Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q1RdgbRBGuyRIRoXefcSnHrHcjk.roa
File: q1RdgbRBGuyRIRoXefcSnHrHcjk.roa (raw, json)
Hash identifier: QVCpxx9zj4JlUls4dcdMAngfl1OvHBvzyUMTAVpD6z4=
Subject key identifier: AB:54:5D:81:B4:41:1A:EC:91:21:1A:17:79:F7:12:9C:7A:C7:72:39
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F87
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q1RdgbRBGuyRIRoXefcSnHrHcjk.roa
Signing time: Sun 07 Feb 2021 12:34:32 +0000
ROA not before: Sun 07 Feb 2021 12:34:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 211.76.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3975 (0xf87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:34:32 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AB545D81B4411AEC91211A1779F7129C7AC77239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:88:4a:b9:82:a6:6e:92:79:b7:d7:12:1e:b9:
13:c6:93:9e:aa:fc:66:81:1a:d8:65:1e:06:1f:c4:
49:f7:b8:04:5f:1e:ad:99:ee:dd:60:80:e4:3e:ea:
a4:06:91:0f:2b:79:7a:d1:d5:2e:cb:f9:75:1c:ea:
b7:fd:9e:e1:46:18:b7:d3:c4:93:e4:e8:93:64:5b:
15:5b:39:b6:3a:84:eb:54:5f:f6:ed:7f:89:60:e2:
25:bc:5b:50:17:38:04:41:bd:89:fd:f1:06:12:17:
01:dd:14:6c:9d:1d:e2:e0:16:b0:27:52:c8:e7:dc:
2e:a8:79:20:43:21:7c:37:92:af:88:b4:81:b9:86:
14:0f:31:da:80:c6:80:4e:47:4e:2f:cf:54:83:4c:
30:93:ba:da:d9:e7:5e:c8:e0:3e:73:40:9d:a2:ea:
b1:64:24:20:5d:46:2e:35:59:e9:85:cb:dd:4b:b7:
f1:1e:be:a0:89:c9:7a:4a:57:aa:09:a0:60:2b:c7:
2a:b8:0b:cc:43:b6:fb:dd:b9:f0:74:be:9c:f5:6c:
dc:e1:c3:1e:4a:b5:9e:71:18:b3:00:aa:1b:78:17:
2f:ea:10:b7:57:8b:9f:98:08:e3:42:b3:0d:00:d6:
50:25:d9:53:31:00:5a:92:7d:05:5b:cf:26:c4:b9:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:54:5D:81:B4:41:1A:EC:91:21:1A:17:79:F7:12:9C:7A:C7:72:39
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q1RdgbRBGuyRIRoXefcSnHrHcjk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.55.0/24
Signature Algorithm: sha256WithRSAEncryption
73:6c:e6:04:d1:67:67:4b:95:26:95:d4:26:c8:df:de:b2:b1:
7f:dd:bb:b0:06:8e:78:d7:5f:7f:96:3a:76:6f:17:39:1e:4e:
83:5f:7b:05:13:72:01:0c:04:e3:3f:0d:84:7a:02:57:79:1f:
58:f0:bc:d1:75:16:6f:ff:6a:66:a3:c7:39:da:75:09:69:17:
14:26:a2:8d:98:f4:c8:a3:f4:8b:08:60:12:8b:f2:79:6e:83:
f7:a0:8c:32:26:4b:d4:a4:2f:84:2b:c0:ca:25:05:fd:97:81:
c1:fb:de:ec:8b:a3:b4:f5:bd:c5:1e:3f:40:82:6f:a8:48:17:
49:d7:51:dc:07:21:66:7b:3b:00:c8:88:7f:50:49:e9:f1:06:
54:19:de:56:ce:7a:56:4b:4f:d9:1c:33:46:e8:91:ab:16:30:
5f:0e:37:d8:b9:64:98:73:e2:d0:c8:05:01:a1:dc:96:8a:b5:
36:52:fa:0e:85:90:bc:ed:b9:b5:6a:09:91:60:2f:83:6b:7a:
59:ee:dc:89:c2:17:c1:4e:df:6b:9f:12:7e:1c:43:38:7c:35:
78:3f:dc:85:3b:0e:c0:8f:74:5a:c3:dd:0c:c5:01:60:12:3c:
72:d6:22:04:84:89:37:e8:e0:8c:b9:ba:8d:d2:23:b4:7b:8f:
6d:32:9f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org