Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DqzCFVrtqmbRyniyRUjvHJ_sOfc.roa
File: DqzCFVrtqmbRyniyRUjvHJ_sOfc.roa (raw, json)
Hash identifier: cVdWJWjNcigiS5qoC1cT1vDPcVLp2BuYGkCJSjzxrlg=
Subject key identifier: 0E:AC:C2:15:5A:ED:AA:66:D1:CA:78:B2:45:48:EF:1C:9F:EC:39:F7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A24
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DqzCFVrtqmbRyniyRUjvHJ_sOfc.roa
Signing time: Sat 22 Oct 2022 06:20:47 +0000
ROA not before: Sat 22 Oct 2022 06:20:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 61.64.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6692 (0x1a24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:20:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0EACC2155AEDAA66D1CA78B24548EF1C9FEC39F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:75:df:58:f1:94:6d:3f:92:c8:16:e7:62:8c:
31:48:64:fd:ea:da:1a:94:49:f4:2f:fa:d6:2b:37:
b5:bd:63:a4:b1:4d:f1:3a:7f:35:90:cd:04:ef:1c:
07:62:28:e6:5d:bf:56:0c:cc:b6:e2:fc:d1:11:9f:
c7:ee:41:e0:8e:1e:01:de:f5:2e:c3:c2:db:23:33:
8a:01:0b:e2:c9:e0:ee:0e:f4:44:a2:59:f7:c6:18:
a6:3b:50:7a:50:9d:f6:2e:31:17:34:a7:ab:4d:89:
cb:50:e1:7f:c0:98:c0:c8:ef:17:e8:1e:5e:fc:98:
69:c4:22:d4:2c:af:49:f1:9b:35:b3:84:34:41:ff:
c5:c4:9d:5b:8c:08:b5:6b:fc:a9:f9:23:32:79:ee:
b1:a9:74:73:dd:77:33:b2:b1:c8:ab:98:24:9b:4a:
b0:7a:35:2d:82:1c:ed:77:23:a9:63:d2:1c:0a:93:
32:b0:6e:c4:44:4c:ca:b1:46:df:6a:80:bf:92:21:
e5:74:0f:6a:29:76:5d:dc:3a:c1:61:bf:cd:17:81:
1b:93:cc:21:98:93:d9:c5:b3:19:95:40:2a:0c:52:
60:46:90:83:24:4d:75:87:2b:e8:52:05:74:ed:18:
d9:65:57:95:7b:97:a7:d8:fd:5b:a3:95:ef:8b:c8:
06:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AC:C2:15:5A:ED:AA:66:D1:CA:78:B2:45:48:EF:1C:9F:EC:39:F7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DqzCFVrtqmbRyniyRUjvHJ_sOfc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:37:f4:81:b3:47:c0:f7:44:b6:91:f1:50:78:33:9a:9c:d2:
2f:f3:1a:79:fb:78:a8:b0:c5:13:c0:21:56:33:66:30:fe:aa:
09:ad:df:cd:74:01:c9:13:2c:df:30:24:03:f0:a5:c6:9c:c3:
ed:0e:19:14:77:ce:91:dc:d6:0f:94:2d:39:ea:50:fe:b7:64:
b2:2f:3c:da:9e:46:12:8f:59:6e:3a:be:6a:89:29:7e:01:b2:
dc:c3:a4:4e:38:fc:2d:bf:a8:70:00:5b:f2:b8:a5:e2:1f:47:
40:af:af:ce:51:b7:27:65:d4:67:32:43:96:3b:b0:9a:4d:e1:
ed:1a:61:09:9f:6c:de:b1:3a:e0:04:a0:09:0b:fc:c0:49:60:
77:ca:69:2f:55:72:8e:d7:2b:c4:e6:eb:e3:69:b3:8a:d0:26:
cb:cf:d4:96:bc:84:ac:9e:8e:78:1a:6b:de:e5:f5:0c:a1:e3:
af:41:c2:39:b1:d0:47:59:ec:6a:c3:71:12:6d:eb:54:aa:38:
8c:40:a1:fb:3f:17:59:17:43:9a:d7:38:a1:2c:56:5c:5e:fd:
a1:f8:18:66:a9:c2:2b:db:0b:86:c5:20:63:4d:44:22:69:21:
7e:42:40:5b:fe:81:65:ae:fa:07:fd:67:6a:1e:cc:25:a2:e7:
97:d9:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org