Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eng0y9acDCsoDP0_fJsde0djWAo.roa
File: eng0y9acDCsoDP0_fJsde0djWAo.roa (raw, json)
Hash identifier: +x6jstOFKW5m6XbuF7qmp4atHAhf+0PXdA0M07gNR84=
Subject key identifier: 7A:78:34:CB:D6:9C:0C:2B:28:0C:FD:3F:7C:9B:1D:7B:47:63:58:0A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eng0y9acDCsoDP0_fJsde0djWAo.roa
Signing time: Sat 22 Oct 2022 06:14:01 +0000
ROA not before: Sat 22 Oct 2022 06:14:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.60.215.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6654 (0x19fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:14:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7A7834CBD69C0C2B280CFD3F7C9B1D7B4763580A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:a2:61:15:40:6b:d7:f5:b8:5e:26:77:6d:
07:c6:2f:cd:a4:dd:0f:fe:86:af:ed:3a:d1:a2:9b:
78:4d:35:3b:b4:8b:98:63:35:2a:57:30:1c:13:39:
55:c2:9a:a2:ae:0d:85:a6:fa:b0:2b:f2:e7:3a:10:
b2:99:de:e5:66:b9:30:c0:0d:72:fd:3f:c7:96:1e:
24:5d:d1:77:89:77:a3:93:2e:53:d5:42:a3:f0:86:
65:f3:b3:10:13:f7:eb:57:b9:dd:97:0d:f6:6a:21:
3c:e3:f4:76:6b:e4:2d:79:8a:61:c8:3e:05:fd:de:
63:32:bb:aa:57:9d:1f:e3:8f:ff:ed:d3:a4:4e:05:
65:3f:8f:22:40:04:87:9a:f1:65:dd:4f:be:8c:66:
a5:7e:9f:bd:2a:5c:a1:48:41:12:68:28:8a:81:ed:
ba:1c:b6:c3:ea:98:55:e8:1b:57:ea:e1:71:93:ce:
7d:c3:aa:38:14:93:8b:79:f8:a1:a4:4c:22:4b:d0:
fa:6f:6d:d8:26:a1:d7:74:85:06:ab:7c:66:2e:a7:
b8:55:bc:e4:59:22:2c:91:20:73:6d:c0:c9:87:a6:
38:7a:0b:86:9d:9b:d7:64:75:f6:2c:e9:d3:44:6f:
71:b0:ca:f4:c7:f2:88:c6:5e:08:1b:62:bb:04:1b:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:78:34:CB:D6:9C:0C:2B:28:0C:FD:3F:7C:9B:1D:7B:47:63:58:0A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eng0y9acDCsoDP0_fJsde0djWAo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.215.128/25
Signature Algorithm: sha256WithRSAEncryption
3a:ef:66:77:92:d2:47:27:cc:d4:93:07:63:88:a4:1f:ea:c5:
1e:0e:3e:70:ac:b2:62:cf:b6:43:87:09:77:d6:21:ec:42:6d:
8c:98:40:35:3e:ef:b2:d2:c0:4a:ba:7b:8a:b5:67:9e:8c:f3:
71:29:6f:b1:08:53:0c:18:18:38:7e:c3:9e:9a:99:b0:3c:25:
52:0e:e9:b9:be:f9:11:8b:2d:0f:f1:75:d7:e8:d9:5f:d0:cf:
cf:08:3a:83:37:da:42:14:90:4e:63:c0:92:3c:63:43:f9:d3:
51:ff:27:2c:3b:09:a8:50:96:95:44:f2:cd:8b:c4:75:19:78:
bc:fc:4c:c1:80:18:91:16:a1:c7:6b:ae:ae:f4:18:c0:97:fe:
33:f8:c1:c0:30:6b:6b:53:7c:9c:c5:88:dd:2c:13:dd:e9:19:
27:0a:3f:32:5c:56:e5:fa:a3:81:32:45:3d:f3:dd:5b:b4:af:
a6:6a:98:41:38:57:ec:01:c0:a4:fd:9f:2e:5e:26:e6:73:f4:
29:52:48:0d:5c:d1:9c:5b:06:a8:16:9a:92:41:2b:d9:0a:93:
ee:b9:5e:c3:a5:31:9f:b2:4c:4b:b1:36:87:4b:52:98:ad:af:
d3:8a:02:24:cb:1f:90:ed:99:d6:df:dd:1c:26:7d:b7:1b:a3:
d2:86:01:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org