Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wQWXp48RnKUFwA30Hi2eLhblKDw.roa
File: wQWXp48RnKUFwA30Hi2eLhblKDw.roa (raw, json)
Hash identifier: bBS2K9Y8oEem/B6muQzKmF21QkP960sIj4Mcm6cQ6wg=
Subject key identifier: C1:05:97:A7:8F:11:9C:A5:05:C0:0D:F4:1E:2D:9E:2E:16:E5:28:3C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 126C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wQWXp48RnKUFwA30Hi2eLhblKDw.roa
Signing time: Wed 29 Sep 2021 02:54:33 +0000
ROA not before: Wed 29 Sep 2021 02:54:33 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 211.76.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4716 (0x126c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:33 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C10597A78F119CA505C00DF41E2D9E2E16E5283C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:af:8b:e2:e0:3c:f2:e8:f8:9f:8a:84:7f:18:
5c:d7:1c:46:e7:67:c6:ce:64:6e:be:71:19:b3:ef:
b0:81:af:7d:d8:f6:26:a4:9e:9a:fd:bb:f5:bf:52:
07:ba:57:f9:f2:4e:4c:7f:16:ff:b8:83:a0:56:e3:
f4:66:4f:97:c9:7d:66:f7:13:b2:b7:0b:16:26:a2:
55:2c:0b:d1:5e:7d:1e:b4:3f:69:a9:0a:29:95:46:
b5:91:3c:6b:fa:e9:ad:18:b9:2a:f4:74:17:fa:e0:
ec:82:56:02:a4:43:f1:87:8d:c7:a4:ff:fb:f7:a7:
3f:d2:ae:88:c6:56:5a:f9:5f:89:15:17:f7:bb:df:
d2:fc:ea:d5:de:0c:70:ed:83:ae:58:cd:6b:cb:56:
fc:70:bb:dd:a7:b4:b8:ac:75:bb:cf:ae:f1:86:29:
4b:72:0b:b2:59:39:94:37:c2:d4:33:bf:64:46:66:
92:19:e1:2d:98:40:ac:3d:de:27:3a:de:89:89:aa:
88:09:2b:ab:a3:5f:3b:85:cd:17:1e:fb:ab:99:ee:
b2:d2:99:98:d2:78:d8:7b:7a:23:05:fe:0a:d5:5b:
35:7d:29:e7:3b:99:ca:7f:60:e5:82:80:d1:58:69:
85:03:b2:27:54:45:24:af:a4:e3:70:3e:63:04:e8:
ad:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:05:97:A7:8F:11:9C:A5:05:C0:0D:F4:1E:2D:9E:2E:16:E5:28:3C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wQWXp48RnKUFwA30Hi2eLhblKDw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.51.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:dd:91:99:40:03:6f:84:93:4e:e4:6a:c1:d6:9f:e4:32:76:
7e:52:3a:51:49:55:d9:38:65:8e:7d:30:45:39:01:82:33:5a:
48:74:11:f1:ea:ba:0e:42:db:37:e3:bf:55:30:45:ea:8b:19:
81:3d:9a:82:95:6e:32:d2:1f:85:6c:96:c7:bf:0b:58:66:28:
a0:0c:fe:0e:05:c4:66:9a:ee:d6:18:7f:a2:4f:9b:28:7e:2f:
a0:55:3c:bf:9f:d1:70:9c:29:b7:62:ae:d2:23:b0:90:67:54:
94:06:cf:aa:81:65:67:0e:2b:92:b8:41:2c:61:df:eb:6c:00:
2d:49:5f:9c:26:3d:d2:f8:c7:66:c2:76:33:61:e4:7a:23:82:
00:9a:ed:95:f4:8e:75:cf:69:6f:95:d3:fb:f9:58:ab:e6:90:
51:99:4e:0b:f7:15:6c:fd:c3:42:7e:73:74:7a:22:e6:de:e1:
c1:9e:ab:03:b2:ee:c8:53:64:ef:15:45:0e:da:0e:a8:e7:2b:
c8:d8:60:d6:fc:91:58:de:35:ee:41:fb:59:45:04:1e:49:ca:
8f:3a:e8:0f:00:16:84:df:b0:be:3b:00:5d:85:4c:b2:d4:4d:
2b:6a:47:8c:17:ed:33:8b:40:5b:a1:7b:8c:3e:03:e5:e1:e0:
41:e9:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org