Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BqBfSgutjZDFuEM6Znh5hU7T60I.roa
File: BqBfSgutjZDFuEM6Znh5hU7T60I.roa (raw, json)
Hash identifier: FGcXkXg+1QuD3Ov/hAtakNhVwmSyeNIWt+X2TYXKp8A=
Subject key identifier: 06:A0:5F:4A:0B:AD:8D:90:C5:B8:43:3A:66:78:79:85:4E:D3:EB:42
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B69
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BqBfSgutjZDFuEM6Znh5hU7T60I.roa
Signing time: Fri 07 Apr 2023 07:26:12 +0000
ROA not before: Fri 07 Apr 2023 07:26:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 61.61.208.0/20 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7017 (0x1b69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Apr 7 07:26:12 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=06A05F4A0BAD8D90C5B8433A667879854ED3EB42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:37:82:a9:f3:20:f9:c4:e0:76:4f:6c:e1:
cb:26:8d:e4:ae:02:d5:c5:19:4e:21:1e:81:68:3b:
3a:13:ac:f6:62:35:80:16:bb:5e:e6:db:33:8e:b1:
7c:db:00:31:b3:0d:e7:7c:f4:6c:94:b5:db:54:a9:
aa:cd:24:c8:cf:6e:8f:9f:69:6c:0a:6a:53:0b:f1:
a7:12:2f:47:e1:b2:69:3c:12:86:19:a3:59:cf:a3:
ee:9c:63:9c:c2:37:98:15:cb:cf:f2:29:79:cb:93:
3f:53:1e:79:3e:cc:a2:7c:99:3b:72:bb:61:89:a6:
ac:97:e9:b1:fd:50:67:ae:b2:39:4e:d3:dd:48:ae:
e7:2b:3d:a4:14:24:11:83:06:bd:4b:71:9b:94:fe:
d9:f6:59:c6:ab:a3:d5:b2:2c:df:70:59:0f:34:96:
bf:35:c1:a7:6a:4d:6c:f1:49:28:48:54:30:20:5f:
b8:51:16:58:bb:ea:be:d3:60:61:3c:15:fc:60:1a:
af:d9:77:df:3d:7d:8d:b2:55:0b:c5:a5:ed:ad:b8:
fa:09:05:87:b1:49:ae:ab:29:5c:b0:04:9d:c9:90:
fc:cd:b3:7a:c1:bb:3c:ff:d8:06:70:ef:8a:a9:b4:
26:5e:c0:af:63:65:ad:30:11:9e:52:c3:b0:3d:61:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A0:5F:4A:0B:AD:8D:90:C5:B8:43:3A:66:78:79:85:4E:D3:EB:42
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BqBfSgutjZDFuEM6Znh5hU7T60I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.208.0/20
Signature Algorithm: sha256WithRSAEncryption
90:a1:8a:9c:ec:94:79:38:72:76:c6:45:f1:5c:02:8a:c0:60:
42:ba:24:e6:76:47:a9:b9:ff:ae:aa:6a:18:4e:6f:f1:da:cc:
32:e0:f8:85:33:21:96:64:86:7e:c5:95:b1:1f:78:88:23:54:
1d:c5:95:d6:a8:49:2b:3f:75:4e:f4:7f:ee:f6:a4:0c:88:b9:
ca:d6:d2:32:41:7a:4f:16:9e:c0:3e:f2:12:6c:c5:f5:c9:e5:
86:55:5e:5e:eb:44:c9:59:e5:f5:df:b3:e5:f3:f0:57:9f:c5:
74:2e:85:56:c8:59:0e:9f:a7:9a:c3:9c:3a:4c:37:e3:8f:23:
5d:b5:a0:4f:3c:83:cd:8f:c2:52:c0:2b:b1:58:f4:41:e2:f2:
3e:97:9e:ef:63:e3:53:0b:03:50:c0:02:c2:a5:b9:57:29:20:
94:3a:ee:ac:f0:10:d4:d8:56:f7:49:f6:6f:a9:c5:a2:72:42:
67:37:60:f3:15:76:c2:b8:de:bd:d6:ca:4a:5a:ff:80:a3:f3:
e3:78:43:c9:61:ac:cb:3b:dc:0c:c0:8e:d8:92:5a:f7:68:d6:
c9:3d:49:1e:6d:ff:ff:dc:7e:44:54:1c:64:41:4c:ec:c5:35:
27:95:02:53:7f:87:91:1b:2f:d9:f8:ad:4c:7c:66:8b:c3:10:
b6:84:55:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org