Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9D7zuOZtpOvY_514gZwB6FZ--OQ.roa
File: 9D7zuOZtpOvY_514gZwB6FZ--OQ.roa (raw, json)
Hash identifier: Gq3Peme/iTyVenMLaXSv0wqTEUj7mT4LRoiyV2b+K2U=
Subject key identifier: F4:3E:F3:B8:E6:6D:A4:EB:D8:FF:9D:78:81:9C:01:E8:56:7E:F8:E4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AFC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9D7zuOZtpOvY_514gZwB6FZ--OQ.roa
Signing time: Tue 29 Sep 2020 10:07:52 +0000
ROA not before: Tue 29 Sep 2020 10:07:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 61.60.215.240/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2812 (0xafc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:52 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F43EF3B8E66DA4EBD8FF9D78819C01E8567EF8E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3e:87:87:3c:3b:fc:23:a4:9b:9f:4e:0a:87:
41:bb:ae:22:5c:77:01:ab:23:ba:55:28:a1:b7:0e:
d6:95:56:ff:b5:cc:ee:a8:b4:c3:5c:a2:27:92:0c:
32:97:ef:ad:b6:ac:ae:7e:6b:e1:e2:05:e9:eb:84:
ec:38:35:5d:aa:cf:2f:34:6e:5e:ed:3e:7d:cb:81:
e0:02:ff:8c:3f:89:af:51:2d:8f:46:b7:d3:32:ec:
3f:2b:db:8d:68:90:26:98:d5:8d:9f:3b:fc:6d:eb:
ab:83:4d:38:a3:7b:b8:e2:db:3e:de:f0:94:4e:10:
bf:06:5b:b5:1d:5f:5c:57:fd:0a:cf:f8:9c:76:a8:
79:a1:2e:3c:61:3b:7b:a6:72:36:cb:49:6d:a7:c7:
bd:c5:b8:6b:db:aa:ce:3d:a5:1a:72:92:f9:0b:e7:
4c:17:72:1b:6a:04:e2:b1:be:62:61:76:1f:57:a4:
4e:d7:5a:0a:f6:30:82:d6:36:8d:ce:eb:80:7d:0e:
6e:f8:dc:43:3c:a4:53:0e:5f:93:50:6c:14:d7:8e:
3f:91:99:d7:38:9c:fa:e8:b2:88:8e:0f:bd:5c:90:
a0:07:bc:04:39:38:91:c1:d9:51:5c:b8:ad:b5:f1:
26:e3:4b:fb:ac:98:10:e5:16:53:bc:4c:16:95:50:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3E:F3:B8:E6:6D:A4:EB:D8:FF:9D:78:81:9C:01:E8:56:7E:F8:E4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9D7zuOZtpOvY_514gZwB6FZ--OQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.215.240/29
Signature Algorithm: sha256WithRSAEncryption
31:27:2f:5c:87:9c:1f:31:a1:c5:b0:7d:2b:99:05:25:1b:a2:
42:6c:bf:59:2b:b1:1e:00:28:f5:9c:d7:f9:79:10:62:77:bf:
0c:c0:89:58:1b:43:ac:2c:9e:08:dd:d2:e3:87:02:2a:20:c2:
b5:0d:3e:02:c7:26:03:de:5a:bc:5a:44:64:1b:ab:c2:1b:8a:
3b:82:75:fe:61:fc:e8:35:5a:bb:4f:29:63:e1:2b:00:f0:74:
ba:c6:b5:e9:bb:4c:fd:ba:ba:f2:48:3c:32:06:e7:02:e9:16:
67:9b:63:a8:10:d9:c7:4a:2b:a6:a1:44:4b:08:1f:39:2a:12:
01:9f:b2:19:bd:19:bd:e3:9d:8b:eb:f3:68:dc:f2:eb:49:9a:
e0:dc:27:a6:d6:04:0d:b1:db:8f:9c:de:d7:31:27:3d:b5:ce:
d7:87:3b:d6:5c:6c:cd:4a:fa:ba:81:0d:8b:4c:57:b3:43:ae:
2d:6b:8e:3a:d8:29:06:25:61:d7:d8:8d:2d:87:20:23:06:03:
86:39:47:f4:18:30:78:d6:0e:ba:f6:5c:28:51:64:e2:79:89:
7b:f2:38:6c:e0:92:90:ef:62:9c:37:d1:da:4f:8e:32:43:07:
7e:1f:47:01:38:b2:01:0d:c9:66:58:a0:89:3c:b1:1d:ae:9d:
8a:19:ff:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:55 2025 by rpki-client