Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9fdI6LskftuL9_m9gCymLiRH67Y.roa
File: 9fdI6LskftuL9_m9gCymLiRH67Y.roa (raw, json)
Hash identifier: TM9PdSKxLNSxmdctU1i1NiVABCqONX8mGm7u43RVmHI=
Subject key identifier: F5:F7:48:E8:BB:24:7E:DB:8B:F7:F9:BD:80:2C:A6:2E:24:47:EB:B6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A12
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9fdI6LskftuL9_m9gCymLiRH67Y.roa
Signing time: Sat 22 Oct 2022 06:17:27 +0000
ROA not before: Sat 22 Oct 2022 06:17:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.61.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6674 (0x1a12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:17:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F5F748E8BB247EDB8BF7F9BD802CA62E2447EBB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:75:0f:34:f0:34:45:68:0b:7e:8a:27:cc:
67:19:e8:c4:db:40:5f:73:b2:c9:f6:16:df:e5:89:
6f:37:89:c2:2a:c4:95:40:51:d3:6a:b0:1d:e1:68:
1f:03:47:d9:19:61:fc:f0:06:6a:7e:45:ea:80:71:
01:db:f5:4f:2c:62:66:f7:bf:fb:7e:36:be:58:b0:
da:4b:f1:53:b4:93:e3:e2:78:62:b4:6e:42:b6:ee:
dd:bd:4c:a8:35:ec:19:d6:26:e4:b1:45:d0:b4:a4:
b8:28:84:25:2b:8b:d3:4d:d8:08:f2:ae:c4:7e:c1:
35:fc:b6:e4:63:94:04:65:38:29:7f:62:1f:3e:84:
00:99:55:65:a5:70:49:0b:06:90:a0:0f:7a:94:cd:
38:77:59:42:5f:af:df:d7:ae:a9:02:b1:75:1b:7e:
38:fb:0f:99:9c:87:5e:83:61:e8:42:b9:60:b4:bc:
88:0c:e2:a6:ee:af:c5:86:98:f0:81:4c:cb:ff:94:
73:dd:e0:27:db:90:0a:9b:90:3d:42:d7:97:04:81:
61:1b:64:47:96:63:cb:e3:33:26:5f:8e:55:9d:7d:
a1:10:ed:2a:aa:b9:dc:c4:0b:eb:39:00:d4:3e:1a:
69:0c:6b:c2:0c:38:2e:1c:18:5e:ff:76:9d:19:4d:
2e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F7:48:E8:BB:24:7E:DB:8B:F7:F9:BD:80:2C:A6:2E:24:47:EB:B6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9fdI6LskftuL9_m9gCymLiRH67Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.232.0/22
Signature Algorithm: sha256WithRSAEncryption
32:96:08:5b:29:45:0f:97:18:8e:93:6e:17:7d:db:ff:01:58:
d8:10:ec:ef:fc:ce:99:b3:e6:e8:8c:71:72:af:f3:72:05:8e:
58:f2:0d:f5:17:3c:cb:d3:e2:e4:af:25:01:e3:af:14:4f:63:
6e:5d:8f:9f:24:85:6d:2c:0d:79:f3:01:d3:ba:a6:ae:03:1d:
7b:0d:b8:a3:dc:3a:19:4a:58:fa:7f:3a:8e:5b:53:86:ef:51:
09:24:f5:5b:cf:7f:e4:93:74:bc:1e:8d:fc:5a:48:5d:3b:ef:
db:b4:ca:df:f1:af:49:a5:f4:87:f9:a3:3c:34:f0:66:db:d6:
89:c0:e3:df:68:2b:e0:ab:95:b7:b9:88:52:97:47:a4:d3:59:
02:e9:5a:3c:9b:cf:73:8a:c2:bc:0d:c3:1a:bd:1e:af:a9:72:
14:1b:56:0b:49:6a:4f:0d:49:fc:e2:8d:19:2c:3c:0f:a8:f6:
62:c4:ef:36:2a:64:96:ee:e1:78:6d:67:29:ba:0d:64:dc:35:
c0:26:46:c0:43:3c:f8:bf:ff:7f:30:3c:9f:30:b9:6f:70:73:
2f:9b:69:a8:a3:cf:1d:e1:70:c3:ae:2c:18:8c:7b:e0:d7:47:
a9:28:66:2d:12:5e:62:81:50:cf:9f:e9:7e:76:e8:8a:59:74:
ac:ba:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org