Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N4gntfi4jVZMkwYA-JAa17w06Bk.roa
File: N4gntfi4jVZMkwYA-JAa17w06Bk.roa (raw, json)
Hash identifier: 5Ug86Pf7z9T432agauvz5NyEBe1wI/Gi7Q6FysbPtNY=
Subject key identifier: 37:88:27:B5:F8:B8:8D:56:4C:93:06:00:F8:90:1A:D7:BC:34:E8:19
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10F3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N4gntfi4jVZMkwYA-JAa17w06Bk.roa
Signing time: Sun 07 Feb 2021 12:49:54 +0000
ROA not before: Sun 07 Feb 2021 12:49:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 61.60.214.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4339 (0x10f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:49:54 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=378827B5F8B88D564C930600F8901AD7BC34E819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:62:00:28:05:ed:04:fd:d9:13:a8:0d:d6:6c:
87:a8:52:f5:ff:2d:f6:52:3b:34:b6:b2:a5:ab:f9:
89:33:aa:46:a1:90:da:43:ab:a9:dc:33:fa:96:97:
c3:ee:09:2e:15:01:39:00:fa:19:86:6b:11:a3:8e:
81:81:35:31:56:e9:dd:7c:56:15:48:02:f3:b9:a6:
ba:68:ed:67:51:ee:c2:f0:7f:c3:15:9a:d5:24:36:
9b:c4:2f:2c:0d:58:e4:cb:04:f1:2e:8d:f3:36:82:
89:18:4f:bb:cc:e0:cf:e3:cb:a8:44:e8:08:92:ae:
b2:3e:b4:f0:4a:e0:f8:a5:fb:4d:bc:34:3f:3c:ed:
a1:3a:3a:9b:89:a8:9e:7a:7f:78:36:ee:e8:b4:20:
3b:c0:e9:95:a9:41:cf:97:9f:70:06:6d:21:28:d5:
0b:10:ab:51:4a:30:ce:ed:c7:98:27:f0:ac:61:3e:
3a:16:20:bf:d4:45:b5:5d:a0:1e:7b:87:27:22:74:
7d:f8:4d:b6:04:f2:69:e7:dd:e3:8c:64:c9:f1:ac:
af:14:a4:1d:87:68:7a:e6:7e:76:7c:a0:19:e6:98:
a5:0c:91:63:99:8e:7c:41:83:e2:06:f4:3c:8c:49:
16:a0:77:ec:77:bd:66:05:5a:9e:8e:8e:3e:af:7b:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:88:27:B5:F8:B8:8D:56:4C:93:06:00:F8:90:1A:D7:BC:34:E8:19
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/N4gntfi4jVZMkwYA-JAa17w06Bk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.214.0/23
Signature Algorithm: sha256WithRSAEncryption
37:d5:9b:18:fc:ac:4a:26:f2:46:cd:04:c0:79:4a:47:7e:04:
0d:e4:74:8a:19:c9:8b:6d:ea:cd:31:f6:9a:cf:17:4c:3b:82:
e3:e4:29:ac:c1:09:0c:40:4f:0f:79:b7:ab:3e:13:60:3e:77:
84:7b:21:fd:d6:84:28:00:6c:95:83:b4:1d:dd:1c:c8:d6:79:
21:d7:ee:dc:36:b6:02:a6:cc:5d:8b:db:aa:01:a6:d5:d1:c3:
3c:14:e4:31:6b:b7:4f:ed:10:b0:ec:f1:d5:81:c4:52:59:61:
5f:d4:a9:0e:fa:18:bf:67:43:5a:83:18:17:3a:ce:c6:9c:94:
83:5e:0f:52:fe:bf:0d:53:46:a6:94:2b:bd:17:2b:51:51:7b:
4d:23:c4:1c:9f:a5:1e:ae:7f:5c:bd:a0:0e:d4:84:91:d0:07:
dd:69:24:3b:d6:73:85:5e:fb:58:67:15:88:7f:2a:18:de:2c:
e7:68:60:eb:4f:b4:8c:9a:46:88:72:ae:84:14:55:90:98:fd:
ce:6f:f9:89:bf:e9:23:ee:4e:b3:2e:4c:b4:0c:6e:24:64:03:
ec:89:17:88:31:99:10:47:e2:bf:54:f0:ec:1a:c0:d8:64:93:
5f:b7:3d:48:fc:5c:0b:e1:5b:16:25:b9:71:7b:37:f1:41:08:
6c:8b:ba:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org