Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zVNJs9kUKDF6RU2sO9hTT6VBuRo.roa
File: zVNJs9kUKDF6RU2sO9hTT6VBuRo.roa (raw, json)
Hash identifier: Ph39RHmpjIHT9ibZx6eN+u3bYQfXIU/EcHyvVL9vkrM=
Subject key identifier: CD:53:49:B3:D9:14:28:31:7A:45:4D:AC:3B:D8:53:4F:A5:41:B9:1A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zVNJs9kUKDF6RU2sO9hTT6VBuRo.roa
Signing time: Thu 15 Sep 2022 02:36:01 +0000
ROA not before: Thu 15 Sep 2022 02:36:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 61.64.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CD5349B3D91428317A454DAC3BD8534FA541B91A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d5:09:8b:48:02:f7:94:6b:e3:32:92:71:60:
b0:85:32:b4:07:68:a7:e2:5c:5e:cf:59:94:93:a2:
b7:a8:1b:b6:05:9a:f3:69:ad:11:60:17:8a:fc:0d:
db:0a:8b:36:4f:63:5e:50:cd:ee:6e:25:83:b7:24:
89:65:a9:32:38:55:44:7d:98:13:28:19:1b:f0:6f:
e6:f4:4f:a0:80:fc:6e:37:5c:dc:16:3d:2f:34:fe:
36:0e:f3:2c:93:9f:2a:ae:e4:b3:84:a3:00:96:4c:
a8:c8:11:8a:b9:e7:e5:04:a5:b6:48:d1:47:0b:a6:
fa:d3:a4:c2:23:19:63:b9:e8:87:85:c1:e2:97:ab:
2f:20:9e:49:2f:36:7b:a1:0c:e0:f1:0b:15:0a:66:
66:61:6a:8d:5c:91:2f:19:47:c8:6d:30:62:7e:15:
a9:77:35:9f:16:5e:41:ed:97:5d:aa:a2:c0:79:ac:
f7:a2:5d:d4:82:b3:27:1b:6d:4c:f1:c1:66:a2:65:
f2:54:11:40:bc:43:b8:d4:8a:96:02:fd:06:d0:71:
80:f9:9d:ff:b8:d2:ad:fa:2e:f9:e7:ee:12:2c:ad:
b8:a8:6c:77:ac:6f:57:42:4d:9f:54:18:e5:58:65:
a2:af:74:90:43:85:3d:06:7d:0e:47:3b:d2:fe:34:
aa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:53:49:B3:D9:14:28:31:7A:45:4D:AC:3B:D8:53:4F:A5:41:B9:1A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zVNJs9kUKDF6RU2sO9hTT6VBuRo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.8.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:7a:33:fe:b7:e3:ef:30:1f:f4:a5:87:35:f1:27:b2:26:83:
99:ab:64:80:40:9a:b9:ef:73:bc:8f:eb:b6:bb:a9:86:48:5f:
ef:df:ff:8c:08:27:e1:db:94:17:8e:87:be:9f:9f:2f:fa:64:
76:5c:1e:f8:59:9c:54:91:02:68:6c:18:f7:60:04:ab:0c:4f:
ab:b0:2c:da:05:41:e7:20:96:a1:df:1d:b6:6b:64:46:df:ba:
d1:a4:59:6d:9f:e0:09:0b:59:ed:5a:79:a4:d6:b5:a1:60:7e:
85:a4:c9:d5:f2:63:37:f6:9f:11:31:b6:4f:ea:4e:f4:9e:c8:
32:97:c3:fb:84:7a:6c:ee:bd:eb:02:54:9f:11:e3:ef:6d:67:
72:ea:f6:c8:01:68:82:c5:15:09:40:86:04:22:aa:71:9e:dd:
ce:bb:64:cf:20:17:44:85:8a:b2:51:58:3e:49:5c:de:47:27:
e1:fd:71:15:66:cd:dc:2e:8f:30:3f:38:36:0c:21:11:c3:5b:
47:e0:c5:34:a0:81:d9:db:27:eb:1e:12:15:4a:57:51:d3:93:
cb:1e:cf:32:54:22:c2:94:a6:3a:ff:61:25:2b:c6:81:46:69:
2c:4b:9b:bf:61:f3:25:91:7b:6d:9e:66:50:72:b0:00:24:1c:
13:6e:87:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org