Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3qQR6tQ94WGpvuBUusWOmY6h3Ho.roa
File: 3qQR6tQ94WGpvuBUusWOmY6h3Ho.roa (raw, json)
Hash identifier: KqV4o4T5zkRn/+/ZBr6imDzRFNpZoKCNvjI0I754Na0=
Subject key identifier: DE:A4:11:EA:D4:3D:E1:61:A9:BE:E0:54:BA:C5:8E:99:8E:A1:DC:7A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F99
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3qQR6tQ94WGpvuBUusWOmY6h3Ho.roa
Signing time: Sun 07 Feb 2021 12:34:56 +0000
ROA not before: Sun 07 Feb 2021 12:34:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 45.64.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3993 (0xf99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:34:56 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DEA411EAD43DE161A9BEE054BAC58E998EA1DC7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:db:e5:ec:f4:79:37:6e:1d:dd:6f:9f:82:ff:
e4:df:1f:09:00:08:97:e2:19:09:03:e8:8f:3f:1d:
54:1f:39:8c:ac:42:f8:b6:dd:f7:f7:c4:17:82:40:
6d:ef:2b:f4:df:51:8f:91:f1:4e:80:df:12:7a:cf:
86:5d:6b:17:24:86:59:ca:ba:3b:60:63:25:33:1e:
17:d0:3c:06:f8:c8:32:1c:33:52:0b:cb:75:96:8e:
77:73:6a:28:d5:e0:62:06:79:43:fc:c2:b1:68:61:
2a:dd:18:27:0a:20:8a:6e:60:00:88:de:00:a6:8f:
45:41:d8:75:34:31:de:6e:d8:4d:2d:f4:4c:06:5a:
87:b1:e1:d2:9a:c6:d0:d4:8a:9e:fa:e7:24:59:52:
1e:78:83:b1:58:d6:19:39:aa:e1:d5:d3:68:40:8b:
f7:5a:1c:8d:f4:79:ff:9c:66:f1:9c:ee:ed:bf:08:
58:67:d4:73:47:67:d3:8d:a4:82:3b:98:68:c1:f1:
ae:b8:f2:b0:aa:a9:cf:a0:1a:e1:b3:df:47:a2:4b:
d0:8e:85:aa:3e:37:d1:34:12:4c:b8:a2:50:2e:e4:
8a:da:7a:7e:64:24:35:f8:da:6a:d3:f8:4a:a1:2f:
04:7e:e9:24:85:6d:70:45:2b:7e:f9:9d:24:a2:3c:
19:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A4:11:EA:D4:3D:E1:61:A9:BE:E0:54:BA:C5:8E:99:8E:A1:DC:7A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3qQR6tQ94WGpvuBUusWOmY6h3Ho.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.34.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d8:0a:4e:3a:76:fa:ed:07:37:5d:ba:4a:3a:3e:5e:dc:74:
f9:a8:44:ca:5b:e5:27:22:64:dd:3b:45:73:b5:54:50:df:52:
01:75:38:d2:3a:33:2c:ac:77:dc:4c:b8:06:56:70:67:d3:07:
d5:f0:ea:cb:22:36:7d:67:a4:0a:d0:5d:3a:4f:35:60:cc:14:
eb:a2:b9:82:6d:4e:f5:fc:e5:f9:eb:90:fc:20:86:d6:6f:9a:
29:7a:4e:3c:69:29:f0:93:db:9f:91:3a:c0:f9:7f:4d:75:c8:
cf:8b:75:4b:e2:5d:c2:17:a5:7d:bc:5a:1d:01:c5:b8:28:bd:
54:f9:38:f4:27:5b:48:2f:7d:e8:16:d0:50:cc:d7:91:18:56:
1a:6c:1f:39:f0:68:08:52:8d:17:28:42:85:3b:5a:dc:7e:98:
54:f3:34:e9:5e:fe:31:35:87:f3:11:1e:52:0b:e9:a5:ed:8d:
be:b6:f8:74:5e:a1:04:ec:02:91:91:8f:ba:10:e3:95:af:77:
aa:38:b4:f6:a9:37:67:b9:ca:5a:e4:22:f9:95:8c:a4:0f:e5:
01:2a:8f:53:f2:af:95:9a:ae:16:df:ea:95:ef:55:8e:5a:04:
f8:d1:2d:01:cb:ba:01:e2:b8:47:12:09:3a:4f:4f:98:c1:e2:
c1:50:bd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org