Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Xz9UxXaKfG2E0rsvnQMDzQMvGdk.roa
File: Xz9UxXaKfG2E0rsvnQMDzQMvGdk.roa (raw, json)
Hash identifier: yNLGAfw2Ez670Xjs7gE1H9o6OmICeUGOoJ7qYFD/ECg=
Subject key identifier: 5F:3F:54:C5:76:8A:7C:6D:84:D2:BB:2F:9D:03:03:CD:03:2F:19:D9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Xz9UxXaKfG2E0rsvnQMDzQMvGdk.roa
Signing time: Thu 15 Sep 2022 02:35:57 +0000
ROA not before: Thu 15 Sep 2022 02:35:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 61.56.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5F3F54C5768A7C6D84D2BB2F9D0303CD032F19D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:b6:b7:a0:3f:b0:eb:2b:dc:d2:e1:bd:23:
d5:82:ab:d0:92:b0:55:4b:59:a6:c5:12:e1:0b:f2:
e4:b5:1c:0d:f8:ee:a9:a1:06:ba:b9:29:b2:55:4a:
1f:1a:b1:ac:7f:f1:7c:19:98:df:85:df:47:c6:01:
89:07:18:92:17:9f:aa:fa:31:68:9d:bb:52:64:13:
85:15:e3:7f:c2:60:c1:9c:f3:dd:88:7c:79:e1:a8:
0d:62:0c:ca:98:f4:32:21:fe:9d:25:79:84:00:9c:
9e:78:cc:85:d5:d6:f7:a7:b1:6d:25:4c:e3:f5:c2:
bf:a8:1a:22:29:1f:f0:ec:1e:ed:4a:88:89:42:d0:
de:b6:20:cb:78:29:49:2f:07:f4:22:ae:23:a9:11:
3e:15:38:ef:fc:0f:a1:8f:c8:42:b6:8f:7e:5c:65:
cf:14:c3:5d:b0:8c:13:ad:86:bb:82:23:0e:f1:07:
43:ac:98:03:a1:f3:1a:73:67:45:6b:c7:e6:c3:6b:
0a:f7:8a:24:40:b4:b9:49:d2:bc:5d:cc:53:6c:37:
d7:96:8a:2d:be:9d:50:46:23:38:b5:7f:7c:a7:5d:
44:73:37:ac:ff:8b:dc:58:6d:54:0d:e7:97:55:95:
74:ea:e3:7e:c5:11:e0:7b:6f:64:21:83:e0:01:8d:
5c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3F:54:C5:76:8A:7C:6D:84:D2:BB:2F:9D:03:03:CD:03:2F:19:D9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Xz9UxXaKfG2E0rsvnQMDzQMvGdk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.160.0/19
Signature Algorithm: sha256WithRSAEncryption
47:4c:62:dd:f3:5a:2c:34:f5:03:60:52:00:89:63:0a:f7:80:
7e:49:b8:28:37:f1:2d:63:12:97:c8:de:2d:10:a9:68:91:b7:
10:67:4f:f8:50:31:24:60:95:b2:53:54:ef:80:db:50:8d:77:
df:29:be:33:b5:90:bb:a0:13:31:5c:f3:49:b4:21:97:7a:96:
40:37:93:10:7d:89:33:66:1d:be:06:02:19:cf:7e:cf:b1:51:
9f:1d:05:8e:b8:51:5f:6d:86:e7:9c:48:6f:74:dc:5e:5d:b2:
a9:b1:d0:ce:b3:c9:37:33:62:e5:a1:e2:1f:be:36:d9:bd:93:
5f:b1:a2:7c:f6:a8:31:b1:dc:42:07:bc:23:98:ed:09:aa:ac:
47:f3:f1:9c:78:7f:9a:fe:2b:88:07:2f:ae:b9:09:dd:f1:aa:
44:41:2a:66:8c:f3:b5:44:bf:2c:7f:87:ef:8d:44:a3:8f:49:
fa:5e:a8:8c:ce:aa:6c:54:52:00:e1:03:03:7a:42:c6:bf:67:
85:5f:05:e9:d5:9f:cb:c8:6c:20:f0:f5:73:e0:45:f0:4c:d5:
c7:c8:2a:1c:1a:ae:6a:29:1b:38:c4:42:a8:db:fc:e9:f9:f1:
5c:12:e2:78:e5:b9:d2:f6:cc:af:bc:c6:cf:1c:84:9f:a7:56:
80:e9:99:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org