Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HRPPlqd5mIXbUBbVzz9VIP1CMmM.roa
File: HRPPlqd5mIXbUBbVzz9VIP1CMmM.roa (raw, json)
Hash identifier: y0+MP2z8Rc/fLFhDiuZ/h/MKNWwfRYtY9SSks/yyM8U=
Subject key identifier: 1D:13:CF:96:A7:79:98:85:DB:50:16:D5:CF:3F:55:20:FD:42:32:63
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AAD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HRPPlqd5mIXbUBbVzz9VIP1CMmM.roa
Signing time: Tue 29 Sep 2020 10:07:29 +0000
ROA not before: Tue 29 Sep 2020 10:07:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 211.76.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2733 (0xaad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:29 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1D13CF96A7799885DB5016D5CF3F5520FD423263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:29:4a:85:8e:37:e8:f0:f1:5d:17:b4:30:
96:36:99:c4:21:bf:69:50:e9:85:df:bb:cd:07:1c:
5e:b1:90:34:ac:31:53:34:b7:64:50:8a:df:51:ca:
38:15:2d:8c:aa:aa:ea:44:26:17:ce:37:15:e6:0c:
d6:33:ba:7a:5f:c0:2a:62:bb:fd:50:c6:6c:66:9e:
e7:fd:9e:de:bc:5b:2f:58:9c:e5:92:ef:a0:5c:83:
fe:20:d8:93:0c:a2:20:4f:98:d6:a4:7c:0c:85:f1:
d4:7e:33:14:58:21:69:77:86:3c:9a:67:8b:7f:1d:
78:eb:de:92:8c:56:ae:2b:f2:9d:4d:75:2c:ee:3b:
ae:86:45:23:f9:a5:16:2b:02:01:b9:d3:97:04:4e:
3f:3a:e4:94:2c:ce:bd:38:99:ba:c8:e2:4b:f8:55:
14:59:a1:bd:ec:0a:de:ad:9c:ad:d6:f3:db:06:92:
58:88:69:d9:99:94:81:7a:a1:2e:50:ad:91:e5:ce:
6e:aa:ec:e2:c7:91:57:34:35:21:34:c8:17:53:d6:
78:c3:d3:e0:d5:ec:04:91:80:52:41:98:5b:fe:17:
8b:ce:73:85:28:dd:69:50:66:c0:9e:78:82:66:4c:
25:61:7e:40:2f:f5:e6:dc:64:a6:b8:c6:30:7e:14:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:13:CF:96:A7:79:98:85:DB:50:16:D5:CF:3F:55:20:FD:42:32:63
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HRPPlqd5mIXbUBbVzz9VIP1CMmM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.62.0/24
Signature Algorithm: sha256WithRSAEncryption
22:c5:ef:fe:d4:39:76:ea:7f:b2:a1:d3:0f:0c:27:8e:4b:2a:
03:89:cb:17:37:d0:c1:71:50:b2:fc:00:ae:d5:d8:49:1b:d3:
ed:ba:ea:3a:7f:ef:70:43:b2:37:76:b5:c2:8d:da:0e:47:6f:
25:fa:52:b0:4d:1c:44:b3:d6:bc:e7:4d:ad:18:f4:4c:59:3f:
2a:b6:d4:f2:f0:c0:36:a5:04:18:4e:78:fe:08:72:c5:08:81:
41:82:00:b7:8c:54:45:ba:5a:da:f3:08:6d:b2:ca:9e:3a:78:
79:42:42:5f:9c:af:64:0d:4e:d4:f6:9f:3a:a7:de:35:73:55:
d2:a2:ac:0b:a7:08:c4:00:51:db:95:b5:b1:1c:9f:25:9b:a5:
49:0c:77:e0:5b:89:53:f0:5f:04:44:fa:81:d7:12:4e:07:38:
1c:7e:7d:5d:c4:a7:fa:03:4b:dd:20:8b:9e:cf:b4:7c:73:2c:
7f:ec:cd:6c:2d:b3:00:5c:a9:dd:0c:55:d8:dc:d2:61:e0:23:
59:76:7c:0e:f5:fd:a5:15:38:a0:04:eb:33:ba:8c:36:45:b8:
f6:c6:93:10:0e:6f:03:8a:20:2e:aa:c1:75:d4:e5:60:6d:d4:
38:55:14:02:d6:e5:57:6a:c2:5e:a3:bf:e6:38:86:7d:d7:e1:
4a:5f:46:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:01 2025 by rpki-client