Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EgCerrKZesFd7rjzdWx3A3uCQ1E.roa
File: EgCerrKZesFd7rjzdWx3A3uCQ1E.roa (raw, json)
Hash identifier: y1phypsXy+VvJdbDkaRoX9FYblmGWYghZFZGAo8uRr8=
Subject key identifier: 12:00:9E:AE:B2:99:7A:C1:5D:EE:B8:F3:75:6C:77:03:7B:82:43:51
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1286
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EgCerrKZesFd7rjzdWx3A3uCQ1E.roa
Signing time: Wed 29 Sep 2021 02:54:40 +0000
ROA not before: Wed 29 Sep 2021 02:54:40 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 61.60.215.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4742 (0x1286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:40 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=12009EAEB2997AC15DEEB8F3756C77037B824351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:b2:65:db:c6:22:8c:bd:44:58:8d:96:d9:
ab:3f:1d:ef:5a:72:17:54:82:43:ad:72:53:37:ca:
6d:a6:87:8d:1c:a6:2e:72:44:f5:85:ca:bb:b0:bf:
36:65:39:32:a4:6a:4f:93:70:97:a5:bb:68:55:50:
39:73:5b:4e:de:29:e5:c9:88:b2:d6:15:9c:a2:75:
ac:b7:d0:6b:42:15:9c:0d:d2:fd:f2:d1:f2:69:4f:
32:3e:f6:a0:29:9c:03:b4:73:6f:c6:80:1f:92:a6:
65:e8:72:89:34:b4:b5:6b:dc:c4:10:23:49:61:32:
8f:b4:1b:17:7f:68:d2:b3:e8:08:f6:2c:92:4a:f5:
f2:8a:a5:bd:89:38:9d:3c:87:b7:40:bf:89:31:6f:
bc:dc:62:f3:67:1a:86:9c:be:57:25:a0:79:07:b5:
05:16:3e:41:1b:02:8b:f9:29:0f:42:c9:b1:0c:23:
8d:ff:7e:3e:e0:3f:a4:1c:4a:76:c7:0f:1d:e5:6b:
7f:25:28:35:19:55:4a:da:5c:8c:de:52:7e:99:e5:
70:87:6f:58:8e:13:0f:00:85:a6:ed:a4:7e:b8:cc:
d5:c3:5a:78:10:98:6d:6d:67:b9:4a:b0:c8:b6:9d:
32:db:be:cc:93:59:e3:7e:a1:0a:80:4c:ce:ea:c6:
3c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:00:9E:AE:B2:99:7A:C1:5D:EE:B8:F3:75:6C:77:03:7B:82:43:51
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EgCerrKZesFd7rjzdWx3A3uCQ1E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.215.128/25
Signature Algorithm: sha256WithRSAEncryption
4a:48:b6:74:e0:66:18:49:2d:1c:4b:3a:6a:96:4d:5e:41:31:
fa:87:0f:7d:ec:c8:04:d0:77:2f:70:6e:68:2e:47:c9:b4:18:
02:31:28:43:4e:cd:31:b3:e9:42:13:90:08:33:7b:60:4b:ca:
66:cf:4a:a4:66:cb:1e:3a:48:36:e8:39:88:2e:dd:81:a4:0a:
0c:8c:e3:f0:84:85:3e:48:c0:b9:b5:44:9b:78:02:35:0b:8d:
89:b8:b5:07:9e:a6:da:d9:6a:55:74:f6:7f:35:57:ec:80:94:
c0:41:21:71:27:f2:b1:57:69:d2:1a:22:e3:be:f0:46:c9:4d:
a3:37:fb:06:82:81:25:65:5d:09:33:22:ee:94:4f:91:2c:da:
66:35:c5:fe:c7:0e:30:2b:ca:1b:da:e4:49:10:f3:67:4d:1f:
6c:07:90:ab:81:4a:5c:5e:65:e0:85:91:49:90:d3:6d:b6:92:
2a:5b:68:15:61:c7:94:76:7d:29:bc:77:c9:8e:42:6a:ba:91:
dc:a6:fb:04:c8:f8:ed:d6:d6:e3:28:c6:23:84:52:8b:46:87:
c2:96:03:75:c6:5b:1a:63:b5:a2:e4:14:98:4d:41:9d:90:25:
92:7a:b3:9d:e9:61:a4:25:b6:c1:ed:cf:9f:e5:49:06:10:0c:
96:d0:04:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org