Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BbMPjcD6eX4AFymi1kF-mMht3sM.roa
File: BbMPjcD6eX4AFymi1kF-mMht3sM.roa (raw, json)
Hash identifier: q8FwuFJtv4Df+jL3i079kavbcTAa1b3MGp+ymNGAmHU=
Subject key identifier: 05:B3:0F:8D:C0:FA:79:7E:00:17:29:A2:D6:41:7E:98:C8:6D:DE:C3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B95
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BbMPjcD6eX4AFymi1kF-mMht3sM.roa
Signing time: Tue 29 Sep 2020 10:08:35 +0000
ROA not before: Tue 29 Sep 2020 10:08:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.60.215.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2965 (0xb95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:35 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=05B30F8DC0FA797E001729A2D6417E98C86DDEC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f5:87:31:49:13:3e:4a:cf:fa:7a:45:a0:73:
80:93:65:4b:f7:eb:42:38:f3:73:28:05:11:b5:b2:
bb:66:24:2d:a6:99:88:9a:85:43:18:2d:03:bd:37:
3a:8f:c2:9c:99:85:3f:6c:97:81:d3:74:c5:0e:71:
10:c5:9c:49:f4:76:74:ec:1e:cd:85:5b:43:49:fc:
a5:39:4a:7f:42:c1:56:03:0d:8a:d2:e8:88:15:a3:
3a:02:b7:52:52:81:f1:eb:15:d5:6f:95:21:86:3f:
84:07:c5:3c:16:ee:b9:a7:fa:19:db:44:70:5c:0b:
cb:b7:bd:96:07:77:0d:fa:91:0e:4f:61:72:6f:62:
16:83:91:0e:6d:ed:aa:3e:ab:28:5a:95:ec:56:25:
97:2a:57:78:a2:12:6a:d9:cd:0f:6e:3f:6e:7f:37:
b5:36:ce:77:00:8f:e9:34:5c:c1:ab:6a:d2:44:c0:
da:a3:a4:41:47:dd:a0:49:10:c5:4e:4a:01:70:9d:
04:b4:d4:72:b2:c4:37:5d:fd:48:54:79:3b:2d:7b:
40:75:9e:5a:88:59:35:a7:0a:f9:15:df:35:fb:5b:
ed:2e:ed:4b:88:c0:d6:66:46:f0:34:e1:d7:98:0b:
3f:4a:82:33:32:15:ff:cc:5c:9e:39:4c:12:1b:c6:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B3:0F:8D:C0:FA:79:7E:00:17:29:A2:D6:41:7E:98:C8:6D:DE:C3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BbMPjcD6eX4AFymi1kF-mMht3sM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.215.128/25
Signature Algorithm: sha256WithRSAEncryption
78:c6:b4:8c:23:21:b4:5d:e1:0f:05:64:f6:e9:d4:bb:88:12:
11:68:2b:6f:8c:f5:61:84:f9:5b:f0:d2:6f:5f:d7:47:98:41:
0e:71:d8:66:14:6b:24:e4:6f:90:9a:ab:ee:07:a9:e6:97:16:
32:91:0c:d9:37:cb:0f:d4:38:9d:47:4d:69:cc:d2:e8:0e:86:
89:3a:e9:ee:f5:73:ad:22:7a:c5:34:ee:25:17:7f:ba:65:c1:
5c:83:ab:cb:e6:40:2c:db:9b:dc:c6:7d:f8:5c:94:a1:fe:53:
66:ce:48:65:bb:e2:b9:c1:a7:a6:c9:08:af:3f:12:1c:43:23:
24:95:51:c8:f3:51:f3:0b:1f:bc:2a:70:15:9c:59:98:cf:e7:
cf:c4:a9:5b:77:a7:a6:b7:9d:83:96:50:53:c2:d1:9b:51:c1:
83:82:fe:a9:54:f0:6f:78:d2:ba:c8:2b:dc:06:ba:a7:f0:77:
a8:76:b6:50:16:39:69:d2:7f:cb:cc:4c:73:2f:db:7a:c7:6a:
47:13:86:3d:dc:d8:9f:15:64:89:70:2c:2e:66:4b:3d:a5:a7:
d1:7f:2c:86:70:01:4c:0b:bd:53:74:fa:b7:b2:a7:fc:19:35:
b0:b1:92:75:52:a6:c9:f7:d4:f0:4a:e8:b7:47:3d:74:07:0d:
bc:f4:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org