Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JoFxf2NgSLfYVcxeVr8ukRqtdzE.roa
File: JoFxf2NgSLfYVcxeVr8ukRqtdzE.roa (raw, json)
Hash identifier: VjFRAig6F+f04PZ4DXeixe1o5mY7UKy2WjbT1BM6Vkc=
Subject key identifier: 26:81:71:7F:63:60:48:B7:D8:55:CC:5E:56:BF:2E:91:1A:AD:77:31
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1025
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JoFxf2NgSLfYVcxeVr8ukRqtdzE.roa
Signing time: Sun 07 Feb 2021 12:37:50 +0000
ROA not before: Sun 07 Feb 2021 12:37:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.61.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4133 (0x1025)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:37:50 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2681717F636048B7D855CC5E56BF2E911AAD7731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:46:bc:49:88:b4:ee:1d:ce:8e:d3:5d:46:
2b:0a:d4:32:1d:26:6f:ff:d3:1f:c8:8e:a7:1e:7f:
7b:6e:1e:5b:5a:79:1f:bc:8b:22:a0:af:c7:34:86:
9a:b6:e4:2c:49:4d:89:68:4b:12:23:be:a8:bf:ee:
e2:1d:32:70:b8:95:1a:c9:01:18:5f:5c:82:fb:2c:
ec:22:69:c8:33:8a:fb:a0:c4:5d:5a:f6:f3:17:5e:
d9:50:e4:f7:92:15:a7:ce:49:6a:c2:30:44:ee:71:
cd:a5:41:60:86:1c:82:6e:b3:4e:8c:65:62:f2:a4:
eb:ef:6f:77:2b:4d:c2:70:6a:13:3c:66:07:46:2b:
d2:a9:7c:85:03:69:f7:d6:15:10:0c:da:d5:49:26:
2e:64:7d:93:17:d4:ee:ce:da:5e:3b:15:e0:41:d7:
d6:0e:fa:b2:04:87:55:3c:09:d2:32:74:2b:14:43:
79:09:d1:4d:b1:b6:13:b3:6d:b4:33:5f:64:f7:fb:
9a:5d:44:41:95:41:47:af:79:20:9f:e8:b7:8b:24:
9e:0f:df:bc:11:06:9a:f5:ef:ce:2f:03:40:3d:4e:
06:c2:65:04:2e:de:fe:18:0e:26:ab:f5:59:0b:c9:
ac:38:b7:2d:86:34:3c:c0:f1:b8:fe:21:31:3b:38:
82:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:81:71:7F:63:60:48:B7:D8:55:CC:5E:56:BF:2E:91:1A:AD:77:31
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JoFxf2NgSLfYVcxeVr8ukRqtdzE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.236.0/22
Signature Algorithm: sha256WithRSAEncryption
78:f4:7d:b7:78:43:9e:83:8d:2f:a7:1b:01:97:87:cf:af:12:
e3:0c:15:8c:f4:21:02:f8:ea:11:fb:5b:8b:67:95:2b:1d:0b:
7c:fb:6a:c5:b9:94:ea:78:45:fa:63:20:3c:66:98:21:e0:6a:
3e:12:b6:c1:f4:30:a7:8a:ff:40:3a:b6:2c:d1:18:91:b8:8b:
5a:9d:36:da:c9:e6:e5:d4:9e:ab:0f:2a:e0:06:ff:78:28:f3:
b7:08:e8:ef:d4:22:a3:d5:aa:3c:17:10:dc:b3:07:d1:07:7f:
6a:49:6b:33:a3:5d:0d:be:04:a2:40:7f:a2:21:f1:c1:70:ee:
fc:82:9d:7c:14:be:79:2a:db:ed:a3:49:4c:19:aa:91:c6:1f:
f3:67:d8:46:b6:4f:7b:fa:c1:7f:aa:b0:e2:47:d9:4c:6c:c2:
73:fc:c8:ca:29:9e:41:85:a0:ef:3a:a3:fe:20:c9:07:75:36:
0b:f4:09:d9:f6:5f:89:19:4a:77:de:7d:86:ec:04:05:a6:93:
fc:e5:df:10:6b:98:6c:62:bd:b0:2a:1f:c7:62:34:60:2c:37:
27:6a:2d:62:1e:4e:d8:00:02:b0:fb:e9:fd:41:52:6c:39:6b:
32:9f:04:5d:e9:13:d6:92:1c:05:1f:aa:42:da:29:90:d9:16:
74:ba:12:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:47 2023 by rpki-client on console-fra.rpki-client.org