Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6oRy-kkW1WFk_iMAVYws6QhI2bo.roa
File: 6oRy-kkW1WFk_iMAVYws6QhI2bo.roa (raw, json)
Hash identifier: 53GdRhNHn/GxqSBPdSmRFLkWU4qSIkhI9P4Hfo+OWWk=
Subject key identifier: EA:84:72:FA:49:16:D5:61:64:FE:23:00:55:8C:2C:E9:08:48:D9:BA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B6B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6oRy-kkW1WFk_iMAVYws6QhI2bo.roa
Signing time: Fri 07 Apr 2023 07:27:30 +0000
ROA not before: Fri 07 Apr 2023 07:27:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 61.61.224.0/20 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7019 (0x1b6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Apr 7 07:27:30 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EA8472FA4916D56164FE2300558C2CE90848D9BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:df:16:6f:ed:32:64:d9:67:9d:39:32:b5:
2f:07:78:dc:c5:fd:39:40:5b:30:29:e1:79:51:b1:
1d:b5:62:f5:27:91:a5:63:86:a0:33:0c:39:2b:d3:
1d:89:8f:b7:a5:e0:49:e3:77:3a:6b:5d:c4:78:3f:
a9:47:e4:99:39:13:3e:f7:be:b9:b1:47:56:01:ac:
58:fc:b2:c8:8b:12:7b:e7:c8:fc:d9:88:15:95:01:
c2:7f:a1:9f:68:ce:9c:e5:3b:ce:0f:a0:f6:49:cd:
51:c9:e8:c8:4d:55:21:f1:1f:51:b0:2c:92:7b:8b:
dc:ab:fa:b5:d5:e3:1a:19:03:54:8f:a6:31:62:30:
54:a8:46:aa:dc:d8:27:97:ad:e1:c0:df:ec:bd:3b:
85:39:ac:fd:ba:c9:9e:e9:10:36:75:07:8a:8c:26:
38:73:bc:bf:bd:53:2b:91:dd:f5:3c:36:6c:41:f9:
67:ee:35:b9:21:30:7d:bc:ef:1a:30:83:2d:d5:e1:
0e:84:59:38:6d:00:80:71:a4:44:e0:f6:ce:47:f0:
81:c3:42:f1:fa:81:57:a1:a8:33:48:07:a8:01:66:
76:59:1c:88:6d:c4:c9:ca:91:6e:14:5a:f5:85:72:
73:52:36:62:ea:a2:96:8d:77:76:82:c2:00:68:48:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:84:72:FA:49:16:D5:61:64:FE:23:00:55:8C:2C:E9:08:48:D9:BA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6oRy-kkW1WFk_iMAVYws6QhI2bo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.224.0/20
Signature Algorithm: sha256WithRSAEncryption
21:0f:b9:64:42:68:68:91:32:71:b9:6b:0d:b9:5d:ca:37:a5:
e1:b6:7a:96:f6:c9:1c:ef:66:e6:bc:9a:42:bb:c4:1a:fc:7a:
bf:bc:cc:53:a3:c9:2f:03:c0:eb:3e:cb:3a:79:cf:c1:2a:ef:
7d:97:c6:07:eb:1f:b1:39:17:1a:03:9a:25:6a:05:69:f1:52:
0f:db:06:9b:b0:fa:25:eb:dd:52:f9:23:e0:01:f4:dc:ec:5e:
bc:40:03:a2:ed:f2:ef:de:eb:0b:8a:d9:48:91:04:9f:0c:39:
ff:3c:93:76:a8:a9:f2:bc:46:67:85:b6:e5:a4:91:67:d1:3a:
cc:63:6c:2a:d3:d1:25:6c:87:3b:52:db:f4:8f:71:1a:90:41:
c0:27:f0:74:b7:5f:02:44:6e:35:5c:db:bc:da:6b:e0:e7:06:
34:3c:14:3d:25:7d:fa:be:8a:f1:08:f3:e7:d2:59:d7:27:a0:
f9:7d:5b:a2:c6:cd:1a:a6:4c:ca:ca:10:0f:d5:89:8b:1b:04:
b5:e7:b2:b5:18:da:5f:5a:cb:69:7d:e4:e7:b5:a9:ca:13:c3:
53:08:5b:d4:1e:d9:27:8c:74:14:f0:96:f1:d4:05:70:95:e1:
47:85:52:98:f5:75:e4:70:6b:02:7a:15:13:1e:74:64:df:3d:
11:fc:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org