:d1:cb:cf:e9:c5:a4:61:10:81:10:
f1:8b:4c:a8:46:5e:7e:cd:dd:3f:38:6b:51:83:aa:
05:ab:78:fd:d9:01:f2:74:fa:6e:99:03:51:6e:ca:
ce:a7:d5:c1:9c:04:aa:ef:53:f1:87:ec:24:ea:65:
33:0c:32:20:52:0a:1a:b2:c6:e8:aa:0c:7b:21:69:
f2:ea:84:42:4c:4d:76:9b:a8:aa:b6:e1:df:ce:92:
a0:04:28:b4:8b:32:4a:a3:3e:72:ee:ae:6f:bb:b5:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:74:06:9C:5E:31:99:49:F1:6C:BE:C3:52:DB:1F:A3:D1:20:FF:CB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8nQGnF4xmUnxbL7DUtsfo9Eg_8s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.215.0/24
Signature Algorithm: sha256WithRSAEncryption
71:86:48:62:4e:2e:80:e3:ef:a8:eb:6d:5a:6e:c9:c4:79:22:
ba:18:6a:0d:ae:c2:c4:f2:d2:d5:c4:d5:03:a1:3b:e6:4a:90:
ab:a2:ff:a2:c1:f4:c5:a8:e9:06:ef:9d:b1:7e:76:62:b6:9a:
fc:0b:69:b9:89:83:2e:34:63:b1:e6:d2:da:3e:26:ad:33:43:
79:49:48:0e:66:96:43:de:6a:b4:e8:11:41:26:60:ef:60:91:
d2:13:6d:80:88:05:6f:f5:09:a8:b9:c9:98:80:f5:db:78:ba:
d3:f9:f6:63:8b:14:38:74:ca:64:8b:71:32:81:dc:7f:45:c1:
2c:1d:77:70:a9:91:7f:38:9b:76:93:ea:1f:cf:5e:04:17:d8:
ca:eb:ed:5f:f1:d5:b3:4c:5f:bc:21:06:50:c2:59:35:d5:ed:
55:da:44:f2:cf:9d:3a:b3:86:8d:21:d1:b3:20:18:44:19:9d:
91:e6:ee:82:75:f4:8f:86:ab:3a:c3:76:46:ae:57:68:72:87:
7e:27:8a:d8:3d:ce:f7:3c:a7:4d:39:1d:2c:bf:f0:7e:07:b8:
65:f9:a6:6b:e6:e0:9e:b6:32:36:26:99:21:19:45:ce:cf:76:
f5:5a:48:be:20:28:d1:ad:f5:2a:c6:3e:20:fc:1d:78:2c:f6:
6d:c9:5d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org