Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/osdfxewV-dIX-fvFeIiVJ3Xc6fo.roa
File: osdfxewV-dIX-fvFeIiVJ3Xc6fo.roa (raw, json)
Hash identifier: oVoQbEFIQQ54775bqqNSwiZ2buHGwGCMW6VC3XMQwoA=
Subject key identifier: A2:C7:5F:C5:EC:15:F9:D2:17:F9:FB:C5:78:88:95:27:75:DC:E9:FA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/osdfxewV-dIX-fvFeIiVJ3Xc6fo.roa
Signing time: Thu 15 Sep 2022 02:36:13 +0000
ROA not before: Thu 15 Sep 2022 02:36:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.60.215.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A2C75FC5EC15F9D217F9FBC57888952775DCE9FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:9b:2b:74:3e:89:36:d6:b6:98:7b:96:31:
ec:f9:8e:2f:ce:69:d8:a7:0d:b2:ea:83:c4:1a:7e:
4d:e9:26:26:c6:df:1b:c2:6d:df:34:49:f6:43:ad:
b1:eb:4e:cf:a3:18:38:35:52:86:21:1b:98:46:29:
39:85:4a:20:09:66:b1:b1:cf:f1:62:cb:52:34:14:
c1:24:d6:76:17:c5:53:46:f2:bb:00:01:ee:85:bc:
c5:a1:97:69:ad:7f:ba:24:09:51:95:af:fd:c9:c7:
0c:61:7a:08:57:92:da:1c:93:fa:04:62:dd:e0:f7:
2d:20:60:dc:86:dc:07:74:6c:59:26:98:10:c1:d6:
35:e8:61:6a:3c:80:3f:27:af:3c:7e:97:35:e6:7c:
11:77:72:c9:9f:d2:63:2b:41:22:9e:d9:9b:31:1c:
e2:ea:47:6f:d7:c7:71:38:f7:b6:2c:6a:7e:c6:95:
2a:5a:71:bd:5b:70:db:73:a3:37:44:9d:49:0d:c8:
81:0f:be:28:39:5b:3e:d7:7a:a3:98:73:04:3e:3b:
5e:4d:92:8e:67:11:57:76:77:cd:e2:91:d7:cf:2e:
77:1d:4c:a9:f7:46:85:ce:c3:39:5a:ae:1f:6d:5e:
f9:77:52:81:a5:32:d9:6a:2e:3c:39:47:cb:ef:b8:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C7:5F:C5:EC:15:F9:D2:17:F9:FB:C5:78:88:95:27:75:DC:E9:FA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/osdfxewV-dIX-fvFeIiVJ3Xc6fo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.215.128/25
Signature Algorithm: sha256WithRSAEncryption
94:12:1d:30:f0:a7:42:ba:03:57:a3:51:8c:e6:1f:10:4f:06:
8d:30:ba:67:76:15:13:b2:eb:98:47:1c:8b:51:60:b4:80:45:
22:2f:c7:36:51:7b:ee:db:e1:a2:a9:47:24:5f:6b:f4:9e:6c:
d3:03:54:9f:68:20:28:72:51:0a:36:36:9c:ef:f3:c3:8b:8a:
28:1e:82:a8:15:81:2d:ad:a1:20:4a:f6:ab:4f:a9:90:62:b8:
52:fa:29:ce:e8:47:7f:17:23:d9:0d:b5:74:1d:11:86:9c:9b:
f6:23:b2:43:1a:69:8e:70:d8:6a:c3:5b:d0:10:a2:97:ba:34:
7e:1e:9e:17:35:5b:ed:60:b2:d7:b9:3e:70:14:6b:e5:b2:04:
43:00:f6:46:8e:cc:ac:6a:59:79:05:04:0f:b9:c4:fe:45:fa:
fd:b5:25:92:ce:22:22:0a:20:c1:c7:e7:c1:8d:64:a7:96:82:
51:99:df:17:79:49:67:0d:f7:f6:f2:46:2d:be:b1:07:46:99:
19:80:00:ae:b4:42:22:d1:f9:39:b4:cb:c2:2e:05:80:9d:8b:
34:ff:f1:62:4f:b8:96:43:3e:dc:80:83:3d:cd:c8:f3:f7:9a:
e5:52:58:99:c9:af:07:ec:e5:47:d9:e1:5c:49:11:4a:41:51:
bf:a4:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org