Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1J7AdSnfb-jyc55EhxjPoTPTd9k.roa
File: 1J7AdSnfb-jyc55EhxjPoTPTd9k.roa (raw, json)
Hash identifier: tlvLVhmsAX9o5o1ns2dSTonQQIkaanRuzEc0W6v4L8Y=
Subject key identifier: D4:9E:C0:75:29:DF:6F:E8:F2:73:9E:44:87:18:CF:A1:33:D3:77:D9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F7F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1J7AdSnfb-jyc55EhxjPoTPTd9k.roa
Signing time: Sun 07 Feb 2021 12:34:25 +0000
ROA not before: Sun 07 Feb 2021 12:34:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 211.76.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3967 (0xf7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:34:25 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D49EC07529DF6FE8F2739E448718CFA133D377D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:68:98:bd:c3:c6:ee:eb:4e:8b:36:bf:a9:
de:a6:dc:5c:7d:88:82:01:8a:2f:10:a0:73:31:25:
ae:60:e7:55:cc:b9:d4:6e:91:df:fa:03:19:ff:2f:
29:32:fd:b7:f3:a6:1e:b5:f8:37:74:dc:05:6d:8a:
1d:c6:c1:a2:36:80:07:49:a2:61:c6:95:76:91:5d:
e0:6a:23:62:65:87:f3:9b:12:45:03:c1:e9:7d:93:
3e:5d:13:42:98:8e:e7:46:7a:0a:74:90:16:ba:bb:
31:26:2b:b1:b6:95:5c:2a:b6:80:2c:1c:1c:25:b6:
90:dd:c8:c0:fd:d7:00:9d:6e:a7:47:46:90:3b:1e:
75:08:31:57:c4:82:7b:d4:9f:d4:e3:e8:39:60:db:
9d:d7:bc:10:78:ce:bb:3f:30:d9:13:3d:79:9c:84:
fb:df:97:5e:1b:4a:21:16:f0:5a:ae:f3:6e:f6:9e:
d5:16:b7:9c:88:62:66:ce:d7:31:4f:9b:6b:9e:7d:
66:89:e8:9e:7a:8e:92:92:8b:6b:d9:48:5e:22:e5:
64:9d:e7:cc:c4:25:d4:8d:2d:57:70:7b:89:c0:58:
80:42:04:b4:17:d6:16:92:11:d4:26:a0:92:39:48:
6d:ae:ef:2c:96:f3:86:44:ac:f7:4c:8e:58:12:17:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9E:C0:75:29:DF:6F:E8:F2:73:9E:44:87:18:CF:A1:33:D3:77:D9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1J7AdSnfb-jyc55EhxjPoTPTd9k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.45.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:98:ef:38:8a:2f:53:3d:93:53:c1:1f:d5:dc:3b:87:19:13:
14:ad:5b:52:dd:36:12:92:33:f6:b8:03:6c:fb:53:7a:6b:d1:
e4:2d:9f:fb:32:ca:77:59:30:b3:66:fe:79:bc:38:a5:51:45:
73:e3:c4:36:04:87:08:44:ec:7d:6e:a1:07:62:4e:9d:54:11:
b8:d4:d5:20:9c:1c:ef:91:ca:7e:43:53:6c:e5:5a:2e:f7:d4:
30:99:c1:fc:ba:36:d9:1c:65:59:fc:65:75:e6:12:81:9b:d2:
d6:5b:65:95:3e:cf:af:f7:7e:dd:01:66:83:55:24:97:24:49:
7b:16:94:b6:22:5c:77:c7:dc:73:85:f7:c6:8c:3f:15:91:bc:
7e:ef:df:62:62:03:08:2c:eb:3d:7f:45:e3:b0:2b:1f:29:77:
c4:d0:c5:7e:d4:9f:08:94:75:6b:d5:a0:fa:2d:84:67:17:63:
7f:34:dd:08:01:c3:74:75:d8:a9:4d:7e:bd:da:13:98:7b:87:
25:3e:7a:be:df:35:9b:3a:02:4c:7b:e8:1f:da:79:1e:6a:c6:
39:df:4c:30:54:7c:0c:17:68:f7:91:54:a7:96:c4:24:0d:5c:
2d:e3:5f:0d:f8:27:9e:4c:cd:4d:1e:60:80:82:5e:f9:d9:62:
da:69:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org