Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CQ-W-OCf2SsRhc6O4T2HrvMHMHw.roa
File: CQ-W-OCf2SsRhc6O4T2HrvMHMHw.roa (raw, json)
Hash identifier: HK6/WTtSsyE58nvLfEKF3jIQKCSZBnr9B67ZIzYPojg=
Subject key identifier: 09:0F:96:F8:E0:9F:D9:2B:11:85:CE:8E:E1:3D:87:AE:F3:07:30:7C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CQ-W-OCf2SsRhc6O4T2HrvMHMHw.roa
Signing time: Thu 15 Sep 2022 02:36:07 +0000
ROA not before: Thu 15 Sep 2022 02:36:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 61.64.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=090F96F8E09FD92B1185CE8EE13D87AEF307307C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:b4:c5:a9:14:f5:77:02:ac:95:6b:5e:a1:
52:c2:e6:40:2a:29:20:42:b2:bc:c9:3b:39:3d:f2:
fa:66:5b:51:21:35:de:e4:0a:35:e6:04:d8:da:5f:
d3:35:cb:41:13:d4:13:ce:f7:db:72:eb:60:69:aa:
36:97:11:83:ae:b1:a3:62:dc:d0:3b:ec:04:d3:86:
4a:e0:71:56:1e:3e:94:a7:95:60:9d:e0:a0:34:29:
b5:ec:88:66:d3:78:8e:f9:e9:c2:a3:de:4d:f8:67:
9f:6f:12:48:8c:b4:31:9e:a0:0a:fa:b2:46:e6:f8:
47:7e:94:8c:55:6c:27:5e:6d:88:18:a3:ff:56:ab:
bc:26:7e:a2:11:60:d5:b2:94:d0:da:b1:c9:bc:49:
79:62:96:32:3d:c6:f4:27:cd:18:fe:33:7f:83:63:
6c:87:f3:9b:79:43:d0:11:a6:ae:20:ef:9c:3d:ef:
48:ad:59:87:7f:68:ce:44:14:85:39:f0:bb:7d:52:
13:28:27:7d:14:7c:21:f9:26:5a:1f:88:1d:2e:48:
52:41:41:a7:ec:bc:00:2c:93:a5:50:55:0b:6a:27:
b8:de:85:7a:65:25:46:1f:7e:33:a6:a6:46:9b:20:
c9:d8:ee:7a:88:a2:d8:d6:03:6c:7a:73:f4:ec:46:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0F:96:F8:E0:9F:D9:2B:11:85:CE:8E:E1:3D:87:AE:F3:07:30:7C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CQ-W-OCf2SsRhc6O4T2HrvMHMHw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.24.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:9c:25:ad:b0:a5:15:21:f2:69:57:ea:f8:76:50:9b:66:20:
12:ce:a2:d4:86:66:a0:b7:84:e0:86:a4:50:6f:1a:d2:90:a3:
b0:31:82:6e:0b:25:aa:70:89:be:96:0f:e2:00:81:e7:c8:21:
aa:5e:b2:0b:4c:b1:5c:c4:85:18:ff:67:9e:1d:eb:7b:51:b7:
4d:d9:f7:9e:a4:82:04:ac:56:0c:17:1c:a1:06:7a:2c:bd:31:
ee:fb:bf:7b:cd:d5:ee:37:56:a3:d2:22:6b:13:27:d5:93:37:
b4:67:48:ff:94:fa:11:7b:ba:9a:0f:41:dd:0d:7f:5c:c5:62:
e1:ec:fa:5a:4b:f4:58:d0:81:5d:50:03:6e:ca:cd:30:ac:33:
c3:b2:7c:a0:72:b6:5b:bf:66:71:71:bc:3b:dd:14:59:d9:87:
01:21:39:3e:2d:ff:fa:a2:4a:37:d2:04:c8:f3:73:ca:24:45:
15:44:77:b0:c5:25:37:13:32:e3:88:b1:df:13:73:8b:2e:ec:
46:2d:9d:3b:39:2a:a0:ef:e2:9d:26:62:d1:1d:ef:36:0b:17:
54:1f:a6:85:dc:5b:65:7d:f1:8d:19:7a:15:35:e0:4a:a3:97:
22:25:44:62:19:41:46:79:03:58:de:73:72:cb:c4:c6:f6:2b:
69:d9:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org