Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6F-KW1Hc8Zypa3qK3U8pSk4i6do.roa
File: 6F-KW1Hc8Zypa3qK3U8pSk4i6do.roa (raw, json)
Hash identifier: 4CWxmVwMYNPhAdFDQTVhUTqh+NQ6qXMey3BuBqVqMWw=
Subject key identifier: E8:5F:8A:5B:51:DC:F1:9C:A9:6B:7A:8A:DD:4F:29:4A:4E:22:E9:DA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1360
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6F-KW1Hc8Zypa3qK3U8pSk4i6do.roa
Signing time: Wed 29 Sep 2021 02:55:41 +0000
ROA not before: Wed 29 Sep 2021 02:55:41 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 61.56.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4960 (0x1360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:41 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E85F8A5B51DCF19CA96B7A8ADD4F294A4E22E9DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:63:f8:87:0c:c5:73:82:8e:65:e8:77:c0:
be:c8:50:17:37:2b:13:8a:11:a1:35:d2:57:52:8f:
13:ca:e4:40:dd:f5:84:8d:c5:ba:2c:d7:71:73:b4:
83:d2:32:35:6f:d0:be:5b:ca:61:67:0d:f5:64:de:
84:cb:d0:2f:08:c0:8f:2e:d6:6e:b9:bc:ca:fe:93:
5c:c1:cc:04:96:7f:d0:86:c0:16:9f:be:e3:05:d8:
a6:c3:63:f1:0a:43:fd:0b:7a:25:d2:bf:2e:f5:a5:
ea:a5:0f:30:78:a7:57:1b:06:8b:da:89:41:83:a8:
41:1e:88:2d:4d:a0:32:62:e8:15:2c:0c:0e:49:2c:
ec:83:e5:5b:75:1d:b4:68:2f:3d:e4:5f:4a:28:5b:
b3:43:30:1f:1f:76:c0:f3:13:28:99:cb:5b:b3:ef:
f1:66:69:09:30:6d:b4:a8:c0:e6:c0:b6:d3:92:cf:
ab:58:32:2f:0c:6f:00:76:13:0c:7e:1a:45:e7:b3:
07:5c:71:e1:b6:18:ea:cc:7c:a2:ad:f5:ec:9b:db:
41:8c:4b:fe:33:fc:6d:79:70:66:78:40:fb:e6:17:
38:d9:35:db:b1:39:ac:92:22:18:e3:00:1f:1c:24:
7a:48:d8:3a:ed:2a:b7:ae:b2:0f:8e:a2:93:be:b0:
67:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5F:8A:5B:51:DC:F1:9C:A9:6B:7A:8A:DD:4F:29:4A:4E:22:E9:DA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6F-KW1Hc8Zypa3qK3U8pSk4i6do.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.164.0/22
Signature Algorithm: sha256WithRSAEncryption
40:07:57:48:f9:e9:17:b3:3a:62:e8:c8:21:d7:2e:8e:6b:96:
e9:7a:63:33:5f:be:67:f8:f5:4e:cf:b2:c7:fa:db:53:55:9c:
18:4a:bd:dd:22:ce:56:66:7e:ab:f6:a8:2c:28:63:5a:e1:8f:
9f:22:54:13:fe:81:eb:4a:cc:50:8d:4f:6a:b7:b6:d2:a4:ec:
23:fd:4a:3f:ed:fe:58:c6:e9:84:6a:b8:06:04:ce:90:2e:12:
b6:c7:54:36:d6:90:66:69:b6:90:0f:6d:5c:04:51:60:02:c8:
86:a9:58:a7:e7:75:b0:90:12:66:29:07:51:93:2a:f4:67:42:
6a:bb:b2:0a:e4:c5:af:b7:10:7a:2e:5e:59:43:2a:f2:9e:29:
c2:e2:30:c8:b4:c6:5c:1f:1a:42:27:08:4e:cf:b2:00:70:5e:
a1:5d:5b:f0:14:03:78:f0:42:32:b7:73:9b:48:2d:9a:c4:33:
f5:2a:0c:1f:9d:b9:5f:ee:ad:e7:00:d0:94:cd:33:b3:bb:90:
b3:37:29:22:bd:44:cb:94:4b:5c:d9:19:8e:46:9c:2a:8c:8f:
1d:18:da:33:f2:ff:f0:7b:b3:a7:7b:74:ff:0e:a1:0c:f3:ac:
f2:a3:c6:4c:90:24:76:a2:b8:b1:e5:8d:f3:fb:53:7a:4b:70:
65:c7:00:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org