Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IGhPOiZbM-I3eRf8L20qrIW2mho.roa
File: IGhPOiZbM-I3eRf8L20qrIW2mho.roa (raw, json)
Hash identifier: /6abEb6E9u3rKfnenezPg7k6ayP7lrP6S9scH9+1dV0=
Subject key identifier: 20:68:4F:3A:26:5B:33:E2:37:79:17:FC:2F:6D:2A:AC:85:B6:9A:1A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B98
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IGhPOiZbM-I3eRf8L20qrIW2mho.roa
Signing time: Tue 29 Sep 2020 10:08:37 +0000
ROA not before: Tue 29 Sep 2020 10:08:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 45.64.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2968 (0xb98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=20684F3A265B33E2377917FC2F6D2AAC85B69A1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1d:da:e4:5f:72:e9:b2:be:a8:b5:23:19:f9:
dd:7f:e1:11:51:99:31:2b:cd:48:27:9d:80:ee:25:
a7:cb:ea:95:69:11:ae:e5:26:08:93:e8:b0:42:f6:
85:c7:00:00:e5:35:a5:bb:f3:f7:90:e1:9d:2c:15:
9c:c8:28:5e:30:fb:14:8a:a4:0f:85:47:1b:0e:e5:
54:01:a4:31:27:ce:b4:29:b0:a2:21:fc:c9:96:03:
0f:de:07:27:17:30:b9:20:cb:7c:6c:a2:ff:92:84:
15:cc:fb:cb:9e:63:77:c9:8d:8e:1a:42:e2:cd:8a:
4a:14:5d:d5:b4:18:77:92:f2:53:e5:f7:07:57:bd:
08:a2:2f:a6:a1:12:95:95:53:05:5d:28:f9:ae:a1:
35:af:78:2a:38:40:e4:8e:58:57:09:eb:b4:fa:51:
a5:bb:d3:5f:df:f0:ba:dc:ba:5c:e1:4b:ac:58:f5:
4e:43:0f:dc:fd:4e:aa:0c:04:50:6c:29:91:6e:54:
32:80:ae:83:e1:65:25:c7:17:e3:5f:95:b9:3b:f8:
91:fe:8f:bd:8d:5d:99:ef:4e:dd:67:d5:21:c9:ca:
4a:aa:b3:dd:af:77:4e:a5:a0:53:e7:2a:5c:06:7b:
4a:14:be:e5:9d:84:84:2a:01:5c:e8:2d:47:6f:ee:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:68:4F:3A:26:5B:33:E2:37:79:17:FC:2F:6D:2A:AC:85:B6:9A:1A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IGhPOiZbM-I3eRf8L20qrIW2mho.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.35.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:da:73:78:33:c5:04:f2:e6:fb:77:e9:f1:6d:0b:a2:99:cb:
1c:75:2a:dd:7c:47:52:bf:61:06:30:3e:1a:9e:5e:8c:43:a5:
f5:4f:86:57:56:fc:a7:e0:ca:95:82:0e:26:ff:69:91:da:a1:
0e:18:6b:80:21:34:35:49:06:b7:e8:d4:8e:21:47:ae:b4:44:
b5:e3:10:79:47:00:a6:3d:0d:44:85:d4:d5:22:19:94:37:f5:
0a:53:95:b3:0e:38:c6:a5:e2:fb:03:9e:6d:a8:18:90:5b:61:
fa:29:5a:77:cf:3c:7e:d3:72:d4:f6:e4:f6:98:e9:85:eb:95:
ee:32:d7:2b:b7:04:9c:ea:21:c6:88:df:61:ce:6f:8b:49:30:
c5:e2:6e:9f:01:40:63:83:85:ad:5f:2f:22:58:f0:93:7d:83:
38:4f:07:85:e9:f9:6c:a3:b4:45:0f:9a:fe:3c:ea:77:52:b2:
30:52:fc:18:91:e2:6e:84:1a:22:bf:b6:e0:4d:5e:52:09:93:
41:d8:a1:38:d6:a4:bc:8d:03:e3:85:e5:6a:05:16:ef:14:4e:
2e:12:98:75:37:f1:e1:81:ab:4a:a9:9b:6b:fa:09:7e:1f:a9:
e2:58:6b:b6:b2:ad:93:4e:7e:fe:4c:6c:d5:cf:4f:7d:c5:61:
d4:b1:76:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org