Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GVgbSwoHn5JrTkLk-D9nW7Vcm4Q.roa
File: GVgbSwoHn5JrTkLk-D9nW7Vcm4Q.roa (raw, json)
Hash identifier: CNvgUzqlJD45v5TrmSjlZEgbc/kKu3G5KnaDmJbDrm4=
Subject key identifier: 19:58:1B:4B:0A:07:9F:92:6B:4E:42:E4:F8:3F:67:5B:B5:5C:9B:84
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A18
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GVgbSwoHn5JrTkLk-D9nW7Vcm4Q.roa
Signing time: Sat 22 Oct 2022 06:17:56 +0000
ROA not before: Sat 22 Oct 2022 06:17:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 61.64.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6680 (0x1a18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:17:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=19581B4B0A079F926B4E42E4F83F675BB55C9B84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:3d:a1:71:f3:56:92:77:30:78:b5:4c:89:
62:45:91:16:c8:4d:02:e4:f9:68:86:a6:8f:ee:80:
46:b3:80:ec:16:ac:c5:f1:d7:4e:a3:f3:17:e8:ea:
d3:c0:e5:79:ed:a3:c6:4f:0c:de:60:e0:87:44:5b:
77:e2:57:bd:70:cd:27:04:40:f6:8f:a7:2f:d2:d2:
cc:fb:5b:49:a7:37:3a:45:82:e6:a0:be:47:bf:07:
4f:b7:de:b0:c7:00:7f:ee:88:62:5d:61:2d:d1:5c:
02:88:6d:5a:58:ca:db:eb:c5:1a:ad:9c:2b:a4:6b:
21:72:ea:09:11:0d:18:3d:e0:77:8e:b0:9f:5d:10:
4f:dc:e0:01:61:b8:6f:bf:6a:9d:32:5d:be:89:04:
9e:5e:ed:08:d5:6a:a8:99:62:05:5d:79:9a:a6:a5:
7e:2a:4c:22:64:1e:ef:5e:65:84:51:2e:95:47:60:
e1:dc:2e:66:e4:41:73:6b:c5:b1:95:5e:b1:70:f1:
be:8a:df:d6:74:ac:1b:1c:22:b8:72:b4:ab:48:37:
43:37:92:06:82:b2:fb:9c:c9:fd:3e:24:1c:46:1c:
eb:04:9b:b6:a8:ff:a3:c9:cd:53:88:9b:cf:83:9d:
ff:61:77:5c:13:77:f6:1a:90:e6:d9:5f:49:2b:27:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:58:1B:4B:0A:07:9F:92:6B:4E:42:E4:F8:3F:67:5B:B5:5C:9B:84
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GVgbSwoHn5JrTkLk-D9nW7Vcm4Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.0.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:14:4f:48:f6:a4:64:a8:64:3f:54:26:62:bd:92:d0:db:3f:
45:06:c5:5b:6c:7f:0b:0a:8d:0c:dc:92:93:f3:fb:26:e2:60:
d0:83:71:84:38:5d:da:85:fc:1a:0f:e5:89:13:07:8b:3e:98:
9f:48:45:fb:b8:3f:c7:97:29:37:92:d4:75:b2:f9:cd:b0:ee:
9d:c3:25:1e:08:de:e0:8a:bc:3c:75:0d:8e:3e:aa:dd:77:5f:
28:12:13:87:eb:df:81:60:3b:e5:79:77:49:38:aa:f8:80:c0:
89:f5:71:32:22:db:64:db:e1:69:ab:5d:be:09:e8:04:64:b2:
c7:86:ea:c9:64:bc:06:1f:3a:45:eb:5c:0e:c5:53:ec:11:06:
4d:34:86:36:45:d8:8f:05:d3:82:d2:73:d2:95:ac:42:7b:37:
7b:ae:52:39:ce:50:d7:2a:6f:1e:14:fa:5a:52:cd:13:13:c6:
40:43:64:c9:4c:7c:91:93:0a:51:b7:f9:15:e8:8a:b4:c3:20:
2d:34:a7:85:fd:9f:4c:68:42:f6:50:d1:2c:0d:19:69:a8:0f:
e3:13:7a:90:c6:24:89:71:93:ee:28:c1:be:38:7a:84:5d:99:
73:58:d6:9e:e5:15:8f:fb:9f:3b:6e:45:d5:33:b9:60:25:d1:
3c:30:5c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org