Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Fj7BgS6CF0z0Fkwy14SBHL5zmng.roa
File: Fj7BgS6CF0z0Fkwy14SBHL5zmng.roa (raw, json)
Hash identifier: 3yGfU0SRf4IdK9P9rm/Zrc+6xXVcUY+yN8gusHmhI2g=
Subject key identifier: 16:3E:C1:81:2E:82:17:4C:F4:16:4C:32:D7:84:81:1C:BE:73:9A:78
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1F3F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Fj7BgS6CF0z0Fkwy14SBHL5zmng.roa
Signing time: Tue 30 Jan 2024 08:59:46 +0000
ROA not before: Tue 30 Jan 2024 08:59:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.58.96.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7999 (0x1f3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 30 08:59:46 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=163EC1812E82174CF4164C32D784811CBE739A78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:84:5b:4d:1e:3c:06:fa:41:bf:9f:00:65:5b:
8f:31:f9:29:7a:de:97:b6:09:7c:0e:0c:b2:e9:ac:
8f:e6:b6:62:35:a7:9f:47:17:56:e8:cc:72:31:5d:
10:16:48:12:f7:4c:51:68:ba:7b:17:48:a4:f5:fa:
8f:85:a7:2f:d9:42:cb:61:62:99:bf:17:ce:b0:ac:
02:f6:69:ea:a5:30:57:f2:d3:35:5b:0f:8d:e4:62:
8b:bb:12:93:3a:c6:91:9e:89:57:50:a1:f4:24:d4:
51:9b:38:c2:d7:05:b8:ec:b9:ac:81:0d:07:1a:f8:
be:83:b6:f0:79:e9:93:fd:f6:61:8b:0c:35:ec:b7:
af:7c:fd:33:5c:ce:b1:7d:98:a3:d8:bf:18:62:ec:
80:17:4b:1c:5f:80:f7:1c:78:25:74:4a:d1:dd:08:
19:23:d1:31:82:bc:05:a8:98:7f:07:ea:8e:86:db:
f0:26:ad:65:51:81:06:89:fd:28:e1:1e:8e:27:26:
91:6e:db:34:19:7a:ed:ab:2a:84:c7:2f:6e:d0:6c:
36:a3:d7:39:31:af:fd:94:d7:07:a6:e2:26:04:5c:
46:4f:d6:77:b5:ad:d8:a5:df:3e:e7:84:44:e7:82:
94:37:94:30:96:e9:42:2c:e6:bc:3b:9b:8f:99:cd:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3E:C1:81:2E:82:17:4C:F4:16:4C:32:D7:84:81:1C:BE:73:9A:78
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Fj7BgS6CF0z0Fkwy14SBHL5zmng.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.96.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:4e:d4:53:15:fb:ba:7f:f9:4a:3f:e1:5b:7f:c3:da:96:48:
2c:0b:40:3c:ec:a1:46:e7:aa:f8:b1:ea:af:ca:6d:2c:9a:27:
dc:82:f8:82:16:63:85:a5:0b:03:d4:cb:4a:d7:56:42:e6:57:
35:10:b1:b0:aa:84:cd:15:54:78:c2:da:2e:0c:3f:ef:b8:32:
e0:14:49:4b:0e:09:9d:90:21:4b:95:1e:cb:e7:fa:26:ee:8b:
a7:5b:09:59:71:ef:78:b9:39:d5:92:e2:63:05:44:3a:3b:dc:
ae:2c:b8:90:2c:64:03:15:09:ce:20:33:68:52:68:31:a3:b9:
24:0c:cb:dc:d5:de:eb:64:fd:fd:ef:05:5f:e6:48:69:20:7b:
bf:f0:88:99:6e:0d:2b:b8:10:fc:8f:b4:12:9b:98:b6:6f:c7:
93:ea:df:ba:f7:9d:58:8b:d3:46:85:cc:8f:e9:b1:d1:9f:a0:
56:8b:7f:f8:36:14:06:8d:e3:08:4b:8b:ea:de:32:a6:ce:18:
32:b7:26:ab:34:da:54:ba:f0:ba:17:0b:20:08:0f:ea:3f:78:
1a:f5:15:db:6b:db:54:9f:28:01:25:78:0b:f4:5a:2a:b8:e1:
45:2a:62:81:84:82:35:2b:ef:5c:f8:4d:de:95:b4:8e:e8:78:
db:34:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:52:05 2025 by rpki-client