Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3F1WAkUWMHsT5lWsx_vcJgAFDFo.roa
File: 3F1WAkUWMHsT5lWsx_vcJgAFDFo.roa (raw, json)
Hash identifier: jFue1cMfr1iRiekRmvNzHkPo1pxguEYPCc6WWUGiiMQ=
Subject key identifier: DC:5D:56:02:45:16:30:7B:13:E6:55:AC:C7:FB:DC:26:00:05:0C:5A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1333
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3F1WAkUWMHsT5lWsx_vcJgAFDFo.roa
Signing time: Wed 29 Sep 2021 02:55:28 +0000
ROA not before: Wed 29 Sep 2021 02:55:28 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4662
IP address blocks: 61.58.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4915 (0x1333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:28 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DC5D56024516307B13E655ACC7FBDC2600050C5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:53:78:ea:3a:27:27:28:7e:29:be:c2:4a:94:
ff:fc:b5:a7:5f:53:23:73:5b:62:a0:a7:5e:5e:12:
45:c0:b2:ad:bf:c2:01:c0:63:9a:41:21:c4:09:03:
2d:6f:2e:81:24:02:41:be:da:e2:19:58:ba:28:9a:
b2:f4:3e:06:b4:a1:1c:13:f0:fd:68:00:ec:52:70:
9d:86:d9:e2:2d:26:cc:da:41:c6:6e:d5:fc:c3:f8:
b8:91:5b:aa:96:33:44:7c:95:30:97:2f:9c:de:08:
32:a7:2c:ba:32:7c:1c:df:d5:7e:b0:76:cb:e3:33:
21:3c:9d:93:fb:ca:73:b4:ef:a1:d0:06:f4:d0:da:
5b:96:61:78:0d:8f:2c:fd:00:44:82:8a:5f:b8:28:
7e:80:9f:83:ef:22:9d:cd:a8:4a:34:71:b3:02:98:
74:36:6e:16:38:f8:27:1b:10:ca:16:1d:4d:c7:9d:
eb:15:64:71:29:16:a6:93:a3:9f:c7:da:51:c1:f6:
72:8a:5b:58:8b:ef:f9:09:f4:3e:eb:f6:01:89:ab:
d0:80:76:db:52:e7:40:a7:10:5d:85:1b:5a:44:43:
0f:cf:71:b6:9e:49:29:a2:ad:70:95:51:3b:ed:83:
15:b9:53:5d:91:02:df:77:0d:4e:44:89:bc:33:89:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5D:56:02:45:16:30:7B:13:E6:55:AC:C7:FB:DC:26:00:05:0C:5A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3F1WAkUWMHsT5lWsx_vcJgAFDFo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.96.0/20
Signature Algorithm: sha256WithRSAEncryption
2f:7d:f9:5a:01:1a:ac:d3:9d:e6:8e:16:c9:1e:c4:e7:60:31:
4f:2b:69:03:b9:93:dd:03:06:ec:c4:63:de:fa:35:f3:91:40:
0f:66:02:94:77:5c:b7:2f:18:7b:3d:f6:00:ce:25:d7:aa:50:
36:f4:cd:99:83:dd:cd:e8:f9:46:3f:78:6e:03:2c:66:a2:ab:
74:7e:4b:c8:63:30:a7:3a:15:8c:d2:60:67:96:05:b2:83:6c:
13:66:ab:0f:ff:1e:74:20:30:15:5f:9f:a6:67:b0:c3:d7:c6:
f7:30:fd:09:b1:a5:c1:41:21:c7:11:49:0e:5f:37:0b:cd:da:
59:3a:c9:00:db:ea:a7:db:ce:5c:1c:fd:c7:b7:7d:3c:89:f1:
4e:d6:51:4b:d5:cf:82:ee:3a:f9:82:14:ac:0c:cb:7f:4b:71:
08:3e:18:e8:c7:65:61:dc:c4:1c:e8:de:c0:49:60:40:dc:e9:
c4:2a:19:74:c1:d1:7d:60:00:30:2e:33:9b:b6:6f:4f:1b:9c:
56:68:b6:6b:99:49:e8:b3:e1:78:53:16:d5:b9:08:08:83:7e:
26:2d:93:85:2e:95:af:b6:10:94:ff:7b:a8:16:76:7d:92:d5:
40:01:5d:b4:ca:95:a9:77:f1:56:de:ff:d1:8b:e5:ea:fe:c0:
b9:45:4f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:45 2023 by rpki-client on console-fra.rpki-client.org