Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/auX1QjFRJFMbn3cKoauvP8NdAOU.roa
File: auX1QjFRJFMbn3cKoauvP8NdAOU.roa (raw, json)
Hash identifier: IcJG1ZXT9xce+qpaMjbhPpEZeskDhQQ2XvBUykvor7U=
Subject key identifier: 6A:E5:F5:42:31:51:24:53:1B:9F:77:0A:A1:AB:AF:3F:C3:5D:00:E5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19EE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/auX1QjFRJFMbn3cKoauvP8NdAOU.roa
Signing time: Sat 22 Oct 2022 06:13:05 +0000
ROA not before: Sat 22 Oct 2022 06:13:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 61.58.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6638 (0x19ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:13:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6AE5F542315124531B9F770AA1ABAF3FC35D00E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:3a:6d:22:8c:d5:e6:88:83:61:fb:6c:6c:
b2:68:42:0d:8e:d9:01:9f:ac:10:83:76:eb:7d:bb:
ac:17:87:9d:dc:1f:5d:a1:93:01:2f:27:9f:90:fb:
61:d7:48:63:a0:f3:1d:95:92:c8:c9:df:4a:f8:c7:
26:b8:b5:5b:01:9d:3a:a0:c9:66:07:6a:78:47:34:
34:2d:19:ff:cf:64:a1:e3:14:2d:27:f3:ba:f8:7b:
25:8e:8d:34:af:10:b0:c3:6b:1c:02:12:9e:80:bc:
44:a8:d1:f6:09:2f:08:a4:26:ff:05:62:d6:48:a6:
c0:6f:63:0b:e4:2a:28:bb:81:e1:5b:79:bb:c1:48:
38:0a:94:48:1f:06:9e:8d:c7:fb:98:3f:1d:fc:f9:
a7:b4:9d:fc:db:09:0c:0f:3a:22:4e:d3:13:49:3a:
36:73:53:a1:db:f6:c9:e0:d7:41:db:a0:c1:3a:5d:
43:2b:74:f0:62:bf:a3:a3:6c:54:7a:3e:73:ac:d3:
84:b5:73:2e:44:2d:d3:dc:4e:27:30:60:f8:53:8a:
75:61:52:27:e1:3e:75:46:4a:ef:b7:cf:70:4b:36:
af:43:ea:ea:b1:96:9b:da:cd:b0:02:7f:9a:41:d2:
27:49:18:df:76:49:83:87:b2:68:1d:6c:81:14:bc:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E5:F5:42:31:51:24:53:1B:9F:77:0A:A1:AB:AF:3F:C3:5D:00:E5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/auX1QjFRJFMbn3cKoauvP8NdAOU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.120.0/22
Signature Algorithm: sha256WithRSAEncryption
46:07:1a:e9:7f:04:6a:8f:04:2d:9e:6a:db:60:2b:f1:09:62:
64:ae:05:99:0d:ab:60:32:c0:5a:26:7d:7c:06:4b:12:9c:38:
46:6e:f2:fd:9f:39:83:51:15:94:28:46:b4:c3:7d:04:00:94:
de:65:6b:64:96:20:8e:4d:aa:50:db:b0:07:c2:49:56:e4:29:
77:e8:7c:de:8e:98:8d:ab:1d:d8:87:80:80:5c:40:39:a6:2b:
e0:9c:a0:6e:21:e4:6b:b9:47:eb:88:7e:80:17:73:0e:12:e7:
e0:63:c2:fe:92:d8:cb:64:fe:3f:a0:c9:97:f3:39:ec:b2:f6:
9e:a8:6c:64:61:cc:5f:ac:7f:1d:f6:b5:ba:ef:df:eb:12:61:
47:95:53:10:a4:36:8e:38:32:43:76:a0:ee:7d:f4:c1:c6:63:
9e:c7:cb:e5:dd:b0:a3:df:57:e2:ba:06:b5:39:53:96:7a:82:
df:22:8a:dd:db:b1:4f:df:8b:b8:c6:75:89:53:ba:67:12:9e:
43:51:a2:54:d8:84:90:0d:9c:18:a5:ed:88:bb:98:2b:5e:10:
76:2a:1b:30:b9:fc:cb:f2:ff:a8:53:cc:50:3f:b2:ca:43:26:
2e:55:4f:e1:ab:12:35:80:68:08:27:6e:6b:50:cf:07:84:78:
15:b6:15:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org