Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pqEOJdYrVTLXhPYeur3vLFXhjWg.roa
File: pqEOJdYrVTLXhPYeur3vLFXhjWg.roa (raw, json)
Hash identifier: U0LYlhA6h5sKv0fKfyBoUwWMWRwQ7AoPCDArRGEi6oI=
Subject key identifier: A6:A1:0E:25:D6:2B:55:32:D7:84:F6:1E:BA:BD:EF:2C:55:E1:8D:68
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A6D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pqEOJdYrVTLXhPYeur3vLFXhjWg.roa
Signing time: Tue 01 Nov 2022 02:22:32 +0000
ROA not before: Tue 01 Nov 2022 02:22:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 61.60.215.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6765 (0x1a6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Nov 1 02:22:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A6A10E25D62B5532D784F61EBABDEF2C55E18D68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:5b:af:ba:eb:a7:3c:79:a1:8c:24:49:fc:
2f:5f:6a:1d:ef:83:8f:42:37:96:e5:c8:7e:ca:2e:
cc:19:f3:06:23:43:bb:2e:27:93:6c:1a:3c:53:4a:
a7:8f:21:5b:2b:54:68:eb:b2:f8:0a:67:a0:34:f2:
eb:84:6c:07:55:65:76:f7:a4:47:9c:1f:dd:c9:54:
ba:e6:72:5d:56:2f:b3:82:3a:dc:12:2a:b7:75:7f:
b7:b0:49:29:9f:44:c3:61:93:77:b1:cf:22:7d:83:
e3:07:18:e4:8c:6d:41:06:dc:be:ee:d7:4e:05:85:
32:96:f6:d2:df:3c:ae:57:a4:8b:ee:d0:18:a9:60:
e7:a3:6f:c4:6e:b8:94:f4:d5:fb:73:8f:d5:fb:ba:
e0:af:e5:d9:01:55:4e:6b:b2:43:8a:a3:dc:98:59:
16:4a:6f:c6:6a:86:8e:02:9c:b6:9e:5f:32:23:be:
ff:4e:24:60:4b:35:35:f0:53:02:a9:ba:9c:bd:b6:
91:05:c3:e7:b9:d1:66:d9:7a:fa:f6:47:41:0b:79:
17:38:da:4a:31:3a:e3:ce:30:79:b4:4d:e4:7b:0a:
5f:d1:34:6f:9f:46:82:58:50:b4:98:fb:0b:f5:2b:
ec:ee:ff:e6:c5:12:c0:6a:03:db:cb:f1:c9:5c:48:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A1:0E:25:D6:2B:55:32:D7:84:F6:1E:BA:BD:EF:2C:55:E1:8D:68
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pqEOJdYrVTLXhPYeur3vLFXhjWg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.215.128/25
Signature Algorithm: sha256WithRSAEncryption
6c:0e:b6:2b:6c:8c:c5:02:10:59:11:38:f9:80:99:c8:c1:73:
db:d8:aa:3d:f2:8a:f7:35:07:e5:5e:f8:5f:78:57:96:a2:79:
e2:b9:ed:86:04:84:43:4c:b1:8e:89:87:64:12:46:10:83:d8:
31:cd:54:0e:33:dd:09:36:67:ea:fa:74:a6:56:f5:7a:8e:19:
32:dd:2c:2f:23:7c:36:26:cc:27:b3:4b:4d:a9:ed:85:de:63:
d5:5a:f1:8f:7b:d2:eb:53:a1:75:ba:76:ab:81:d6:cc:62:9f:
16:72:ee:42:ec:5b:3f:a9:8a:fa:69:37:ba:b3:6e:8b:17:97:
bf:31:7b:81:de:48:fc:0a:ec:33:c4:74:d5:88:a3:9e:97:9a:
3f:41:1c:da:43:f1:b4:04:dc:be:52:f0:ef:3e:57:b5:0c:cc:
af:28:ac:1c:57:ce:e1:ee:5c:e4:88:b7:9b:5f:5f:be:54:da:
18:53:1c:02:c4:60:b7:a4:52:9d:9b:10:a0:02:73:24:d2:8f:
28:42:ea:7d:b5:70:85:1d:26:23:6e:9b:59:f3:01:e1:80:2c:
ce:5c:cb:0a:71:2a:09:6f:c8:7e:e3:2f:68:3c:58:5a:02:aa:
bc:ef:13:b7:4f:67:47:e4:41:2a:b5:d4:23:29:46:82:b1:8a:
da:71:eb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org