Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IkJBxiODoGbcPXLhApsWNoSyqRI.roa
File: IkJBxiODoGbcPXLhApsWNoSyqRI.roa (raw, json)
Hash identifier: IhpN/0qsmlPCW1JhPK779Gb4Vg+PS0zVnMeaI7trkY8=
Subject key identifier: 22:42:41:C6:23:83:A0:66:DC:3D:72:E1:02:9B:16:36:84:B2:A9:12
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A9E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IkJBxiODoGbcPXLhApsWNoSyqRI.roa
Signing time: Fri 16 Dec 2022 04:13:36 +0000
ROA not before: Fri 16 Dec 2022 04:13:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 61.61.213.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6814 (0x1a9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Dec 16 04:13:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=224241C62383A066DC3D72E1029B163684B2A912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:db:06:c3:22:3d:0d:b9:6c:64:4d:bd:18:
2a:09:c9:2c:72:6e:04:ce:b4:a9:72:aa:fe:a7:0c:
55:76:96:f0:5d:73:cf:8e:70:c1:c6:2c:a4:24:28:
55:d2:5f:0e:eb:aa:94:ca:bc:38:66:dc:2e:d4:68:
44:16:1e:b8:ef:95:7b:3d:99:df:56:22:f9:e8:a0:
72:99:35:f1:38:77:b9:fa:15:58:46:6a:c7:a8:3a:
09:88:4b:15:32:80:fb:69:74:35:fb:a6:a3:e9:7e:
9e:3d:db:21:ff:51:76:3a:8f:60:1f:78:52:c3:15:
21:1c:97:3e:c1:7a:e2:ce:e7:2b:89:74:da:af:d1:
a4:f1:4d:4e:cc:93:66:33:2b:90:da:8c:84:ce:ce:
d2:7c:34:82:66:8d:eb:21:d5:00:fb:a2:b8:12:8a:
75:9f:8f:28:a2:0f:32:6f:a3:57:5c:c8:52:2f:f3:
a0:ae:b9:cf:e6:d5:cb:b4:63:29:a0:b0:8b:e9:fe:
e0:43:ae:e3:09:71:bc:a9:d3:71:c6:6c:fe:e5:be:
9b:d5:c6:8d:8e:48:60:43:af:d2:ef:b7:da:c0:5f:
48:dd:ae:c7:7f:d2:8b:be:e7:d0:e4:cc:63:c2:d0:
cd:58:37:04:e2:2f:81:2c:c5:be:47:d4:86:79:84:
bf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:42:41:C6:23:83:A0:66:DC:3D:72:E1:02:9B:16:36:84:B2:A9:12
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IkJBxiODoGbcPXLhApsWNoSyqRI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.213.0/25
Signature Algorithm: sha256WithRSAEncryption
96:07:15:68:de:e8:1f:c6:3a:4c:35:01:bd:c7:dd:85:7f:7d:
b7:99:ea:33:78:60:d1:62:ee:31:b2:34:84:eb:e9:e5:a8:08:
9d:a3:8a:74:73:9b:25:0a:60:88:c1:a9:19:ae:a3:21:fa:a9:
1d:f3:21:30:74:f5:ea:2d:4b:34:58:87:a9:75:2c:d8:71:59:
b1:da:de:82:2d:06:02:85:be:f4:66:09:15:ac:a3:ac:a7:0b:
fc:03:87:6b:ed:80:a4:63:66:27:18:c1:c8:13:c5:94:cb:3e:
aa:aa:6b:75:a3:dd:1b:76:36:92:2f:fd:0e:7e:27:de:68:db:
d1:5d:c1:48:89:9c:5c:b5:2e:83:bd:9b:39:1c:4c:a1:39:61:
da:9b:35:f3:90:74:e8:62:21:a1:a1:6c:8b:cf:19:a2:2c:0f:
7d:41:3c:25:7c:de:d4:1d:90:ce:05:1d:94:01:fc:d5:e7:e5:
57:2d:6b:d3:c3:96:2b:5f:fd:1c:60:d8:1d:2c:6c:d7:34:0a:
8f:33:e7:1a:06:9a:e5:aa:d8:24:c4:dd:22:e8:fc:63:b0:db:
38:5e:d1:1b:79:33:61:36:c5:3c:25:6f:be:81:d2:35:3a:1c:
ff:a6:8c:83:86:30:b6:aa:5d:e3:89:8d:cd:bd:4e:dd:cd:8a:
a0:5d:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org