Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LksTjUvV0OPAJ80_Psz4NfAK7Uw.roa
File: LksTjUvV0OPAJ80_Psz4NfAK7Uw.roa (raw, json)
Hash identifier: wkIfHjJCXR83pjSgPp6pLTmgD7MJqqg5wTWRLpjtAac=
Subject key identifier: 2E:4B:13:8D:4B:D5:D0:E3:C0:27:CD:3F:3E:CC:F8:35:F0:0A:ED:4C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 101B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LksTjUvV0OPAJ80_Psz4NfAK7Uw.roa
Signing time: Sun 07 Feb 2021 12:37:39 +0000
ROA not before: Sun 07 Feb 2021 12:37:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 61.58.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4123 (0x101b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:37:39 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2E4B138D4BD5D0E3C027CD3F3ECCF835F00AED4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:28:73:19:39:15:83:df:c6:83:35:2b:69:
b0:60:b0:c9:d2:f2:34:15:b3:bb:43:34:2e:08:db:
c6:1c:43:6f:c1:e9:05:82:b2:4c:57:00:9a:cd:27:
39:cf:9e:ef:73:b4:a2:7b:19:c7:2f:83:63:7e:c3:
2b:28:a4:36:7b:9c:f3:ea:4f:4e:d5:b1:52:c3:d5:
75:6a:0c:67:91:61:05:8b:3f:51:62:d4:2c:6b:8e:
b4:90:e9:4e:b6:38:d7:9a:67:05:06:89:b0:69:67:
87:00:57:3c:8c:af:64:45:f0:5a:04:85:8e:ac:2e:
ce:48:9d:6d:f3:b6:c3:5e:cf:69:a1:ad:93:3b:18:
3f:76:78:d5:40:ac:bb:9d:8f:3f:c9:a8:71:f1:5f:
60:9d:c5:4e:94:da:cd:64:23:6b:e8:f8:b8:b4:f2:
77:ac:b8:0c:a3:17:8c:4b:9c:ec:c3:30:95:60:8d:
2c:77:a5:1b:27:6d:32:08:0f:93:2f:49:34:8e:dd:
59:6e:4a:60:90:12:3a:65:b3:c7:77:ba:ba:3a:2f:
d2:fd:fb:a4:5c:05:78:0a:9b:da:20:b6:bd:20:c4:
9c:39:50:56:e6:de:11:c2:91:2a:58:5b:72:f5:23:
02:f5:c9:7b:ac:d5:1f:cf:fc:a3:1c:f0:4f:3d:8a:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4B:13:8D:4B:D5:D0:E3:C0:27:CD:3F:3E:CC:F8:35:F0:0A:ED:4C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LksTjUvV0OPAJ80_Psz4NfAK7Uw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.124.0/22
Signature Algorithm: sha256WithRSAEncryption
58:1a:8f:90:b8:fe:7d:e1:93:b3:ba:bf:53:e5:91:14:d7:51:
f4:39:8c:65:1b:50:2f:45:21:b6:2e:49:79:d9:90:e2:92:2a:
28:94:20:9f:8b:71:01:08:b9:a3:67:55:db:5c:9b:04:59:b2:
03:56:38:00:5b:2d:78:bb:03:81:f8:92:2f:f7:df:9f:d3:f3:
91:6e:f2:87:14:93:42:14:e7:8e:d5:a2:7e:8a:8c:1a:07:c9:
e7:e4:14:2a:38:37:76:84:0f:62:c9:70:7b:c5:05:5e:52:d0:
03:8c:87:0b:1c:87:c5:ac:5e:30:1a:b1:5e:5c:b0:17:ff:e6:
77:13:b6:4b:25:5d:6b:f1:e2:ab:ff:6a:05:e2:d0:e6:d1:1f:
36:69:19:53:c5:a4:94:e2:2c:53:dc:b6:3b:c5:30:3d:2a:68:
9c:cb:86:86:57:03:e6:09:64:85:c1:f5:62:4d:3e:ac:a8:c7:
92:27:c6:d4:9f:53:b0:87:25:d5:45:5d:75:4b:b4:77:f5:9d:
9b:85:d0:50:64:97:20:e5:11:15:41:81:a7:01:33:83:19:6d:
13:37:74:42:21:5c:eb:fb:4e:5a:b1:4f:c5:03:f5:d3:1c:d9:
01:fc:c2:46:8b:22:0f:89:56:38:ed:19:7a:da:f2:8b:6e:48:
85:ff:4e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org