Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LNQYjtK_Fq7s2o9IVFLCNajlv7w.roa
File: LNQYjtK_Fq7s2o9IVFLCNajlv7w.roa (raw, json)
Hash identifier: NWpyysDdKS17x1/M7M2igrKIPQmJMyMMQqNq+kYBi+U=
Subject key identifier: 2C:D4:18:8E:D2:BF:16:AE:EC:DA:8F:48:54:52:C2:35:A8:E5:BF:BC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A08
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LNQYjtK_Fq7s2o9IVFLCNajlv7w.roa
Signing time: Sat 22 Oct 2022 06:16:29 +0000
ROA not before: Sat 22 Oct 2022 06:16:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 61.61.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6664 (0x1a08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:16:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2CD4188ED2BF16AEECDA8F485452C235A8E5BFBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4f:d7:b4:d7:4f:50:dc:b7:0b:1d:96:36:ee:
78:b3:4f:03:3b:12:dc:18:b9:f6:10:c8:e6:fc:ee:
db:0c:22:ae:99:2b:dc:f3:c4:19:6a:c4:4d:d7:b0:
f3:e4:e8:44:7e:22:fc:05:3c:ec:6e:fd:e0:90:1f:
32:3e:6c:be:75:c1:ec:17:e8:32:e1:c1:13:f5:ab:
f4:26:42:a6:1f:1a:97:5d:a6:3f:e9:e8:e1:9b:dd:
0d:fd:6d:b1:a5:ac:6a:13:ed:2c:6b:7b:09:0f:12:
8b:2d:3e:29:b0:59:5c:b9:a5:67:48:09:b9:af:d9:
05:30:bb:47:7b:8c:c3:87:dd:93:c8:da:de:6f:ac:
a2:98:5a:b5:e9:d4:b1:e8:3f:dd:2c:4a:25:9c:13:
c4:d6:22:4f:4c:f6:c5:f8:72:2e:da:b4:70:5b:c2:
1f:7e:d0:3e:4b:a9:54:db:3b:10:0f:dc:a8:28:3d:
2f:6e:ef:69:8b:26:03:d5:e6:3b:0f:67:ad:68:d9:
6e:d1:a0:3f:4d:d2:dc:98:ad:66:21:8b:6e:0b:01:
b1:96:e8:00:2e:0a:f5:f4:06:21:1e:fc:d7:6e:55:
42:f8:a5:dc:62:2f:d0:16:72:3d:bb:8f:67:73:7e:
c4:81:18:5f:1b:fd:d9:e0:1e:65:bd:9e:e2:54:6b:
12:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D4:18:8E:D2:BF:16:AE:EC:DA:8F:48:54:52:C2:35:A8:E5:BF:BC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LNQYjtK_Fq7s2o9IVFLCNajlv7w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.212.0/22
Signature Algorithm: sha256WithRSAEncryption
82:70:d2:9f:76:9e:ea:67:26:ed:5d:a4:c4:aa:58:19:b5:f1:
68:bc:30:d5:fd:ee:fa:42:a0:6d:14:97:f3:3b:dc:f6:f6:5b:
4a:13:63:32:57:b3:23:d5:66:f6:b2:97:c3:9f:f3:2c:76:33:
b5:a2:32:ec:bb:41:53:2e:09:b9:90:4a:1f:1c:ec:0d:ee:45:
aa:e7:f3:cb:6c:7f:5b:df:f5:3d:0a:0b:94:99:d9:3d:a1:44:
a8:ae:06:f1:8f:05:3b:79:cb:c5:42:76:aa:17:98:9d:e2:a5:
0d:06:f4:ae:6b:fe:38:75:4c:79:1e:d2:02:00:6d:52:78:ce:
85:5b:10:67:a0:96:f8:2a:7c:1a:66:00:11:e9:b4:e3:46:02:
4d:ba:32:7d:09:a7:f3:3f:fe:87:b9:44:b2:df:5f:66:ec:96:
74:6a:74:e2:51:58:6d:cc:15:a4:54:71:5a:32:1c:39:e0:c4:
d5:13:52:a4:5c:bc:04:e0:f6:e4:1d:a0:e3:2f:ff:80:9c:2b:
e4:65:68:d7:a7:99:86:f4:18:a2:da:19:0d:c4:fe:89:fc:ac:
11:ab:41:0e:c5:da:15:6b:89:6e:01:11:b7:7e:a7:db:31:78:
bb:b5:ed:bb:49:41:f1:09:26:70:c7:4f:c7:14:aa:02:49:3c:
0a:05:4f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org