Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J3yKo1Ee5W0I995eWHXIwc_qUvY.roa
File: J3yKo1Ee5W0I995eWHXIwc_qUvY.roa (raw, json)
Hash identifier: tTQHf+TJ6qFeap3tpfJgEUs0FtD+ppOagFEHox9Y0co=
Subject key identifier: 27:7C:8A:A3:51:1E:E5:6D:08:F7:DE:5E:58:75:C8:C1:CF:EA:52:F6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 109F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J3yKo1Ee5W0I995eWHXIwc_qUvY.roa
Signing time: Sun 07 Feb 2021 12:46:33 +0000
ROA not before: Sun 07 Feb 2021 12:46:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 61.60.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4255 (0x109f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:46:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=277C8AA3511EE56D08F7DE5E5875C8C1CFEA52F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:6a:ad:19:66:e2:c5:3d:ae:87:6b:ea:a7:
80:0e:90:c6:19:33:06:f0:fe:e5:a7:f5:3a:92:0b:
d7:a7:ad:fc:c7:85:ea:00:0a:99:52:4a:a6:65:4c:
2e:51:c1:7e:df:11:cb:f2:13:bd:7f:7c:ea:80:03:
2e:13:8c:0f:f7:0e:71:a8:89:c2:ea:5d:dc:9d:11:
00:dc:ce:af:b0:8f:6d:85:5f:c2:31:a3:12:17:f7:
7a:b8:c0:ba:bd:8a:ad:2c:e9:6f:d8:a3:4e:29:0a:
42:12:25:67:08:6b:a8:e1:87:87:26:e8:65:7c:bd:
93:10:76:2f:97:50:2e:fd:4a:82:6d:26:20:f3:e2:
dd:13:de:02:59:31:d3:8c:48:2b:40:a0:21:55:d5:
3a:f2:f7:50:e9:a1:f8:83:8c:86:60:12:1b:86:60:
46:a8:d5:fe:f6:be:d9:1f:d6:ba:f5:16:d2:b0:5f:
34:b7:14:96:c0:87:71:b5:96:33:41:86:1c:1e:9a:
67:30:07:8c:20:85:f4:d9:9e:7f:8b:82:11:41:d8:
af:14:fe:a6:5d:d6:52:77:7c:05:15:d7:70:8b:cd:
71:89:2b:a9:38:55:13:1f:bd:77:56:8d:a4:c0:14:
67:e3:6a:95:18:20:77:b7:2d:e6:dd:76:ff:af:21:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7C:8A:A3:51:1E:E5:6D:08:F7:DE:5E:58:75:C8:C1:CF:EA:52:F6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J3yKo1Ee5W0I995eWHXIwc_qUvY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.208.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:b1:4c:20:4c:f8:51:99:30:c6:00:ee:de:69:bb:6d:c0:7a:
7d:2b:b2:8f:a1:e9:38:92:b2:35:5f:0f:69:8e:f6:01:f9:07:
e6:b8:81:0e:51:6f:e7:19:44:ff:3b:aa:24:3c:85:83:92:fd:
09:d7:28:18:cd:a8:b1:f3:04:60:df:69:b2:2d:1c:fa:d4:26:
97:c3:58:e2:3f:21:4e:ef:64:08:2f:34:32:c1:e1:8f:62:6f:
23:5c:ce:3f:f8:8e:04:f7:f6:c6:16:f2:89:af:d0:5a:b6:15:
4a:8b:a1:c6:04:5e:40:75:c3:ce:35:43:79:83:73:f4:fe:3d:
99:12:7a:f3:8d:fd:59:ba:b0:12:27:88:0c:29:84:f0:b0:34:
d4:f8:2c:ea:4f:d9:a1:67:e4:d4:b2:4b:37:93:ad:5d:a3:3b:
00:fc:da:c2:eb:06:ac:c5:6f:9e:82:55:77:ad:2d:34:19:1b:
82:e8:84:31:46:ef:61:98:3d:f4:c4:c3:41:06:67:45:af:16:
02:d6:87:79:84:66:12:ab:53:6d:92:12:65:b7:9d:65:05:8f:
5f:bd:3f:b4:b6:3b:09:51:ea:f1:19:c1:e1:9c:41:d6:43:3e:
05:aa:c7:39:56:bc:7f:86:5b:11:94:f6:6a:bb:f3:24:2d:eb:
a9:2f:e6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org