Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AkEIlkZ9U73IC253joiQ1px11P4.roa
File: AkEIlkZ9U73IC253joiQ1px11P4.roa (raw, json)
Hash identifier: PP+RPjzIuqweYaayskk48/tqM6bOiR2S5qUCYUiA0HQ=
Subject key identifier: 02:41:08:96:46:7D:53:BD:C8:0B:6E:77:8E:88:90:D6:9C:75:D4:FE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AkEIlkZ9U73IC253joiQ1px11P4.roa
Signing time: Thu 15 Sep 2022 02:36:27 +0000
ROA not before: Thu 15 Sep 2022 02:36:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 61.61.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=02410896467D53BDC80B6E778E8890D69C75D4FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ff:db:99:97:20:e2:ba:9b:66:7a:c1:cf:c2:
53:c8:e2:7f:31:4f:cf:11:d3:c4:1f:c3:91:d1:b3:
9d:7f:ff:7c:f8:23:14:63:44:e5:3f:3d:2b:c7:4e:
bb:87:f6:8c:78:27:64:0f:7c:e2:58:96:52:c1:38:
ed:ff:70:43:71:e4:11:05:de:b9:1f:62:7f:00:cf:
0a:2d:2d:3b:6f:d3:82:76:6d:bd:99:3a:9d:9a:a8:
5e:f8:8d:8b:73:65:f0:eb:b9:5e:2a:cf:06:4f:d9:
ce:12:b2:9d:16:62:40:d2:15:4a:58:b8:24:c1:52:
e4:9a:f0:fd:0d:3c:9b:ca:56:24:30:0f:65:ee:60:
74:9d:65:56:84:56:ae:5d:8c:cf:32:81:56:db:19:
40:15:8b:25:77:f8:b9:f9:f7:61:eb:1b:4c:43:c9:
3d:f1:a5:5a:58:bd:1d:ab:11:08:59:22:09:a0:51:
33:29:08:24:e7:9f:aa:0c:b1:95:2c:13:7f:52:26:
3e:a3:6e:40:b4:94:e9:10:21:a2:c7:35:13:10:94:
62:aa:2d:9a:c7:19:6a:f0:ed:18:0a:9d:07:34:09:
13:e9:95:b6:20:a5:5e:07:e8:2e:6a:cb:c9:ad:93:
ea:ac:96:44:ad:e4:fb:f5:0b:36:b0:e4:93:f8:f8:
6d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:41:08:96:46:7D:53:BD:C8:0B:6E:77:8E:88:90:D6:9C:75:D4:FE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AkEIlkZ9U73IC253joiQ1px11P4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.212.0/22
Signature Algorithm: sha256WithRSAEncryption
04:47:5d:c6:35:76:10:2d:2e:3a:f8:18:e7:6a:41:fa:56:7c:
6d:3a:d7:b0:11:d6:be:d6:79:aa:b3:aa:54:7f:5f:5e:76:a3:
6b:d5:dc:76:9c:93:d1:97:d5:00:ac:f4:4a:76:78:de:d2:d7:
b3:36:66:6d:f9:af:22:aa:48:d8:65:80:96:61:10:7f:f0:2c:
ba:68:9f:52:03:21:84:d8:b0:82:83:f4:ee:04:8a:25:0f:ef:
53:d0:78:9b:8f:07:b3:bc:a6:57:13:81:42:7e:45:e3:ab:7b:
08:d8:f8:03:02:78:ab:18:24:08:d1:f1:da:c0:c6:db:86:05:
f7:44:5f:9d:89:bb:1d:8e:f1:35:28:81:78:1e:3f:6d:a0:36:
f2:b2:01:5a:8d:c2:ac:4c:98:13:fe:92:71:2c:d3:09:86:14:
f0:e5:cd:98:33:b2:25:5c:a0:69:cf:1d:2d:a0:6b:11:35:db:
12:77:1a:cf:e2:51:26:51:2b:a9:e0:a3:d1:be:a5:49:3b:0e:
ad:10:8b:b5:bf:99:a2:20:9d:cc:30:42:33:60:77:98:38:b8:
17:0a:ff:11:e8:64:b4:c5:ff:7e:96:00:3e:74:eb:e7:61:44:
c8:0d:4c:c3:5a:16:9b:09:d9:77:e3:2a:c7:45:a6:8f:84:42:
db:f2:d6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org