Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jj_Cd4m_CkJKTDaKkLmBOcsVk4E.roa
File: Jj_Cd4m_CkJKTDaKkLmBOcsVk4E.roa (raw, json)
Hash identifier: Q85htoG7fsc17g410ONMol4xpKU+P7MpmTb27AJjtkw=
Subject key identifier: 26:3F:C2:77:89:BF:0A:42:4A:4C:36:8A:90:B9:81:39:CB:15:93:81
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1023
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jj_Cd4m_CkJKTDaKkLmBOcsVk4E.roa
Signing time: Sun 07 Feb 2021 12:37:48 +0000
ROA not before: Sun 07 Feb 2021 12:37:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.61.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4131 (0x1023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:37:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=263FC27789BF0A424A4C368A90B98139CB159381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:47:61:74:f4:12:6d:83:8b:1c:c4:0a:6e:
f6:5b:ee:2e:8d:a1:16:b3:ca:95:f1:b9:8c:d8:25:
13:89:f9:71:a3:57:2c:ec:bb:79:80:74:c3:59:08:
75:9f:09:4b:5c:6b:81:ff:ae:94:8c:5f:7c:73:3d:
32:8b:00:f1:6e:14:de:c4:77:f5:68:1f:fb:8d:6b:
67:5f:2c:17:90:02:bb:06:e5:d5:d3:1b:87:01:2c:
30:2f:ad:f2:8f:72:ad:4c:1f:d0:91:83:7c:d3:de:
8d:32:f4:e0:5b:6e:5b:96:96:98:d1:16:b8:3d:14:
d7:b8:ce:f5:af:30:46:9c:9f:87:08:1d:40:ef:44:
4e:c7:3c:33:68:5d:47:68:b7:d3:86:7b:ad:58:ee:
03:44:73:b4:ba:49:62:1c:03:00:58:b0:a0:bf:90:
bb:60:46:23:f2:49:a4:8c:3e:08:8f:e3:38:4a:34:
5a:18:f8:98:73:a8:82:b5:1f:3d:ed:92:95:1b:e0:
64:46:bf:57:2d:c8:e5:71:de:7f:eb:d8:c2:47:29:
25:8c:25:16:0e:ec:ff:fc:d1:98:b7:b0:36:8f:1f:
a2:36:f5:c0:03:2e:8b:ba:68:13:e0:86:52:5a:30:
cb:ad:2b:c3:4d:b2:2c:62:58:fd:da:d8:14:c1:1e:
2c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3F:C2:77:89:BF:0A:42:4A:4C:36:8A:90:B9:81:39:CB:15:93:81
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jj_Cd4m_CkJKTDaKkLmBOcsVk4E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.224.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:5c:98:cc:95:b0:2c:b8:64:76:1a:af:f3:93:d9:77:5e:9c:
84:fc:bd:6a:d0:dc:cc:3f:7b:80:a6:eb:05:49:c0:86:73:c4:
a2:5f:9e:51:58:a6:b7:d1:42:3a:4d:53:df:42:24:ca:5e:d6:
05:92:2c:f5:3e:22:24:5f:7d:a3:64:46:b2:52:5e:00:cb:59:
7c:46:72:b3:70:31:f8:d3:81:c1:67:a4:2a:cf:4f:24:3f:0c:
0e:dd:3c:9a:40:00:ad:1a:4c:c4:6f:bf:81:96:b0:e1:50:3e:
e6:12:41:df:66:e0:31:28:b8:44:8b:d5:7c:02:1f:ad:2d:46:
53:a5:7c:ae:d3:c2:d6:0b:62:72:d4:cf:3d:07:ad:8b:73:df:
c1:b2:bc:c5:63:6f:02:d6:9e:bc:5d:43:0e:ad:42:5e:92:59:
a7:ff:8c:da:31:89:1e:63:ed:fe:4d:8a:3e:9e:6e:cd:7e:6c:
b8:7e:08:ea:a0:39:52:58:af:1c:01:3c:03:a5:69:d0:62:79:
f0:d1:c2:12:f7:b5:41:cc:56:5c:a3:bd:65:9b:58:3d:68:af:
85:6c:f2:f0:3b:c5:5b:3f:c9:5b:1b:f3:c4:c5:51:ad:17:c1:
af:6f:15:b2:a2:d7:09:f5:36:49:07:f3:9a:7e:74:15:94:5d:
a3:09:24:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:35 2023 by rpki-client on console-ams.rpki-client.org