Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G8Lfhhes5ah60eH4fmInLsmyF1M.roa
File: G8Lfhhes5ah60eH4fmInLsmyF1M.roa (raw, json)
Hash identifier: O3sqBUiUQtprOjMTO2jiizDtJtlV1q795GSJRg/mQOU=
Subject key identifier: 1B:C2:DF:86:17:AC:E5:A8:7A:D1:E1:F8:7E:62:27:2E:C9:B2:17:53
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10EB
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G8Lfhhes5ah60eH4fmInLsmyF1M.roa
Signing time: Sun 07 Feb 2021 12:49:43 +0000
ROA not before: Sun 07 Feb 2021 12:49:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 123.0.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4331 (0x10eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:49:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1BC2DF8617ACE5A87AD1E1F87E62272EC9B21753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:f5:24:d0:21:98:5b:bc:a0:8c:ef:db:6a:
28:ed:d6:4d:50:24:f7:ed:25:18:d7:3e:d1:28:b0:
a0:4c:58:47:35:86:63:9c:70:85:d5:e2:a5:7f:03:
59:22:24:b5:a3:6a:3d:0a:2c:15:d8:9f:08:87:4c:
19:0b:70:a3:3e:16:63:38:de:18:92:eb:74:16:49:
2b:3d:b7:35:49:03:cb:0f:82:ed:c0:76:5a:53:48:
dc:53:7e:4b:f1:93:ee:88:8d:7b:ec:da:f8:db:fb:
1d:f3:39:af:57:86:ce:8d:f5:4c:d4:87:18:ad:43:
e7:c5:23:7c:b5:93:8a:3d:22:7c:6f:67:b9:6a:c9:
92:5c:b1:71:13:3d:a3:66:fc:e2:5d:81:8b:43:02:
c5:fe:47:66:75:26:ce:b5:1e:30:23:90:90:0d:fb:
d2:cd:10:a9:38:5b:c4:04:cc:87:41:c3:40:7e:75:
ff:cd:f8:bf:96:1b:b6:e6:90:5b:8e:62:88:8c:38:
a0:7b:b3:95:3b:a1:bd:ab:e1:26:d6:58:59:52:c8:
aa:21:aa:2d:56:07:23:10:65:3e:52:39:c7:cd:d8:
f8:1c:10:fd:3b:8f:eb:91:59:7f:e4:3e:5a:24:d2:
0b:02:eb:30:a6:44:89:ad:6c:00:fd:15:1c:21:41:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C2:DF:86:17:AC:E5:A8:7A:D1:E1:F8:7E:62:27:2E:C9:B2:17:53
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G8Lfhhes5ah60eH4fmInLsmyF1M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.32.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:aa:2d:f0:b7:47:0a:f5:26:03:fd:87:61:ac:3f:53:55:c5:
14:2a:90:5e:fc:66:74:4e:5f:5a:12:4d:97:ea:3f:22:98:f7:
9e:70:dd:f9:16:43:e0:35:a8:4d:ce:43:4d:b4:52:47:14:8b:
b5:ea:bb:8c:50:f7:8e:e9:d9:fe:a0:41:f9:e4:9c:de:15:c7:
28:00:fb:cd:19:be:0c:25:5d:21:a7:fb:a0:4f:7a:c9:8a:28:
ee:28:58:0b:24:df:1b:22:12:66:e5:91:ce:83:55:90:a8:23:
a1:17:26:bd:7b:25:9a:a2:c1:88:7a:b8:39:a2:7c:88:d0:cd:
02:59:3f:0e:77:ec:3d:8b:15:03:39:c3:e3:c7:1c:3e:75:c9:
48:5f:e0:73:b4:c3:e3:2a:1a:92:43:9d:00:2c:0c:9f:69:69:
fb:51:74:ea:49:50:99:d5:0e:40:31:01:82:18:e2:3b:cb:96:
24:af:f1:3b:99:41:22:6c:11:7d:f6:3a:71:dc:96:d7:8b:fa:
31:5b:00:d3:ba:5f:fc:72:60:b7:c6:e2:55:2b:0e:68:0e:60:
5b:42:2e:cb:02:da:07:1e:ad:fc:7b:84:48:e9:15:93:f2:63:
43:16:f6:0c:1d:0a:74:f4:c8:9f:4e:d3:99:16:f5:44:79:27:
21:6f:a5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org