Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/paaXqKXbcFMKn-0MDh_2tgAXcDI.roa
File: paaXqKXbcFMKn-0MDh_2tgAXcDI.roa (raw, json)
Hash identifier: 1T+M5UGsG89rv8+iK0Kmmsjoc3ez/B0WL2h/f409QqE=
Subject key identifier: A5:A6:97:A8:A5:DB:70:53:0A:9F:ED:0C:0E:1F:F6:B6:00:17:70:32
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1426
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/paaXqKXbcFMKn-0MDh_2tgAXcDI.roa
Signing time: Tue 03 May 2022 01:12:25 +0000
ROA not before: Tue 03 May 2022 01:12:25 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 61.61.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5158 (0x1426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: May 3 01:12:25 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A5A697A8A5DB70530A9FED0C0E1FF6B600177032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:52:43:3b:df:22:b4:f7:c4:d5:c5:4a:df:
74:32:6d:ce:43:be:a7:29:50:50:d5:49:fe:aa:33:
ea:b5:30:76:43:3a:91:9d:3d:0f:22:20:18:33:3e:
b0:e4:37:13:7a:01:85:25:7d:ff:6a:4d:cb:e9:d7:
f6:d8:f4:a7:cb:62:9a:8c:19:f2:41:54:dd:de:50:
d9:4d:0e:2b:41:cd:6a:e4:af:d6:02:57:86:90:07:
03:2b:e6:f2:f9:de:96:37:98:02:ac:a1:01:c7:6f:
a9:19:7f:8b:1b:b8:58:98:86:70:64:b3:05:23:45:
14:20:71:f3:28:40:41:f9:f1:bf:58:7b:4d:2d:e5:
9e:ea:9e:15:cb:1b:5b:42:22:fe:e1:8f:aa:d3:e5:
43:ac:05:64:66:37:ea:d6:70:29:a5:2f:74:be:9c:
c0:13:dc:96:6d:b5:70:76:8b:39:be:26:47:3a:c3:
7e:af:38:7f:a3:44:27:76:0b:9f:b8:0a:83:5c:0d:
4b:f9:d2:49:2a:56:93:e7:aa:57:ea:1e:25:71:40:
52:24:77:d7:3b:d1:cd:33:21:c1:e7:d2:a1:cd:42:
2c:b3:2d:95:a2:a0:e1:a9:80:dd:d2:7b:34:a0:fc:
0f:1d:de:cd:a7:d1:8f:01:e1:6f:8d:84:71:fb:e4:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A6:97:A8:A5:DB:70:53:0A:9F:ED:0C:0E:1F:F6:B6:00:17:70:32
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/paaXqKXbcFMKn-0MDh_2tgAXcDI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:08:73:2a:08:82:3f:86:55:6a:57:b8:f6:a1:b4:cd:ea:1b:
99:cd:45:5b:b0:27:cd:41:48:68:83:73:54:7c:9e:c4:8a:5a:
a3:df:4b:57:3c:bb:7c:62:10:dd:df:0b:2a:db:46:87:28:50:
f6:52:3a:33:d5:e8:e8:30:51:a9:0b:80:b6:6a:6e:2b:42:a9:
9b:91:d5:f6:b3:f3:55:c1:a9:21:72:2b:37:61:e3:29:dd:52:
be:e7:eb:d7:4a:54:3d:25:7a:0b:30:ff:66:17:0e:82:52:73:
b9:13:82:ca:c5:ae:69:6d:2e:53:8f:25:18:80:c1:2d:9f:d4:
4e:48:3c:d3:ab:7c:28:0a:b7:aa:90:1d:17:11:a8:f1:05:54:
d9:87:c5:ca:fb:11:77:71:9c:37:6c:3e:9f:b9:03:7d:48:33:
cf:9e:68:62:96:73:5b:d8:1f:74:b4:06:28:a0:75:8e:ae:c2:
db:16:cc:7d:24:70:9b:17:f2:48:0f:e5:22:1d:4e:00:e2:fb:
9d:1a:c0:f5:6f:29:36:e5:8a:89:61:0b:3b:b6:7a:60:db:cd:
0c:77:e1:ae:38:36:17:17:d0:12:3f:3f:97:96:af:5c:85:6e:
01:46:44:b4:4c:e5:23:ab:ce:bc:65:61:04:bd:1b:c1:d8:34:
98:6e:b6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org