Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IITzoqOIXCyIGsbYSDHvQTvlJsg.roa
File: IITzoqOIXCyIGsbYSDHvQTvlJsg.roa (raw, json)
Hash identifier: iCl4Lg1iejxptj7UrpcpSpr6NYE1ndhZ7WUUaVohOnY=
Subject key identifier: 20:84:F3:A2:A3:88:5C:2C:88:1A:C6:D8:48:31:EF:41:3B:E5:26:C8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1239
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IITzoqOIXCyIGsbYSDHvQTvlJsg.roa
Signing time: Wed 29 Sep 2021 02:54:21 +0000
ROA not before: Wed 29 Sep 2021 02:54:21 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 61.60.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4665 (0x1239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:21 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2084F3A2A3885C2C881AC6D84831EF413BE526C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:c1:bd:db:87:f2:75:21:d9:cf:3a:35:f1:
4a:c7:e2:6e:c1:15:cb:6b:d7:2a:24:89:89:2c:ed:
d0:dc:8b:5f:7c:16:91:b9:2d:47:40:b0:61:03:fa:
30:b6:8e:a1:1c:58:46:5f:33:60:25:70:b0:82:f9:
eb:65:39:db:9f:a5:e5:c7:5f:3d:15:68:db:96:11:
09:d9:a9:96:05:2f:cb:b9:88:c2:43:f0:22:c4:d0:
09:73:b7:0d:fd:a2:13:99:df:3c:92:16:03:21:b7:
3c:34:ec:50:59:ce:82:04:88:fa:50:59:7c:01:e8:
22:a3:b4:2f:36:fe:05:64:1a:10:ed:29:bf:91:4f:
09:29:38:40:ae:7c:76:8c:cb:ff:81:1e:bb:23:8f:
c6:27:a7:09:1f:ee:71:fb:11:aa:64:0b:dd:37:af:
7a:db:24:73:04:c6:30:12:1d:8b:31:9c:ac:50:06:
cd:94:86:78:c0:1a:b3:8a:d5:92:d0:9c:f0:3d:8a:
3c:b8:18:4a:0d:40:0e:b7:ff:f0:f9:7f:fb:78:fa:
e0:55:1c:0d:0a:7e:d2:86:fa:fc:ba:62:d3:94:c4:
6d:27:9f:a5:d0:1f:af:f9:63:ec:d9:31:15:7c:e6:
89:d7:dc:b4:21:fd:23:83:d8:40:ab:1e:49:ac:fa:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:84:F3:A2:A3:88:5C:2C:88:1A:C6:D8:48:31:EF:41:3B:E5:26:C8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IITzoqOIXCyIGsbYSDHvQTvlJsg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.214.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:6c:fa:bc:50:31:be:9c:31:bf:38:30:37:4f:f5:81:23:72:
b3:47:de:d1:c4:3a:fc:3f:18:74:f7:6b:cf:a7:90:d9:c1:b4:
b1:12:36:80:d7:15:3f:b3:8d:10:98:c6:2a:92:32:0f:86:e8:
31:f5:dd:e9:63:ad:d5:11:f8:c0:8c:ab:d6:c6:8e:3d:bd:27:
3e:51:29:81:86:73:c1:af:86:ff:fb:99:48:5c:c5:5c:9f:c0:
51:99:c1:b1:06:b5:d8:60:6a:dc:43:5b:5d:d8:2e:1e:e9:f8:
35:09:24:2a:51:55:86:72:e8:a6:e7:7e:04:f5:42:96:d3:63:
6d:a7:80:4c:a1:93:5c:e2:3e:f7:bb:f7:4e:ba:56:61:c0:ea:
73:c1:94:fb:56:a4:7a:d7:b2:0c:a3:ff:7f:02:45:35:aa:53:
9a:ac:80:3e:9d:44:1a:f1:0a:78:db:39:9e:12:61:79:01:62:
d8:77:7f:8c:a9:2b:3e:21:08:41:63:e7:7e:ba:82:1a:b5:14:
22:90:81:ab:98:31:83:21:c4:08:aa:be:1f:02:59:14:f8:9c:
78:93:19:68:1f:32:42:06:5e:9c:b1:7a:3a:ed:01:8c:2f:8b:
dc:b5:1e:40:61:07:9c:cf:0a:ce:e2:65:b7:02:33:1e:cb:73:
c6:bc:3d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org