Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7HKBoJwABZoanka-X8TXF-kOShg.roa
File: 7HKBoJwABZoanka-X8TXF-kOShg.roa (raw, json)
Hash identifier: pI9MJLcUlOXmGv/7RDsWO/h7Ha6pgWOwkdIgn+RBlgE=
Subject key identifier: EC:72:81:A0:9C:00:05:9A:1A:9E:46:BE:5F:C4:D7:17:E9:0E:4A:18
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 194C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7HKBoJwABZoanka-X8TXF-kOShg.roa
Signing time: Sat 22 Oct 2022 06:06:21 +0000
ROA not before: Sat 22 Oct 2022 06:06:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 211.76.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6476 (0x194c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EC7281A09C00059A1A9E46BE5FC4D717E90E4A18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:74:31:26:1d:a5:ce:77:fe:a5:e8:c2:ce:
49:bd:ce:36:25:0c:f3:c1:5c:ae:7f:1c:63:71:3c:
b8:d8:a5:4d:1d:bb:f3:11:b2:6d:1d:d1:d7:d4:b8:
e4:ae:44:ee:2b:e4:c5:24:5a:93:2f:0a:45:a3:ae:
fb:8b:27:ef:1b:d1:96:8d:a0:98:31:7f:16:42:81:
8a:b9:81:5e:f5:a2:19:56:bb:b0:82:fe:1b:e3:38:
e7:2c:5d:64:e9:98:1a:15:99:44:4b:c3:72:8e:ce:
83:30:1f:36:a6:9b:af:9c:8e:6f:54:aa:ef:44:f9:
3e:82:84:f4:cd:72:32:b9:92:79:75:fc:57:c4:74:
77:7d:e0:78:81:25:ce:54:b1:5b:91:79:87:35:c8:
f8:1a:b0:fa:d1:1d:be:29:a8:be:c5:32:dd:5e:da:
a0:60:5a:03:d6:c8:d5:88:62:7a:b6:d6:b2:70:c0:
66:97:be:4d:66:4c:04:7f:9c:da:65:f7:04:48:6d:
6a:9b:79:44:f5:41:13:81:b7:42:3a:f7:2a:fa:e1:
f1:b3:e2:23:39:45:1b:d1:98:c8:1a:5d:8d:ac:51:
03:24:80:47:1c:20:6c:ad:a4:3e:01:28:34:a3:28:
a5:cc:f2:4e:b7:6c:fc:d2:95:ea:14:c8:24:9c:1e:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:72:81:A0:9C:00:05:9A:1A:9E:46:BE:5F:C4:D7:17:E9:0E:4A:18
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7HKBoJwABZoanka-X8TXF-kOShg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.40.0/22
Signature Algorithm: sha256WithRSAEncryption
29:42:f8:6d:4d:12:29:02:ad:3f:0c:89:fe:72:2e:f7:70:ad:
9c:fb:1a:6e:dc:79:3b:46:10:8b:0f:16:63:8f:f2:28:8f:24:
c8:8c:12:8c:14:8f:41:fc:58:d5:23:f9:c0:19:a3:3b:54:a4:
1b:25:40:99:34:78:c8:b4:ff:ed:d7:ca:ca:dd:69:c9:04:e3:
dc:05:2f:93:cc:3d:58:c0:e0:bc:87:97:89:40:28:95:e1:7b:
e2:f9:13:c8:08:6a:2e:99:43:b3:f8:ff:cc:a4:ff:1d:ca:99:
07:c0:68:d1:fc:3a:df:49:7a:2b:ce:a3:4e:32:fa:4a:57:0a:
0d:27:39:a1:87:13:ab:fe:14:b0:f8:5c:4e:2e:57:43:dd:fd:
77:5b:13:5e:d9:87:f1:9b:0f:c8:c6:70:45:b3:89:b6:fc:bc:
78:b5:91:42:36:57:77:48:23:15:50:f4:6f:c1:e5:fe:40:4b:
b8:9d:95:aa:2e:54:c3:ad:63:b3:3e:19:66:9f:68:60:ef:8d:
dd:5e:5d:93:a9:cc:d4:a6:ca:1d:28:dc:87:15:a3:7f:1f:60:
87:99:35:1a:2d:38:4d:08:ae:99:d5:e7:d9:a7:bb:41:ca:55:
c2:9d:fb:51:5c:e4:f4:2b:61:b3:01:54:b3:eb:6e:1a:86:61:
4a:91:eb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org