Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hMeHFGZVtwRWCNEclmo0S6MEBJs.roa
File: hMeHFGZVtwRWCNEclmo0S6MEBJs.roa (raw, json)
Hash identifier: 7eMzAn30w5vAH/LMu714/TptYWJg/my0bK6ND+R5BCc=
Subject key identifier: 84:C7:87:14:66:55:B7:04:56:08:D1:1C:96:6A:34:4B:A3:04:04:9B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hMeHFGZVtwRWCNEclmo0S6MEBJs.roa
Signing time: Thu 15 Sep 2022 02:36:26 +0000
ROA not before: Thu 15 Sep 2022 02:36:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 61.58.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=84C787146655B7045608D11C966A344BA304049B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:cd:72:ac:9a:28:f0:40:e1:6d:e9:b0:6e:
a0:8c:e6:23:4c:6e:67:d7:8d:26:ca:b6:3e:35:7e:
5f:ad:50:4c:c1:ec:8a:74:88:24:b4:c8:2e:70:3b:
6b:51:14:54:d0:97:c9:87:69:fc:86:8b:5b:8b:60:
1b:96:73:a5:ec:02:f0:0c:7d:4f:ab:80:0b:01:2d:
20:71:c7:7e:11:7e:83:8b:61:09:b9:85:72:21:94:
20:a4:2f:65:c2:5c:03:50:ce:d4:92:43:64:2d:7c:
65:bc:f8:39:99:41:62:59:8e:aa:23:14:18:59:0b:
41:26:13:88:60:5f:20:60:91:b7:18:1d:79:98:3b:
d5:55:20:2c:c5:2f:8e:71:a1:ef:d9:e3:80:e8:cf:
ac:4f:29:b7:e6:05:81:c0:c7:cd:08:e6:ad:9c:28:
4d:cf:aa:af:a8:3a:e2:22:67:62:31:12:3f:c2:ca:
5f:c3:72:75:ac:31:4b:63:c2:11:52:06:68:68:76:
f8:1b:e6:ea:15:7f:b8:7b:ac:d8:db:1c:54:a4:4f:
a6:dd:d5:5f:7a:4d:77:6c:31:7b:dd:d4:c8:0a:b1:
84:b2:f6:06:0a:e5:e1:d5:3c:38:54:b4:3d:f1:bc:
c0:3e:6a:bb:09:42:18:2f:67:88:ae:b1:1e:20:52:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C7:87:14:66:55:B7:04:56:08:D1:1C:96:6A:34:4B:A3:04:04:9B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hMeHFGZVtwRWCNEclmo0S6MEBJs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.124.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:cf:b6:05:19:4a:ed:07:38:d7:b3:00:7f:85:a0:e4:ce:74:
28:72:30:07:26:fa:ba:4e:82:97:11:16:cc:77:c9:38:39:fe:
da:41:c9:22:32:fe:a8:d0:fe:6f:c2:23:c4:8a:e8:47:70:d4:
58:d7:ab:9e:7c:ab:a2:d8:66:c2:46:aa:1c:77:1a:0b:c7:fd:
36:61:88:43:ef:e9:5c:e5:73:34:05:76:07:cb:9a:5d:86:bf:
ce:c8:24:ac:ce:c5:6c:29:1e:c0:2b:78:6a:c2:75:76:82:06:
32:7b:21:d7:15:03:93:01:2c:d7:28:9a:fd:ab:28:15:8b:ab:
17:b5:2d:8d:0b:04:cf:ff:0e:63:45:f1:e3:c3:8b:e0:ee:46:
c6:a1:49:6c:25:87:a4:cd:2c:3c:e8:51:40:88:7c:6c:3c:38:
cd:6d:39:47:73:28:5e:fb:34:89:21:e0:bb:3a:2a:d5:37:1c:
b1:c5:65:b3:db:f6:18:d4:6e:1b:f8:c0:08:97:c1:61:f4:81:
da:27:e9:cc:d5:b7:56:e5:8e:a3:8a:2d:8a:00:1c:e6:dd:00:
75:ed:4e:cf:52:19:e9:fb:bf:59:f8:ac:63:df:c5:c3:8f:30:
1d:22:c8:92:6c:5f:d1:81:9b:17:40:7e:87:82:72:ea:43:6a:
33:99:dd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org