Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fCE1qAxrGmKhDEBk9A2K1Byr4j4.roa
File: fCE1qAxrGmKhDEBk9A2K1Byr4j4.roa (raw, json)
Hash identifier: QSb+ryhikIpHd1BbFBajN92sxXtpS4XqPZlxi9ed+4E=
Subject key identifier: 7C:21:35:A8:0C:6B:1A:62:A1:0C:40:64:F4:0D:8A:D4:1C:AB:E2:3E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F0D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fCE1qAxrGmKhDEBk9A2K1Byr4j4.roa
Signing time: Sun 07 Feb 2021 12:32:42 +0000
ROA not before: Sun 07 Feb 2021 12:32:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 61.60.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3853 (0xf0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:32:42 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7C2135A80C6B1A62A10C4064F40D8AD41CABE23E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c3:3d:cd:da:5b:8b:81:aa:7b:b4:35:d5:12:
8f:48:93:63:04:08:e7:a9:ad:d6:14:6d:03:87:9f:
c5:6a:71:ad:0c:22:59:0f:d6:d7:fc:2d:12:2f:e6:
3e:e5:2f:e8:6b:08:bc:24:e4:92:29:26:66:c7:24:
b3:50:76:5e:c8:7b:80:2b:38:a9:87:e5:f2:64:7a:
f5:26:2a:71:08:51:43:58:50:04:53:c8:01:f9:fd:
6d:9c:d9:c1:35:24:0b:58:61:de:61:ea:02:d7:22:
bd:5a:5c:0a:cf:49:68:7e:9a:01:7b:c0:47:1e:b2:
f3:a2:d9:ab:5b:a2:4b:1b:10:9f:95:e0:9c:18:54:
d3:d8:c8:09:a1:a9:c6:1c:4b:bd:de:a2:73:0a:ec:
ef:23:68:bf:6e:c6:37:13:e3:f9:54:9e:f4:d1:4b:
4f:cf:95:f0:e5:d6:b0:ce:4e:1b:d6:7b:81:4f:8a:
a4:39:9a:a3:3a:c0:38:53:b6:d6:d3:7f:fb:04:2e:
4a:7f:d5:3b:20:9a:9a:34:d4:3b:e6:67:36:fb:e4:
e9:35:38:e8:f9:8a:7a:bc:76:63:7b:99:2a:3b:4c:
25:6b:79:e3:69:4f:9f:ea:a8:fa:88:09:d8:52:3b:
e6:4e:fa:30:5e:54:98:29:8a:60:99:ee:0e:2b:dd:
42:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:21:35:A8:0C:6B:1A:62:A1:0C:40:64:F4:0D:8A:D4:1C:AB:E2:3E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fCE1qAxrGmKhDEBk9A2K1Byr4j4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.208.0/20
Signature Algorithm: sha256WithRSAEncryption
07:3a:9a:c8:f3:cf:06:06:d5:b0:4c:e1:a8:8c:ef:94:0e:44:
e2:d5:34:60:0c:4f:de:99:b8:7e:3b:8d:11:04:f7:13:93:fd:
ee:e3:04:e0:c7:9b:6f:db:1e:e7:3a:85:27:d5:1e:4e:d3:7d:
33:23:2d:ef:1f:91:92:25:f5:3d:2a:f4:16:ad:dc:b3:96:43:
5c:66:18:44:19:ab:13:8f:9f:2a:ac:f2:31:ba:25:83:56:50:
fa:be:e2:9c:4f:26:75:29:7f:f9:06:7d:b1:19:c9:7b:3b:6c:
d2:87:5c:3f:38:70:74:c2:68:33:c0:8d:07:5f:3d:4a:85:c3:
4f:1f:0b:3c:74:a6:49:04:7f:04:d7:83:0a:11:16:cc:ea:66:
7a:85:a8:af:76:41:94:b3:85:b3:ce:0a:d7:b0:cf:7e:04:2d:
cf:62:fe:5d:8d:97:50:d1:53:61:b7:68:98:a1:86:0d:33:2e:
ab:99:61:ef:ca:8f:a3:b6:26:c8:0b:4b:9f:74:2d:f1:1a:bc:
8b:a3:16:45:9f:e5:fd:2b:df:12:bb:79:b8:3a:ed:5b:05:3d:
e2:49:d0:09:5c:8f:08:f9:09:13:b7:5e:5a:be:11:d3:92:44:
7a:67:f2:1f:68:ca:1b:8a:23:57:1a:7d:11:8a:05:3a:9e:40:
2b:8d:13:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org