Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Li74JuUBVAl2rZF8DDuGK0TfJbo.roa
File: Li74JuUBVAl2rZF8DDuGK0TfJbo.roa (raw, json)
Hash identifier: /JvrHNtX2WuvSnwrO/AKzq3Jc5PgaZW9u3g6U2dmli0=
Subject key identifier: 2E:2E:F8:26:E5:01:54:09:76:AD:91:7C:0C:3B:86:2B:44:DF:25:BA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19FC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Li74JuUBVAl2rZF8DDuGK0TfJbo.roa
Signing time: Sat 22 Oct 2022 06:13:53 +0000
ROA not before: Sat 22 Oct 2022 06:13:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.60.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6652 (0x19fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:13:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2E2EF826E501540976AD917C0C3B862B44DF25BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:42:51:22:eb:35:10:86:e6:04:a1:0f:f3:
6c:2c:9c:b4:ed:52:10:d4:0b:c7:de:63:a5:34:4f:
d6:ca:42:ec:9b:2a:d3:61:ad:b7:43:69:a7:36:cb:
03:8d:b5:1d:be:54:48:87:3f:17:bf:d0:06:dc:ac:
a4:5a:bd:f0:13:99:d3:f0:d6:e2:1d:3a:17:84:fc:
3c:5d:c1:fb:a6:86:d3:a5:39:83:7b:77:f6:a4:4d:
2b:f0:95:fc:11:fe:48:3c:59:fa:f0:d9:a9:ff:44:
cc:dd:30:d2:a5:eb:41:ac:0a:3c:f6:eb:2b:a4:c4:
43:2a:71:dc:3c:99:5b:4c:ff:e8:e8:87:7a:6e:a9:
81:fd:71:77:ce:28:ac:47:55:5b:11:d9:ad:99:f6:
73:64:8f:0e:48:bc:25:fb:12:eb:ec:96:0d:0b:99:
96:52:89:6a:9b:c9:51:2f:c0:3a:13:fb:db:9a:31:
6e:c2:02:f2:11:4b:f6:30:d3:3b:02:24:5c:14:3d:
8e:2c:de:13:1d:82:61:1a:ca:b0:c4:e9:31:d7:0d:
56:e0:dc:0c:2b:2d:3f:ec:45:8b:fd:18:75:28:dc:
ba:f0:09:66:b5:03:83:94:c7:37:d0:29:21:18:e5:
86:f0:8f:94:59:f4:2e:e2:13:58:4c:cf:16:70:08:
5f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2E:F8:26:E5:01:54:09:76:AD:91:7C:0C:3B:86:2B:44:DF:25:BA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Li74JuUBVAl2rZF8DDuGK0TfJbo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.215.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e7:15:78:89:fa:1f:2f:2a:47:7c:4e:b8:15:9f:22:b2:4b:
df:76:1e:7d:99:1c:ad:0e:25:38:b5:83:a2:b9:5f:53:63:d9:
a9:73:45:1b:00:cc:a0:a2:46:a6:33:0c:ac:35:0e:3e:08:70:
0a:f2:f0:33:ab:58:cd:e2:48:e0:50:bf:0c:21:bb:49:9b:30:
20:06:37:43:4a:ae:d8:46:91:0d:15:36:d8:56:ad:c7:32:cb:
d9:d4:80:83:e9:25:e3:de:92:16:a0:97:38:8c:a7:b0:de:19:
f8:a9:5a:6c:63:c7:93:85:6e:d4:71:17:1b:00:b5:27:1c:37:
2f:a7:df:6b:f9:fc:65:5a:66:a7:69:2a:00:c2:b9:c0:f9:67:
e5:59:25:99:af:da:bc:17:c3:58:3e:13:45:20:f6:d0:05:ce:
aa:7c:d8:fc:44:cd:81:69:59:ed:78:16:25:dd:ce:1f:e6:7b:
95:75:39:1d:f8:81:6f:2e:0b:3e:0f:7b:e4:fc:69:02:19:55:
ea:88:21:35:4a:5b:5c:31:c7:ea:e5:1f:1d:c5:36:8c:b7:d0:
c5:4a:e0:68:96:f4:38:cd:d3:65:f8:89:04:8d:b9:cf:46:18:
2e:b4:2e:2c:7b:39:8d:70:3f:35:ce:65:06:ef:50:22:62:6d:
5c:d5:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org