Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/if3u5TpNzc_K9o09sb7uzwtvn_8.roa
File: if3u5TpNzc_K9o09sb7uzwtvn_8.roa (raw, json)
Hash identifier: 4NRYjIxKaRClGp8jEILGqVp1RAoqPJughZaUm3afyXI=
Subject key identifier: 89:FD:EE:E5:3A:4D:CD:CF:CA:F6:8D:3D:B1:BE:EE:CF:0B:6F:9F:FF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F77
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/if3u5TpNzc_K9o09sb7uzwtvn_8.roa
Signing time: Sun 07 Feb 2021 12:34:17 +0000
ROA not before: Sun 07 Feb 2021 12:34:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 211.76.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3959 (0xf77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:34:17 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=89FDEEE53A4DCDCFCAF68D3DB1BEEECF0B6F9FFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:24:2b:37:53:dc:ff:98:5f:cc:66:12:57:25:
a9:88:44:36:00:9c:da:86:56:08:bf:d6:e5:98:54:
06:5f:74:4c:e1:6d:8a:41:7c:09:3b:fc:b9:cb:35:
21:63:62:94:1e:ab:6a:49:fa:45:93:ab:04:32:a5:
09:6f:3a:a3:18:7f:0f:c3:d1:0a:3b:79:18:60:da:
4a:9a:35:f6:b2:e9:e8:41:dc:c6:43:31:db:4c:44:
e9:6b:c7:9e:c6:e6:2f:f4:66:dd:e6:01:49:5f:2d:
dd:49:24:d7:24:8a:c5:94:5b:e9:b0:ea:7c:14:9a:
c2:20:79:56:aa:a4:5f:75:6e:61:35:fb:af:ea:5d:
f0:37:ef:d1:da:bd:d2:b9:cc:8f:42:f4:2a:b6:09:
46:09:7e:da:65:fd:aa:f7:89:dc:78:f0:d2:91:96:
50:5f:25:3b:4f:72:61:97:71:4f:59:af:d4:b4:80:
62:76:10:fc:72:e3:6a:55:c2:e6:fa:83:89:df:e6:
96:73:ee:18:5c:0b:27:92:72:fb:c2:45:93:93:5d:
48:7c:c1:ec:a0:fc:8f:2b:93:77:a2:f6:ad:4e:75:
b3:8f:0a:83:71:df:82:43:fb:5e:65:8d:89:db:19:
f7:a2:2a:c7:15:22:68:4f:fa:ca:6a:e8:5f:f7:90:
29:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FD:EE:E5:3A:4D:CD:CF:CA:F6:8D:3D:B1:BE:EE:CF:0B:6F:9F:FF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/if3u5TpNzc_K9o09sb7uzwtvn_8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.32.0/21
Signature Algorithm: sha256WithRSAEncryption
28:49:6b:a3:94:cb:c1:4d:09:45:27:a8:a8:96:24:7e:6b:11:
95:26:62:f1:1d:75:1c:08:17:9a:1c:b4:0d:80:38:15:da:46:
bb:d2:5a:40:6b:22:d0:2d:e3:d2:09:e5:a0:52:a1:ae:da:90:
d8:82:78:29:65:58:92:d0:6f:8e:23:36:55:d2:1b:a7:97:92:
70:ee:69:e2:84:eb:a9:ca:b4:52:a9:4b:ba:83:f4:29:94:21:
a7:25:22:56:48:04:70:64:1f:eb:ff:82:59:12:17:b9:eb:1b:
65:c1:4a:a2:37:df:c8:2a:e4:dd:7c:3e:b2:70:51:1f:4b:4b:
66:87:bc:69:90:68:80:0f:a5:4d:42:0f:99:a6:5e:c0:96:36:
ca:90:89:59:7c:9f:28:dd:e1:5c:0c:49:37:df:fc:f5:96:6f:
fd:88:6f:d9:0f:02:63:76:0d:a8:41:3f:9b:5d:1e:dc:df:0d:
a1:50:d2:89:aa:30:21:36:5f:01:67:9a:dd:eb:ad:11:4a:5d:
e3:9b:25:0d:27:db:cb:64:b1:b5:ce:aa:a0:89:b4:ec:a5:fd:
db:c5:9d:1d:1c:05:49:ea:03:4a:60:08:ac:8c:fb:ee:6e:2c:
93:dc:28:8e:06:4c:6e:a9:f7:b0:4e:b1:7c:07:69:31:83:75:
0b:52:2c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org