Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/ULf-2IoHaThQ8v6N7FWRbZz6klI.roa
File: ULf-2IoHaThQ8v6N7FWRbZz6klI.roa (raw, json)
Hash identifier: s08vbKNdB0IMqeYNW98L25oHoBE64VXVaHvieoJeOYw=
Subject key identifier: 50:B7:FE:D8:8A:07:69:38:50:F2:FE:8D:EC:55:91:6D:9C:FA:92:52
Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial: 0AB8
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/ULf-2IoHaThQ8v6N7FWRbZz6klI.roa
Signing time: Thu 15 Sep 2022 02:39:36 +0000
ROA not before: Thu 15 Sep 2022 02:39:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9676
IP address blocks: 61.58.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2744 (0xab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Validity
Not Before: Sep 15 02:39:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=50B7FED88A07693850F2FE8DEC55916D9CFA9252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:11:a4:5a:22:4d:cb:eb:84:5b:0c:35:3c:3d:
f1:3a:45:35:3e:f7:c2:a6:39:9b:db:9d:9f:6c:ce:
b2:c9:83:94:bc:03:21:64:7d:30:2a:ba:d4:b3:00:
44:eb:ef:ac:05:86:a3:ac:df:22:b0:87:8d:5e:22:
b3:96:75:80:4b:25:4b:df:e1:6f:f9:b2:5d:e6:e8:
2e:36:e2:a1:7e:8c:9c:39:c6:ec:17:db:b7:bb:7e:
b8:b4:45:6c:b7:3e:62:f5:37:ab:dd:dc:31:02:8e:
8f:59:8e:98:84:ed:c8:51:db:d7:95:85:2b:ee:a2:
26:6a:6d:e6:57:1e:78:e9:d0:f3:ed:a8:ef:77:42:
46:ab:1e:50:cb:9e:38:2a:36:03:a0:a7:5d:e3:5f:
13:f8:bb:9e:7d:f7:26:78:52:79:e7:81:2d:13:f8:
6d:1d:d1:cd:99:56:db:4f:65:ad:af:15:e1:e4:73:
ad:5b:2c:47:f8:48:fa:0a:13:36:16:a3:b1:1b:be:
ad:af:77:64:d5:ac:30:61:e2:82:a7:f2:3c:f0:e1:
ea:5c:9c:c3:f6:5e:5a:04:c5:94:44:2a:69:b2:8e:
b3:c9:c2:c0:ac:da:aa:5d:04:71:15:42:32:1b:b2:
bf:bd:f8:f1:d7:68:40:b9:69:ff:d8:5b:84:ac:f2:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B7:FE:D8:8A:07:69:38:50:F2:FE:8D:EC:55:91:6D:9C:FA:92:52
X509v3 Authority Key Identifier:
keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/ULf-2IoHaThQ8v6N7FWRbZz6klI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.192.0/18
Signature Algorithm: sha256WithRSAEncryption
cb:4e:0c:b6:82:3d:c3:13:00:36:4d:9e:fe:42:2d:17:eb:75:
1c:19:ff:4e:f9:64:24:6c:18:14:93:87:b4:e1:6f:37:e5:61:
f9:57:94:85:fd:40:97:7e:86:b8:34:21:1a:42:65:82:9c:06:
3c:ab:32:87:4d:86:10:43:e2:85:66:83:34:74:4c:b2:89:57:
25:dc:b2:a9:c3:12:b2:4e:7c:aa:0a:cf:04:4a:90:75:5e:ad:
da:78:81:6f:db:3f:d6:4e:cb:03:6f:68:49:be:d0:46:39:3f:
fe:c7:c4:d2:92:45:aa:ec:ae:01:d6:95:41:43:17:65:1f:ae:
5c:7d:76:df:04:29:21:c1:bf:f2:94:a8:a3:33:96:06:a4:27:
c4:b1:1f:29:a4:c8:e9:09:96:56:c9:54:ae:f4:b3:97:44:e3:
0f:8c:c8:26:d7:e2:2b:dd:5d:93:a4:99:9c:28:a5:b4:fd:df:
b0:a3:10:79:65:2e:96:ac:60:b6:24:41:2b:20:6a:a7:29:f3:
8e:34:1b:ab:6e:48:b5:a0:c8:9b:ca:ce:0b:39:dc:a6:92:5b:
e9:89:35:b3:46:d8:c4:42:1a:74:7d:bb:e1:ce:62:4f:67:6a:
92:99:b3:f9:75:ab:13:13:f1:8b:06:aa:73:26:9c:a9:8d:05:
69:b4:cd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:44 2024 by rpki-client on console-fra.rpki-client.org