Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0VBwb73NR0qL3D5D5Jejniws1WM.roa
File: 0VBwb73NR0qL3D5D5Jejniws1WM.roa (raw, json)
Hash identifier: dtGSfk0PhneZ7/c5qlJMZVlTHdP1wfvnUZv4lgtrAmE=
Subject key identifier: D1:50:70:6F:BD:CD:47:4A:8B:DC:3E:43:E4:97:A3:9E:2C:2C:D5:63
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10DB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0VBwb73NR0qL3D5D5Jejniws1WM.roa
Signing time: Sun 07 Feb 2021 12:49:19 +0000
ROA not before: Sun 07 Feb 2021 12:49:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 61.56.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4315 (0x10db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:49:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D150706FBDCD474A8BDC3E43E497A39E2C2CD563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:62:5f:f3:d5:45:f3:c5:25:e4:c7:ab:18:b7:
97:5c:76:04:02:5c:2c:b9:ee:5e:0c:36:00:88:62:
14:64:6f:64:78:04:70:18:8c:aa:8a:a4:92:93:68:
47:4f:29:b7:0b:e3:66:60:cd:fa:fb:d7:1a:37:3e:
b4:f1:14:78:6f:c3:40:f6:f1:0c:5c:d7:c4:c8:c1:
9e:12:e5:80:6c:b4:47:bf:1f:ba:3b:97:cf:df:67:
22:b9:31:17:21:d0:96:dd:49:4f:35:21:03:d3:b0:
38:a7:e1:00:be:2d:f5:e4:e1:c6:de:01:72:42:3e:
48:94:8c:b8:7c:0a:63:78:87:63:ad:20:0a:72:1b:
5d:96:7d:54:cc:f9:80:56:34:ea:dc:6a:c2:ee:ba:
00:a2:68:54:fd:32:50:eb:be:7c:29:92:01:09:3c:
2d:84:96:a0:67:26:8f:6a:ae:a4:5b:2a:5e:2b:7c:
be:62:d5:0f:86:17:f5:ec:96:0a:1b:26:c1:b1:27:
61:bf:ae:e4:83:1d:95:fe:6f:91:c5:74:de:70:ef:
ea:aa:39:67:f7:7a:26:43:2d:a0:68:aa:30:dd:97:
9f:04:fd:37:79:95:0b:bc:86:db:d5:05:34:01:de:
65:72:11:32:08:95:7a:6f:8a:36:c7:5a:e4:47:c7:
05:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:50:70:6F:BD:CD:47:4A:8B:DC:3E:43:E4:97:A3:9E:2C:2C:D5:63
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0VBwb73NR0qL3D5D5Jejniws1WM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.160.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:8e:32:b9:32:62:0d:e1:8f:fd:65:f8:22:90:15:de:00:56:
59:0b:c6:97:73:d7:8d:ce:0a:70:7e:0a:02:99:cd:bb:3d:2c:
2e:a3:a6:a6:48:2f:66:d5:a7:f6:4b:fd:74:8f:de:99:11:31:
f3:9b:98:d2:94:c4:e1:49:c9:80:79:03:37:b7:41:e1:cc:d5:
30:e6:33:50:9a:48:62:6a:19:0c:d7:3f:54:9a:dd:f2:18:27:
16:8f:b3:3a:6d:14:60:3e:be:a6:2b:18:18:db:98:dc:1e:1f:
8a:26:74:8f:09:9e:08:c8:c8:99:12:ca:e9:7f:34:a7:42:a1:
32:6a:94:e8:9a:8e:6c:37:c5:32:2e:41:de:09:ca:8a:47:d6:
0f:af:88:5a:65:ed:46:b4:f4:8b:8e:96:89:1e:b9:da:0e:2e:
6a:e7:05:b0:70:3b:d8:c0:3a:f7:14:65:33:f5:e6:b9:31:c7:
55:0d:0c:8a:97:b0:f1:3a:59:8a:55:15:c6:2f:96:29:39:55:
7e:0d:18:27:e3:c1:e4:3d:ea:3e:86:dd:14:a5:b1:06:a5:b3:
fa:81:8d:f1:be:bc:4f:41:36:98:38:bb:5f:11:2c:91:b2:28:
2e:7e:b3:35:e8:28:a5:62:3f:35:b6:ca:f4:fb:f8:50:f7:26:
0e:b5:25:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org