Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6DdmJnkog7YFSfqagZhlMnQicxA.roa
File: 6DdmJnkog7YFSfqagZhlMnQicxA.roa (raw, json)
Hash identifier: lO955CmDHP5l9vzSdTbhRng7wxL2Y7xOOZAZ7IE2Na4=
Subject key identifier: E8:37:66:26:79:28:83:B6:05:49:FA:9A:81:98:65:32:74:22:73:10
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1013
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6DdmJnkog7YFSfqagZhlMnQicxA.roa
Signing time: Sun 07 Feb 2021 12:37:29 +0000
ROA not before: Sun 07 Feb 2021 12:37:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.56.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4115 (0x1013)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:37:29 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E8376626792883B60549FA9A8198653274227310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:05:0c:92:2c:73:85:32:84:03:a7:c1:86:
05:71:ae:8c:f0:43:8c:64:62:c2:ec:c5:05:36:e2:
b0:fc:63:3e:71:f8:fc:c5:27:16:5e:93:5f:78:c8:
a8:3c:fa:aa:83:4d:71:41:c0:4a:8b:e5:17:4f:ca:
80:ad:8c:37:a6:b5:8d:13:0a:86:d6:a5:df:0c:ae:
2f:6e:07:83:63:44:da:65:2b:53:a4:2b:ad:3a:48:
0c:fa:2d:b2:7b:fb:66:f1:15:e6:de:67:6e:32:6b:
f0:f6:6b:5c:3a:c7:73:6f:82:95:0d:ff:a8:cb:37:
94:10:2f:08:9f:c1:8d:b1:c7:be:4a:1c:27:01:20:
6e:c4:7b:05:7d:b4:41:f2:9e:1d:c5:af:5e:da:04:
29:0c:0a:07:d1:98:5a:89:4c:43:74:de:76:6f:e7:
50:2c:a0:32:fa:94:3f:f5:b1:5a:3c:19:90:a0:83:
2b:8c:69:63:2c:39:04:c6:87:c6:6b:ec:8f:8e:0a:
57:0d:06:03:16:1e:e2:d9:3a:29:cb:86:0a:80:b7:
43:75:9f:83:4e:10:11:3a:e6:da:14:24:ea:25:76:
04:c5:c0:f8:dc:43:6e:5f:44:27:9b:f9:cc:87:49:
df:bf:99:95:67:cf:4e:65:43:40:b8:78:8a:77:dd:
6c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:37:66:26:79:28:83:B6:05:49:FA:9A:81:98:65:32:74:22:73:10
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6DdmJnkog7YFSfqagZhlMnQicxA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.191.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:80:bf:12:56:b9:03:dd:90:e8:39:eb:50:f5:ba:8f:11:d3:
97:a5:df:06:a6:ba:a8:cd:f6:1e:7a:a5:1f:0f:43:bb:4d:bb:
1a:4d:26:6b:c7:09:fa:2c:ec:83:d9:75:c6:f3:2d:15:84:22:
99:25:81:18:6d:b4:e1:a0:54:66:06:19:fe:30:b0:d4:3d:ae:
da:61:5c:13:10:e8:04:2b:8e:f8:a5:3c:d9:79:71:de:6f:64:
95:22:53:b8:64:56:89:8e:e8:a2:45:b6:fd:fb:af:a4:08:10:
90:83:d2:2f:08:0b:00:98:36:8f:86:41:c6:a4:15:99:cd:12:
c1:36:63:c0:41:1d:cb:c6:a8:3f:45:33:0e:a3:0b:3a:c0:63:
a2:1a:a6:52:6f:6f:b8:6b:7b:1b:5e:4d:61:11:22:ab:8b:43:
a5:88:20:8a:52:86:b0:58:ea:b6:7c:cf:ec:70:78:27:7e:ed:
46:03:4e:b6:8a:c9:a0:38:9b:f5:32:c4:33:0b:27:64:26:be:
61:93:70:76:ba:b6:a4:07:07:6f:2d:05:1d:a6:c8:ed:62:e2:
bd:e6:56:a0:01:a3:84:8d:1e:7b:9f:6c:d7:90:35:b0:89:fd:
b2:9f:60:f5:b0:f1:13:24:e0:9a:54:7a:c1:7d:92:93:50:70:
10:84:59:0c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEBMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTAyMDcx
MjM3MjlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEU4Mzc2NjI2NzkyODgz
QjYwNTQ5RkE5QTgxOTg2NTMyNzQyMjczMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2mgUMkixzhTKEA6fBhgVxrozwQ4xkYsLsxQU24rD8Yz5x+PzF
JxZek194yKg8+qqDTXFBwEqL5RdPyoCtjDemtY0TCobWpd8Mri9uB4NjRNplK1Ok
K606SAz6LbJ7+2bxFebeZ24ya/D2a1w6x3NvgpUN/6jLN5QQLwifwY2xx75KHCcB
IG7EewV9tEHynh3Fr17aBCkMCgfRmFqJTEN03nZv51AsoDL6lD/1sVo8GZCggyuM
aWMsOQTGh8Zr7I+OClcNBgMWHuLZOinLhgqAt0N1n4NOEBE65toUJOoldgTFwPjc
Q25fRCeb+cyHSd+/mZVnz05lQ0C4eIp33Wy9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6DdmJnkog7YFSfqagZhlMnQicxAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzZEZG1KbmtvZzdZRlNmcWFn
WmhsTW5RaWN4QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9
OL8wDQYJKoZIhvcNAQELBQADggEBAB6AvxJWuQPdkOg561D1uo8R05el3wamuqjN
9h56pR8PQ7tNuxpNJmvHCfos7IPZdcbzLRWEIpklgRhttOGgVGYGGf4wsNQ9rtph
XBMQ6AQrjvilPNl5cd5vZJUiU7hkVomO6KJFtv37r6QIEJCD0i8ICwCYNo+GQcak
FZnNEsE2Y8BBHcvGqD9FMw6jCzrAY6IaplJvb7hrexteTWERIquLQ6WIIIpShrBY
6rZ8z+xweCd+7UYDTraKyaA4m/UyxDMLJ2QmvmGTcHa6tqQHB28tBR2myO1i4r3m
VqABo4SNHnufbNeQNbCJ/bKfYPWw8RMk4JpUesF9kpNQcBCEWQw=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:33 2023 by rpki-client on console-ams.rpki-client.org