Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DdEm7wSMlL1OupLQ3YKEjEdlvq8.roa
File: DdEm7wSMlL1OupLQ3YKEjEdlvq8.roa (raw, json)
Hash identifier: cM6xuoQD3TXXaQmy1vLlEUc+1EhvGeVdCEE1jW9yOM4=
Subject key identifier: 0D:D1:26:EF:04:8C:94:BD:4E:BA:92:D0:DD:82:84:8C:47:65:BE:AF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19EC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DdEm7wSMlL1OupLQ3YKEjEdlvq8.roa
Signing time: Sat 22 Oct 2022 06:12:59 +0000
ROA not before: Sat 22 Oct 2022 06:12:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 61.58.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6636 (0x19ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:12:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0DD126EF048C94BD4EBA92D0DD82848C4765BEAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:b9:26:1a:f8:84:b7:dd:29:b5:2e:3d:c6:
8c:d0:dd:81:0e:76:39:71:00:33:1c:f8:0f:0c:24:
02:7d:7d:fe:39:38:c4:85:62:57:f4:37:9a:a7:c8:
9b:b4:47:ce:31:8f:79:57:ea:0f:13:e2:e6:8f:f8:
ac:39:25:bd:bf:72:ed:8a:dd:0e:15:fe:a0:16:88:
8c:ab:4f:45:cb:8b:f1:fd:18:b0:66:8a:e2:e1:1f:
ad:94:87:2c:89:6c:bf:f6:30:91:6a:d0:3c:b0:b9:
49:4a:67:32:62:8c:83:0d:6b:60:b6:11:3b:9e:09:
f1:d3:42:00:c3:3f:e4:dc:46:c6:f7:da:b3:22:94:
1d:fd:ae:5e:31:a0:46:49:a8:84:f5:6f:5a:22:62:
d5:2d:1a:84:64:dc:b0:f3:ed:94:68:ba:f8:e8:e3:
4f:7d:d2:9e:b4:c6:e0:eb:0e:fc:06:02:1e:95:f5:
99:0d:c8:38:91:c8:2d:ee:9d:51:ce:a1:9d:41:87:
a9:4a:b7:b3:e6:1c:de:62:bf:2a:a9:cb:f3:04:c6:
1e:3c:ac:f5:34:77:77:46:ed:37:1d:78:dd:af:0a:
69:d0:6b:ff:25:63:26:28:6f:1c:5d:e2:a4:b7:05:
61:25:b9:e8:9b:2a:e5:c4:03:2f:75:35:73:b3:fd:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D1:26:EF:04:8C:94:BD:4E:BA:92:D0:DD:82:84:8C:47:65:BE:AF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DdEm7wSMlL1OupLQ3YKEjEdlvq8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.112.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:be:ac:e9:ce:e1:15:52:3a:5e:b6:72:60:f1:e8:c2:a3:01:
16:c7:9e:26:7c:3d:08:80:d7:47:83:00:60:84:c0:ab:3f:36:
66:cf:dc:66:db:89:ff:07:e1:1d:fb:8e:4c:c8:1c:f3:8e:03:
79:bb:58:bf:bc:a8:6e:14:20:3a:f7:e8:d4:8a:fe:74:cc:66:
54:cb:ff:48:3e:54:36:c7:d1:e3:4d:9b:93:8d:68:c0:da:8f:
23:c5:f5:b7:d9:d0:c5:ca:79:b8:96:e9:39:c4:3f:6a:7e:ba:
85:53:42:e6:46:db:33:01:c6:f9:59:7b:89:2d:96:3e:f2:78:
ea:cd:16:dc:cd:de:d1:df:61:9a:7d:ca:22:e7:fc:bf:78:7f:
65:9e:3c:5b:df:78:69:6a:c2:4b:81:92:d4:3f:ce:c7:01:70:
b6:41:50:92:38:3a:f9:66:00:8c:5a:ec:b9:69:f0:d0:32:f8:
66:ad:54:10:d0:5a:52:80:29:1e:02:b1:33:dd:5a:7c:7a:58:
f9:5c:78:20:55:f9:b7:0c:0d:80:8b:23:0b:4d:4e:41:40:c6:
45:5a:5c:2c:75:60:e4:be:38:ba:3f:e6:74:fc:b5:84:d0:9b:
b2:d9:e8:cd:29:46:8d:88:d9:73:ad:06:e2:99:f0:64:9a:2d:
04:e2:f2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org