Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_dRkjv41uUT0ap0K8oyWXqeIM5s.roa
File: _dRkjv41uUT0ap0K8oyWXqeIM5s.roa (raw, json)
Hash identifier: Lj1WGTmBIFr7zAqTzBF/FoOegHWba4/gzXFjPJ2sOmI=
Subject key identifier: FD:D4:64:8E:FE:35:B9:44:F4:6A:9D:0A:F2:8C:96:5E:A7:88:33:9B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_dRkjv41uUT0ap0K8oyWXqeIM5s.roa
Signing time: Thu 15 Sep 2022 02:36:23 +0000
ROA not before: Thu 15 Sep 2022 02:36:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 61.61.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FDD4648EFE35B944F46A9D0AF28C965EA788339B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:eb:22:c5:46:91:45:22:79:b2:48:fb:0b:97:
03:26:39:5b:1c:ec:48:b1:38:dd:56:13:3a:9f:42:
69:54:ce:21:e2:d2:06:0e:db:24:de:51:6a:0c:23:
9d:e0:67:2e:a6:02:e8:0b:17:08:e7:e1:27:2a:1a:
60:69:a0:4a:c3:e4:26:45:c1:f3:fb:68:e3:d3:60:
da:a7:be:b7:bc:a5:a1:06:45:48:75:b2:5a:bf:7a:
2f:bb:44:f5:6a:d4:5b:21:2e:cb:3f:7d:23:6b:ee:
8d:82:dd:a4:97:1d:08:82:a9:c9:65:e0:83:c3:54:
c2:19:73:17:da:18:65:05:53:76:3e:6e:83:26:d0:
05:b3:bc:a9:dc:dc:7c:99:77:00:a7:b7:53:06:1a:
2b:d2:bb:af:66:a5:7a:73:9f:dd:0d:73:3b:cb:49:
7e:9e:bd:04:cf:27:6e:7b:43:02:94:e5:8e:25:8f:
cf:ba:11:9a:3e:80:6a:dc:40:1a:93:3e:2d:e5:1e:
f3:aa:15:c5:54:76:a5:d4:15:5f:99:14:e2:98:bf:
b8:81:ba:5f:49:62:71:24:15:31:3e:aa:d0:c4:bd:
31:31:c1:3e:6c:4d:d6:92:f2:10:77:19:25:3c:a1:
2e:2c:fb:34:88:96:fb:80:70:51:c8:cf:67:0a:c6:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D4:64:8E:FE:35:B9:44:F4:6A:9D:0A:F2:8C:96:5E:A7:88:33:9B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_dRkjv41uUT0ap0K8oyWXqeIM5s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.224.0/20
Signature Algorithm: sha256WithRSAEncryption
94:ae:0e:34:7a:f1:37:70:e5:44:73:7e:37:ea:f9:d2:2a:08:
3b:7e:ca:71:b0:8a:56:17:39:0f:d6:19:ff:ad:29:92:04:ed:
96:7d:e6:6b:e6:39:b1:c5:b0:76:13:75:16:1d:c6:7f:22:b8:
54:c3:52:e6:65:44:50:02:88:26:54:6b:9a:02:7f:46:0f:d8:
16:5a:b5:78:fb:9d:6d:50:2d:ed:6f:97:37:cb:1c:ac:0a:aa:
28:9e:d3:89:ef:34:95:9c:20:48:24:74:1e:e0:6b:bb:cd:0f:
72:68:13:00:23:52:1e:ab:79:e4:f3:89:d5:33:3c:6e:d0:86:
c5:66:0c:18:cf:0d:22:ba:6f:92:be:3a:56:61:d7:8f:db:c9:
01:cf:79:02:3d:bc:f6:ad:83:6a:14:7a:50:7b:dc:45:84:e3:
30:e7:3d:f5:cf:99:e7:1a:57:80:63:63:d9:67:8e:1c:c0:3f:
9e:12:1c:26:22:c9:bb:18:d9:df:bd:a1:f0:96:d9:2a:02:ad:
85:c5:28:fb:45:17:8a:3b:d9:37:6c:3c:11:66:ac:39:41:a9:
03:78:d8:99:7b:57:aa:53:76:d6:cf:dc:7e:40:5e:06:77:f2:
5b:f9:2b:39:41:49:de:1a:44:74:0f:d1:21:86:3d:b2:85:fc:
10:98:02:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org