Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J_zT24doS2KbJAWEGcoiuGKxASU.roa
File: J_zT24doS2KbJAWEGcoiuGKxASU.roa (raw, json)
Hash identifier: CaWsQvKtR28zAA7jDgfVrnEpQ5n0C+Mqsdnte7qso8o=
Subject key identifier: 27:FC:D3:DB:87:68:4B:62:9B:24:05:84:19:CA:22:B8:62:B1:01:25
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1268
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J_zT24doS2KbJAWEGcoiuGKxASU.roa
Signing time: Wed 29 Sep 2021 02:54:31 +0000
ROA not before: Wed 29 Sep 2021 02:54:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 211.76.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4712 (0x1268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=27FCD3DB87684B629B24058419CA22B862B10125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:32:56:fb:38:7a:fb:a5:cc:01:38:78:b6:4d:
3a:4f:7d:23:a2:66:5f:b8:b7:ee:64:a1:f9:14:7d:
4b:e2:80:b8:a7:88:4e:e8:f4:17:64:cc:94:55:75:
cd:07:3a:fe:88:8c:af:fd:ed:c2:5e:29:c7:d1:13:
c0:5f:96:23:80:f9:18:b5:ec:55:29:b0:ba:2a:c3:
5a:f2:b1:f3:53:2e:3c:92:c0:ed:1e:05:d1:12:d8:
40:54:95:11:f8:f6:5f:58:76:3a:8a:b0:ba:77:f7:
53:d6:6d:21:fb:d9:22:a9:a0:4d:ac:31:74:d2:2a:
bd:5c:d4:76:85:45:d2:d8:0f:33:80:f0:44:ea:56:
8b:07:d6:d3:d0:08:39:4e:ce:36:e0:36:49:ff:d6:
f1:9d:a6:50:8b:e5:b8:84:23:52:df:8c:08:a3:3b:
ab:95:71:74:b6:6e:40:da:61:0b:f7:dd:c4:ab:7c:
6a:98:76:ef:1c:23:7a:1d:5d:98:e4:6b:f2:e7:17:
24:8b:3a:e8:0f:f5:45:67:09:a1:0b:9f:ea:3a:aa:
7e:45:60:c3:01:a9:f1:d4:79:a1:59:f1:30:c0:96:
d4:55:90:64:bc:82:e8:d2:97:a8:41:7f:da:78:72:
c3:2e:b9:c1:d4:02:42:a2:51:48:c4:ee:ba:5a:8e:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FC:D3:DB:87:68:4B:62:9B:24:05:84:19:CA:22:B8:62:B1:01:25
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/J_zT24doS2KbJAWEGcoiuGKxASU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:1a:03:68:4c:29:70:5a:d7:e8:7a:95:93:1f:3b:f7:15:9a:
c4:bc:cf:c8:1a:31:08:02:04:0d:d9:3f:52:1f:12:91:dd:a3:
be:16:f4:5f:4f:68:22:15:b8:69:57:41:3f:86:27:5a:e8:7f:
fd:3c:57:85:1a:16:16:06:5e:37:37:31:b5:16:89:bb:78:e2:
30:bf:fc:21:1b:94:77:e4:fb:ed:7e:68:44:28:4e:48:84:c6:
23:db:2a:87:8c:89:81:cb:e5:39:ac:d7:ea:54:47:8a:30:03:
a8:97:23:5d:1d:70:a1:ad:f3:3d:76:33:08:ac:d2:89:ae:52:
11:67:27:f0:49:2b:0d:3c:3f:fa:be:c7:cf:57:38:9f:e3:a0:
7a:a6:d8:44:95:b5:54:13:78:fd:ec:c9:82:96:31:b2:60:2a:
7d:25:7b:5e:7c:59:c6:cc:7c:0c:09:06:04:93:32:44:72:b5:
ad:d3:ec:95:d7:2e:47:a2:2a:83:d6:36:44:5b:9d:4e:18:73:
03:0d:89:34:93:cf:b7:fa:cf:67:ff:ed:f7:0d:15:89:cc:84:
db:e4:f8:aa:65:29:9a:97:60:1d:18:a5:16:0a:16:73:c5:fd:
bd:cd:95:57:ce:ac:74:99:22:01:d8:4d:fd:22:27:0d:b2:6c:
55:ba:7d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:35 2023 by rpki-client on console-ams.rpki-client.org