Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HXNMLKg6NgfvyLvLcuD9qCWXu90.roa
File: HXNMLKg6NgfvyLvLcuD9qCWXu90.roa (raw, json)
Hash identifier: GIAsBpQOR/2r2MHI7eTLkawt9q2YaxsSOBONwLNcpAU=
Subject key identifier: 1D:73:4C:2C:A8:3A:36:07:EF:C8:BB:CB:72:E0:FD:A8:25:97:BB:DD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18F4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HXNMLKg6NgfvyLvLcuD9qCWXu90.roa
Signing time: Sat 22 Oct 2022 06:05:55 +0000
ROA not before: Sat 22 Oct 2022 06:05:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 211.76.46.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6388 (0x18f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1D734C2CA83A3607EFC8BBCB72E0FDA82597BBDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:1c:ef:39:bb:a1:91:6b:85:32:2b:b2:74:
13:22:d2:ce:44:d3:fa:6c:72:e9:ee:23:ee:09:ba:
85:6f:13:0a:d9:f6:0a:e7:8d:9e:59:84:8d:e7:16:
bb:dc:95:c9:3f:10:aa:8f:9a:20:1d:e9:40:92:e8:
ee:7b:df:5b:26:45:b4:a0:51:86:7b:81:6e:ab:4e:
56:0c:28:8d:e4:27:8e:ec:57:7f:cf:8d:28:7a:1b:
c7:f5:3a:02:6f:ae:70:29:da:e2:8e:32:61:c0:38:
2e:f3:b7:3d:d3:6c:5a:af:ae:b8:13:5b:06:30:7f:
a4:86:dd:30:04:c8:1b:6e:4c:7e:26:d4:8a:24:7f:
72:fb:2a:b1:35:3c:6d:9b:7d:81:3a:d6:d3:2d:32:
85:6b:28:33:66:77:e5:eb:a3:6f:d8:e1:e3:eb:61:
30:c4:d3:1a:8b:cc:8b:26:fe:c7:bb:d0:02:f1:2c:
69:40:24:2b:ea:40:f3:8b:29:40:0b:58:a9:d4:d3:
8d:4e:0d:4f:03:bd:74:2a:85:e4:34:f4:aa:ca:de:
ee:50:a6:4d:2a:f9:95:17:58:0d:bb:78:e2:53:fc:
73:b3:99:42:3a:85:d9:1d:cc:c3:e9:81:9e:6b:12:
86:2c:57:8a:b9:be:e8:a9:0a:87:0d:d8:d6:dd:8f:
61:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:73:4C:2C:A8:3A:36:07:EF:C8:BB:CB:72:E0:FD:A8:25:97:BB:DD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HXNMLKg6NgfvyLvLcuD9qCWXu90.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.46.0/23
Signature Algorithm: sha256WithRSAEncryption
02:7c:d8:08:0d:17:a2:31:3a:65:e5:cd:e9:b9:2b:7e:99:4f:
f8:11:05:4d:a5:b0:4a:84:ba:44:86:83:13:a7:61:33:6b:8f:
c3:b9:21:85:d4:44:a3:a7:16:6c:52:93:ab:06:76:e4:5b:c3:
41:7f:51:45:fc:64:66:f2:d0:08:01:2f:7f:68:8d:83:91:fd:
b1:c8:e0:63:66:ab:e4:5c:81:05:cd:88:95:61:58:40:65:75:
df:3e:6a:36:f3:7d:8e:45:68:05:69:8d:e1:c4:e4:10:22:50:
0f:b9:4d:5a:d1:64:06:e9:ef:17:cf:ca:84:0b:ca:e5:62:4c:
3a:96:5d:f7:5a:de:85:e2:10:a2:d2:43:c8:34:22:3d:31:11:
13:7c:4d:20:ce:47:53:63:7a:a3:7d:15:08:4d:af:dd:03:b8:
20:20:c8:b0:40:53:dc:b3:b4:5f:1e:c4:5e:c4:b9:01:a9:79:
8d:14:1a:8a:52:07:33:cb:42:4f:08:6c:df:22:07:7b:e7:1d:
c2:8a:c4:33:92:c4:ad:79:db:84:d1:84:39:d0:11:9f:be:72:
ac:7b:2b:df:46:74:c6:25:87:77:45:25:2a:0a:b0:ad:76:86:
7a:78:09:84:e1:a8:9d:75:f9:10:32:d6:fd:f1:a9:bd:6c:32:
50:f4:5f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org