Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uSMNfN3QudnEwiNVFsCwurm2GMc.roa
File: uSMNfN3QudnEwiNVFsCwurm2GMc.roa (raw, json)
Hash identifier: UzFHsRYJjlsRit/8ZJql5ISdRRJMW1pEXDXEgQzIw80=
Subject key identifier: B9:23:0D:7C:DD:D0:B9:D9:C4:C2:23:55:16:C0:B0:BA:B9:B6:18:C7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AF1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uSMNfN3QudnEwiNVFsCwurm2GMc.roa
Signing time: Tue 29 Sep 2020 10:07:48 +0000
ROA not before: Tue 29 Sep 2020 10:07:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.58.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2801 (0xaf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B9230D7CDDD0B9D9C4C2235516C0B0BAB9B618C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:b0:1f:7a:91:8f:5c:68:ee:1b:e6:27:8a:
5f:15:15:58:e1:51:f0:b2:53:b7:74:35:a9:e8:20:
29:16:96:04:bb:b0:3e:bd:1a:a1:53:29:df:ee:39:
8d:e7:c5:9b:55:2d:f7:0f:e1:d7:72:a5:37:6a:0f:
22:91:bb:c4:6e:de:90:f4:dd:7d:7c:10:f6:47:3f:
47:e8:45:08:75:33:49:3c:4f:6c:0e:d6:ef:94:78:
64:75:e6:20:9f:e2:95:01:56:b2:61:7b:2a:db:6f:
70:56:99:70:ed:cb:24:21:a6:5b:ee:c0:b2:7c:cb:
c5:45:4b:2f:a3:67:8d:1f:c3:24:fb:cc:24:0e:d6:
ed:63:55:86:7b:9d:79:bc:df:c1:68:4f:d9:d2:4f:
a3:1c:aa:4c:06:7e:0f:de:49:02:78:89:78:4d:cd:
5c:60:b4:4a:f4:c7:b4:ea:51:7c:1e:92:49:9a:cd:
48:44:db:ab:7b:6a:ef:96:e1:27:3b:fa:6a:2f:5c:
2c:8c:28:6f:e9:2d:61:f9:44:44:6e:c5:d4:9a:f1:
a8:4a:2a:41:36:35:34:62:5d:26:da:c4:f1:62:2e:
ce:75:fb:fa:30:ba:0f:5f:69:3d:97:61:73:b5:cd:
0d:e2:48:59:d2:fd:9e:3e:06:86:31:83:a9:ef:bf:
aa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:23:0D:7C:DD:D0:B9:D9:C4:C2:23:55:16:C0:B0:BA:B9:B6:18:C7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uSMNfN3QudnEwiNVFsCwurm2GMc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.104.0/22
Signature Algorithm: sha256WithRSAEncryption
06:46:9c:56:7b:ba:39:ce:b3:c0:2d:e7:f5:3a:c7:db:71:e1:
bc:39:3f:da:7b:27:38:19:3a:36:04:f6:0e:b4:8c:3f:c1:03:
e7:1b:6a:15:f0:04:35:8b:b9:03:9e:aa:b5:68:b9:a8:c0:98:
4c:87:c9:93:d0:96:70:0b:43:a3:26:93:c7:60:9f:57:fe:5f:
70:38:15:23:07:0e:ac:72:06:4b:0a:c4:a8:3d:1c:cb:30:15:
3f:ac:1b:b5:64:c4:f5:3b:ca:64:88:0e:6b:82:be:ea:e8:48:
9c:d5:c2:ea:4d:f3:83:63:c0:44:7d:cc:10:09:f5:e5:58:0e:
76:12:fc:20:e1:5b:19:a4:ec:f0:3e:ef:ce:83:ab:fc:01:98:
6e:d4:41:6b:8c:2a:97:d2:78:7f:50:20:ac:33:fd:40:5b:19:
55:c6:64:be:49:81:8c:ce:d7:96:e5:a6:4b:48:b4:c8:94:bc:
a8:da:07:d4:7b:51:3b:71:4d:a5:dc:79:4f:fa:fd:16:f8:90:
b3:50:f7:48:85:ed:73:dd:67:85:fd:0f:38:28:99:10:88:cf:
2c:b6:b8:58:d2:60:7b:a2:d6:46:10:f4:35:5d:89:da:21:ae:
c0:e4:aa:0f:8b:f6:c4:04:b2:1d:7e:86:87:dc:9b:04:12:00:
1d:6c:db:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org