Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yRFajjQy1nKwkZ0LJzogiWxLCDo.roa
File: yRFajjQy1nKwkZ0LJzogiWxLCDo.roa (raw, json)
Hash identifier: Jj2PTbYWQ8hjCo9t3geXJ/9evdiRacppFdqUbpIcYbk=
Subject key identifier: C9:11:5A:8E:34:32:D6:72:B0:91:9D:0B:27:3A:20:89:6C:4B:08:3A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yRFajjQy1nKwkZ0LJzogiWxLCDo.roa
Signing time: Thu 15 Sep 2022 02:36:21 +0000
ROA not before: Thu 15 Sep 2022 02:36:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 61.61.208.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C9115A8E3432D672B0919D0B273A20896C4B083A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c8:34:9b:e3:17:7f:94:40:16:c7:c5:c4:ed:
02:a4:67:74:a2:22:88:f2:fc:b3:4d:f7:a3:ed:81:
fc:64:3b:18:ec:49:ce:38:9f:5d:2a:62:2e:a6:10:
0c:5e:94:ef:5b:73:38:da:a7:b3:9e:ca:03:10:de:
67:9c:60:a8:90:a7:5c:9a:79:74:d4:fb:77:80:e8:
51:77:01:c6:68:b6:bc:a1:3f:5c:70:6d:a5:b4:fd:
04:fb:b0:7b:1d:d3:7e:9f:bb:10:ac:1d:9b:cd:54:
2c:e8:a1:d3:ce:68:ac:7a:f1:05:48:ad:8f:95:6e:
59:01:de:ee:9b:37:19:4c:e3:fb:24:d7:62:91:6c:
cf:22:69:17:c7:a7:5e:3f:87:fb:ce:95:30:81:07:
c3:2d:e4:16:d6:82:25:7a:36:5c:a9:1f:90:b0:9d:
ff:70:7a:d8:e5:43:a5:2b:45:bd:e7:8b:26:fb:e1:
1a:76:81:f0:05:51:06:d7:3e:12:e0:46:11:3d:f4:
0e:ca:0c:cd:16:13:b2:7c:53:38:bc:b2:3b:c9:3d:
23:f9:92:5c:3c:17:c9:ac:e7:20:1a:14:de:9a:e5:
a5:d4:6f:b2:b7:68:19:ea:60:95:73:02:9c:48:3a:
4e:9f:1e:f7:c2:22:9b:5c:c1:9f:90:80:cf:50:30:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:11:5A:8E:34:32:D6:72:B0:91:9D:0B:27:3A:20:89:6C:4B:08:3A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yRFajjQy1nKwkZ0LJzogiWxLCDo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.208.0/20
Signature Algorithm: sha256WithRSAEncryption
10:cb:ac:20:aa:07:87:6d:15:87:fa:20:cc:21:f6:37:03:69:
a8:c9:72:41:66:aa:94:af:be:9b:61:b8:3c:db:b7:71:56:be:
5f:bf:98:ec:61:fc:89:98:50:0a:c9:84:1f:c1:47:34:2d:d5:
c0:b2:dd:30:b3:21:f5:cb:24:af:3f:76:ed:c9:76:fa:44:b6:
d4:1f:2b:c4:5a:59:c6:17:9f:aa:6f:b2:e8:07:04:66:18:0e:
e7:1d:c4:ab:e5:15:68:90:58:ef:8c:00:91:0d:3d:39:e8:00:
8d:70:b7:b0:da:b4:a5:6b:0d:f3:75:b2:02:41:09:3f:57:49:
f6:a3:a3:17:1a:46:84:cc:b6:b2:6a:82:89:db:ee:63:ed:85:
06:86:c8:3e:88:1d:e1:19:47:fe:88:40:4e:af:52:9b:c6:6b:
87:b5:f3:79:c3:c7:bf:b8:2b:34:ad:ee:a4:50:d4:14:4f:b1:
65:d9:d5:1b:1f:04:f5:df:b7:7f:d1:1e:95:ad:89:a1:93:72:
be:8b:4e:82:61:5b:61:fd:a1:f1:5f:d0:e1:33:c8:d5:fa:71:
d0:ee:7e:c2:11:e8:64:a3:c9:5b:ed:b4:cf:6d:df:f1:fd:a8:
a4:e2:e3:2c:ad:63:46:26:09:aa:40:6d:ba:6e:e1:e1:44:87:
36:6c:9f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org