Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vynu-awWF1PFa5KU4JsTXbdTCGs.roa
File: vynu-awWF1PFa5KU4JsTXbdTCGs.roa (raw, json)
Hash identifier: OhRc2yYqbwGQpUMm2A6XqiAYyBA6brRR8vtW3LSb8sU=
Subject key identifier: BF:29:EE:F9:AC:16:17:53:C5:6B:92:94:E0:9B:13:5D:B7:53:08:6B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1109
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vynu-awWF1PFa5KU4JsTXbdTCGs.roa
Signing time: Sun 07 Feb 2021 13:03:13 +0000
ROA not before: Sun 07 Feb 2021 13:03:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 61.64.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4361 (0x1109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:03:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BF29EEF9AC161753C56B9294E09B135DB753086B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:21:11:cf:2a:59:b2:3e:7f:5f:8b:18:17:
ff:20:e5:2e:3b:68:83:65:4e:9b:b3:c3:49:2b:40:
f9:59:5d:38:8a:ba:4e:3c:30:de:86:e3:61:7d:23:
59:eb:e4:b5:4a:6c:f7:29:ef:80:9d:89:6d:8c:33:
b5:04:50:8a:f5:fb:19:c1:d7:d7:7f:4a:b7:ce:e3:
1b:7f:b7:92:11:ab:12:ea:6b:be:4b:6f:b3:eb:55:
7f:1b:d4:00:c5:45:bb:ba:c3:ad:ee:b9:00:07:8b:
98:be:55:9c:b6:f6:ac:af:cd:af:de:fb:a0:53:cd:
91:25:da:bc:47:e9:7c:79:63:9d:a7:be:36:0a:82:
3f:f6:dc:82:83:70:cb:08:c1:db:51:e3:14:7f:73:
34:6f:6d:d4:21:c7:11:5e:59:4b:84:b7:aa:30:cb:
64:64:44:f7:18:b4:9b:0a:b5:ed:ef:4d:81:64:0c:
78:9c:78:7c:8b:b4:d0:f2:18:96:91:18:6b:ee:cb:
ec:34:dc:c5:be:c5:13:14:70:b5:b4:04:56:13:ee:
52:95:d9:b8:f3:a9:f3:67:30:a9:2a:fe:7a:2e:a8:
36:18:32:68:ad:95:4b:da:2c:cd:68:ba:03:d8:2f:
c3:20:db:0b:7a:82:77:ee:41:66:87:ad:76:64:68:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:29:EE:F9:AC:16:17:53:C5:6B:92:94:E0:9B:13:5D:B7:53:08:6B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vynu-awWF1PFa5KU4JsTXbdTCGs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.28.0/22
Signature Algorithm: sha256WithRSAEncryption
73:f4:d6:e6:ac:a0:57:66:30:c1:0c:07:1e:d6:ac:e4:25:e8:
10:60:73:d4:df:53:8c:d7:f5:2b:58:05:26:08:61:b8:69:ff:
16:ec:f3:91:d2:4f:e9:cd:fe:f6:b7:0c:16:f1:c1:f6:28:5b:
ed:25:7f:ec:50:fb:b6:28:ef:3a:64:1f:3d:79:9b:a1:c6:10:
4e:c1:6e:7a:b1:1e:73:f5:8a:cf:82:01:a0:ce:65:4b:25:e1:
51:e8:56:95:46:96:25:13:d5:bd:ec:f7:c3:6d:5e:ae:8c:3c:
b5:f2:68:63:54:52:a3:39:e7:e1:da:d3:87:a9:53:ae:15:9e:
41:3b:cf:c3:e6:f5:52:85:82:c1:3a:59:78:a5:79:24:38:ac:
45:7a:48:2a:e9:c4:be:a7:73:af:96:c2:48:59:ca:e7:7d:75:
df:75:62:ba:08:67:95:13:c7:de:5b:1e:60:a0:e8:dd:9a:93:
29:31:a5:e0:6e:04:a2:a9:c0:15:f0:5e:c0:dc:be:10:c0:b9:
a2:a3:48:21:65:03:1b:ae:c5:46:1f:6a:25:cf:5a:98:b3:52:
5b:40:63:81:ed:f6:0c:4d:92:6c:b9:92:56:65:dc:f2:8e:61:
68:72:73:88:39:6f:3a:5e:d7:e0:ec:52:23:2c:e5:8f:9c:a1:
fa:36:00:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org