Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0P-kyqZnn_gdCM48z0-JaRMAuVQ.roa
File: 0P-kyqZnn_gdCM48z0-JaRMAuVQ.roa (raw, json)
Hash identifier: mV3ICkYyBkgdtQdj6M9GibnixNNUDB5FevH42jwXcak=
Subject key identifier: D0:FF:A4:CA:A6:67:9F:F8:1D:08:CE:3C:CF:4F:89:69:13:00:B9:54
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0P-kyqZnn_gdCM48z0-JaRMAuVQ.roa
Signing time: Thu 15 Sep 2022 02:36:15 +0000
ROA not before: Thu 15 Sep 2022 02:36:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 211.76.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D0FFA4CAA6679FF81D08CE3CCF4F89691300B954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:58:b9:10:c8:70:db:45:12:5a:45:93:cb:
e6:f0:d0:37:8f:16:d8:44:de:59:73:68:bf:46:e4:
a3:eb:62:3f:cf:b4:13:ef:8c:63:6d:76:7e:7f:21:
3c:06:cd:a4:fb:fd:f8:d4:b3:c9:56:36:c7:2d:75:
cc:bc:a8:f2:f4:a2:9c:9a:c6:be:de:0e:d5:ab:04:
9c:72:14:cc:e5:c4:ba:cf:ee:ee:90:e4:8a:44:c1:
a1:38:be:b2:7a:15:14:1d:64:c5:75:95:a9:41:e3:
9f:19:2e:20:42:bb:06:5a:62:46:33:4e:de:7a:2d:
5f:00:f5:69:c9:a4:b3:9f:85:99:72:12:bc:4e:61:
69:54:2d:7e:ee:e2:65:46:ba:ee:d9:c4:7d:6a:79:
6e:77:76:37:b9:a9:34:70:71:e9:49:c0:52:a3:66:
49:15:c5:62:fc:86:71:35:f7:3c:56:53:46:da:f8:
b9:b8:69:22:84:94:df:4f:e8:f7:8c:9c:32:c4:fb:
9c:6d:b8:c1:fb:dc:1f:e0:35:54:ce:6c:e4:bd:30:
3e:2c:e2:93:d9:c6:7a:b8:01:c3:21:f0:a4:02:79:
55:38:3b:82:88:55:d4:56:1b:7b:b5:f7:27:45:36:
c3:aa:3c:96:04:95:d7:af:c6:89:61:71:82:86:2c:
31:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FF:A4:CA:A6:67:9F:F8:1D:08:CE:3C:CF:4F:89:69:13:00:B9:54
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0P-kyqZnn_gdCM48z0-JaRMAuVQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:04:cd:eb:38:da:da:0c:11:ca:7f:ce:1d:db:f4:3b:a6:5e:
bd:ca:6a:be:c6:5f:f7:e6:23:57:8f:17:6d:91:84:2d:9f:44:
8f:4a:e3:82:53:96:4d:6a:2f:8d:ed:58:5b:b1:22:bf:23:90:
b4:68:3b:07:96:8b:dc:6f:95:e7:58:81:e8:63:f9:a3:1d:ab:
69:f2:ff:88:28:3a:95:bd:fa:c3:d3:15:e7:a7:68:b7:51:9b:
fb:18:2e:bf:a1:fa:a5:ab:79:04:86:86:03:58:a3:15:5e:67:
0f:3d:26:5d:7b:8a:65:fd:08:3d:48:f4:2d:db:cb:8f:a3:37:
77:24:42:7d:fc:33:52:95:b9:8e:4e:f3:1d:a9:20:c6:ab:94:
7d:4f:d6:4e:f9:f7:b9:0d:e4:55:a6:f9:6b:1b:1d:c5:17:88:
62:67:c8:9f:73:9d:12:23:22:88:e7:95:13:ec:2c:94:b6:1e:
57:b6:96:c9:14:81:92:bd:aa:b6:96:98:ab:df:05:4f:7e:45:
a5:96:07:be:af:16:1d:72:2b:09:d9:a4:56:c8:44:7b:bd:b9:
c6:4a:23:4f:79:bf:1e:f4:bb:85:36:4a:48:89:7f:bf:3d:c8:
65:37:c2:fb:e6:c8:ee:0d:86:53:b8:36:6a:32:f6:ac:5e:94:
7d:f0:5f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org