Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Nxryxfsad4fPUHj-n4S3SlHMHvI.roa
File: Nxryxfsad4fPUHj-n4S3SlHMHvI.roa (raw, json)
Hash identifier: 5dl6eOZDETOFFgo6ik8eEz8ajUgaCgv+xFqxaT/jGCQ=
Subject key identifier: 37:1A:F2:C5:FB:1A:77:87:CF:50:78:FE:9F:84:B7:4A:51:CC:1E:F2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 133E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Nxryxfsad4fPUHj-n4S3SlHMHvI.roa
Signing time: Wed 29 Sep 2021 02:55:31 +0000
ROA not before: Wed 29 Sep 2021 02:55:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 61.60.214.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4926 (0x133e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=371AF2C5FB1A7787CF5078FE9F84B74A51CC1EF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:26:1f:e4:65:4c:4f:78:dc:af:19:b4:64:
7c:aa:af:1c:c1:f4:1e:8b:ca:68:f9:f2:29:b9:6e:
db:4e:18:1a:ca:da:a1:34:74:9f:ae:4c:a5:f6:c9:
db:cb:31:25:49:c2:4c:e5:35:a1:d6:c3:72:26:06:
ab:e2:f1:54:f8:d0:67:b0:92:47:84:f9:d5:5e:a8:
3d:34:22:d3:2b:e8:bb:c7:5f:42:3d:07:5d:ac:45:
c4:07:9c:9d:ee:fa:72:b4:28:25:fe:76:35:d5:98:
c8:6f:7e:11:78:1e:43:8a:cf:84:64:5e:d0:10:c8:
f1:95:3b:3a:32:19:c5:55:63:5f:a3:d9:f6:79:55:
59:78:f4:07:d9:9f:6a:3f:37:0f:64:d2:0b:89:d9:
55:7c:dc:f5:e5:5e:52:a4:a0:77:38:f5:51:b5:c2:
5b:58:fb:af:4a:36:5c:77:9f:e3:84:e7:0a:81:1c:
69:2e:68:55:11:0c:0c:2e:05:20:41:f3:44:10:fc:
dd:4e:36:56:52:4b:af:99:a7:12:49:8d:31:cd:5c:
3f:bd:e9:86:31:dc:e9:ef:b3:6a:13:6d:19:d7:b8:
03:a3:3d:ce:a3:22:12:c5:a9:35:de:22:1b:7d:80:
ba:be:74:4c:2c:a4:6b:0b:cd:60:a2:1b:0c:79:8e:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1A:F2:C5:FB:1A:77:87:CF:50:78:FE:9F:84:B7:4A:51:CC:1E:F2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Nxryxfsad4fPUHj-n4S3SlHMHvI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.214.0/23
Signature Algorithm: sha256WithRSAEncryption
14:3d:42:7a:8e:4d:9e:1f:f6:89:3a:18:82:9e:17:b7:83:da:
b0:b6:43:f1:69:a0:32:65:0c:09:68:48:e6:0e:53:19:1a:22:
8c:c2:af:c3:89:e8:52:d9:fe:31:af:68:03:c1:ea:1d:3f:18:
7e:41:e3:df:5c:36:f4:28:69:aa:29:5c:44:dc:7a:5b:80:46:
3d:11:d9:e5:67:97:d6:71:30:d6:5c:b4:77:3f:c2:ad:d4:b7:
18:75:58:69:f9:a2:f6:eb:ef:58:23:f1:f9:72:ac:44:fe:9f:
dd:8b:8c:2c:f4:d3:50:7f:29:7e:ba:4a:2c:bb:1e:93:b7:be:
86:c0:19:d1:10:0f:1e:50:55:87:13:f2:35:fc:67:0e:a3:d8:
fc:cc:1c:64:8e:aa:2a:81:fb:b0:c3:36:53:3f:4c:64:8f:81:
ae:e0:b5:c4:ed:8e:90:40:7f:8a:42:54:b9:3e:c2:87:76:de:
2b:09:90:92:77:02:df:c4:f3:d6:3d:76:c2:1f:22:73:1d:01:
92:61:86:88:f3:cf:c6:34:c1:4d:b6:a2:93:ba:28:41:51:2b:
cf:81:0c:51:aa:4f:35:e8:02:56:db:8e:61:83:1a:d7:67:3c:
8d:16:dc:97:3e:6b:bb:07:ed:ba:2a:f9:a3:78:f4:11:ab:95:
55:0a:75:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org