Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G1nFcnXY0a9I9BBQ0BgUh5eEs_U.roa
File: G1nFcnXY0a9I9BBQ0BgUh5eEs_U.roa (raw, json)
Hash identifier: CavAqJDcZzFwGuhoJXSdugM30JnKZL7sv1mzstoGrKA=
Subject key identifier: 1B:59:C5:72:75:D8:D1:AF:48:F4:10:50:D0:18:14:87:97:84:B3:F5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G1nFcnXY0a9I9BBQ0BgUh5eEs_U.roa
Signing time: Thu 15 Sep 2022 02:36:33 +0000
ROA not before: Thu 15 Sep 2022 02:36:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.56.176.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1B59C57275D8D1AF48F41050D01814879784B3F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f0:ab:6e:c4:6f:c3:51:65:4a:1e:54:d8:98:
fa:d5:de:69:87:73:b8:96:71:0b:fa:1a:5e:b9:87:
a4:d5:14:ce:6a:09:3a:05:60:30:03:15:e9:43:51:
ab:13:0a:4f:ac:03:43:54:14:e2:0c:10:92:08:95:
ad:7a:eb:0c:66:d6:63:c1:9b:87:50:64:23:a2:9f:
bd:5d:67:a5:f8:47:66:71:cb:d0:76:e2:97:a2:2e:
02:9c:fb:68:0b:a1:66:3b:8a:57:27:f9:cf:46:d7:
2e:a7:01:e6:03:36:e3:c5:1e:af:94:c8:fe:4f:26:
80:2e:24:33:88:dd:db:52:51:3f:32:c0:ff:84:2d:
58:d1:3f:6b:55:af:20:e1:fb:30:95:69:cd:c9:db:
bf:ac:11:69:e8:4c:37:e1:63:91:77:58:55:d1:47:
f7:ac:c2:f5:90:97:7a:76:df:0f:92:7a:d1:ac:33:
8c:fa:73:d1:25:e5:0c:c7:ed:85:13:6e:a3:de:c9:
f5:7a:42:67:65:8d:72:c1:36:db:77:97:c7:fb:71:
d9:09:16:09:88:29:1e:76:63:54:55:8e:a2:e5:01:
6e:20:20:9f:e2:94:aa:2e:30:99:85:83:c4:50:c5:
8c:fb:cf:f6:d5:02:4c:83:34:2a:0e:88:e0:49:b1:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:59:C5:72:75:D8:D1:AF:48:F4:10:50:D0:18:14:87:97:84:B3:F5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G1nFcnXY0a9I9BBQ0BgUh5eEs_U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.176.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:86:f4:ba:9f:48:aa:4f:4a:d8:e2:9c:27:f9:7d:ea:0d:d0:
31:87:c6:34:ee:e5:1e:11:bc:0d:f4:4c:97:b9:04:6c:42:d0:
e2:71:b1:2e:fb:f6:ab:c1:db:72:b9:54:28:2a:2b:37:7c:dc:
25:ab:b4:fe:a6:06:cf:6b:bb:b4:9e:57:85:22:c9:fa:6d:76:
60:c8:14:00:16:eb:7e:ca:10:dd:7c:af:2c:d8:56:cb:ab:13:
f0:4c:e7:d3:f4:4c:a4:e5:6a:5b:c9:de:4c:bf:ae:7d:f0:31:
ee:68:fd:e6:37:3d:dd:38:0d:5d:7c:01:82:5b:f5:ad:19:2a:
a6:71:f5:88:ad:07:84:24:84:20:0c:15:7c:45:44:9f:3b:17:
9d:b7:70:90:77:a2:34:c4:4c:13:1c:29:72:1d:5e:ed:e6:d9:
71:c9:57:c2:0a:9a:39:bf:e7:eb:47:4f:68:17:51:83:b9:b7:
4a:66:a2:26:f6:39:d5:0e:8b:66:13:9b:d2:91:b4:02:15:cf:
40:a6:ad:31:2c:d6:79:6d:87:69:9c:a5:f1:34:76:0c:a4:e4:
0d:5e:7f:10:3d:d7:0f:5a:34:ec:a8:7c:24:e3:8c:3d:79:35:
2d:56:d8:c0:7d:d4:9b:e5:9e:ab:77:7a:95:aa:97:1d:d4:8b:
3e:b8:00:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org