Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NSEKZ29PHlqHyJQ_JpBMTQqf4yY.roa
File: NSEKZ29PHlqHyJQ_JpBMTQqf4yY.roa (raw, json)
Hash identifier: x0LA5M0YsziRHqCEFibZiRIVdS/R/uNerc1/3RdhLi0=
Subject key identifier: 35:21:0A:67:6F:4F:1E:5A:87:C8:94:3F:26:90:4C:4D:0A:9F:E3:26
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NSEKZ29PHlqHyJQ_JpBMTQqf4yY.roa
Signing time: Thu 15 Sep 2022 02:35:42 +0000
ROA not before: Thu 15 Sep 2022 02:35:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 61.64.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=35210A676F4F1E5A87C8943F26904C4D0A9FE326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:1e:e5:7a:73:21:71:74:69:9d:ed:bf:89:
bb:68:36:ad:ba:e9:71:58:aa:68:61:bd:b0:c9:b5:
7f:ab:b1:04:14:35:c7:51:09:75:03:68:ea:2d:57:
0e:34:9d:13:ec:67:24:12:37:78:22:dc:05:45:56:
4d:66:45:9d:d1:9c:7c:6a:38:fb:0e:7e:5c:a6:ce:
de:4f:c7:59:bd:12:74:8e:6c:8b:3a:ee:74:99:4b:
36:93:c2:28:4a:2e:3d:03:45:86:dd:fc:4f:88:64:
3a:0b:3a:06:0e:01:d8:3f:7a:67:71:96:95:85:67:
68:18:89:eb:1b:64:9d:ef:f5:70:48:3f:09:b3:ec:
05:85:9b:23:f3:60:1d:5f:06:b9:b3:ae:04:30:31:
97:4d:80:15:9a:76:13:a8:23:e2:6f:5b:fe:34:13:
11:8a:0c:ec:c1:72:a6:30:a8:f5:e3:f6:3b:bc:ac:
c1:0a:fa:6e:35:91:51:2d:c0:a8:44:de:ee:9c:3a:
fd:c3:5e:dd:90:c2:9d:64:4d:bf:60:89:a0:2d:f7:
f7:f4:c0:9c:43:9c:6d:91:28:ec:9f:d9:79:19:1a:
17:42:c5:0c:60:43:ae:fc:7d:99:ee:b3:53:f9:05:
d4:9b:7c:82:90:7a:8a:ad:c3:24:8d:74:f2:4d:50:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:21:0A:67:6F:4F:1E:5A:87:C8:94:3F:26:90:4C:4D:0A:9F:E3:26
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NSEKZ29PHlqHyJQ_JpBMTQqf4yY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.0.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:ca:3c:28:b2:bc:a8:e3:a1:94:9d:fb:2c:d5:c0:1c:18:e3:
19:19:09:67:6d:96:6d:20:55:b6:b8:7b:99:db:a0:f2:b5:df:
8a:61:be:8b:da:64:9f:c0:7b:51:b4:8d:cf:2c:fd:97:6a:fe:
7e:f0:f8:e6:6b:c5:87:1a:96:ea:12:87:2b:80:5d:07:37:79:
0f:bd:b6:d4:14:42:92:66:52:4a:1f:b0:f5:21:a0:57:e5:69:
92:c3:4b:ee:a6:e4:36:9c:1c:05:4c:d3:b0:9c:0f:45:ae:6d:
40:37:ba:7d:36:5f:c9:bc:9a:57:aa:05:3e:df:a4:b4:2b:d7:
5e:a8:94:d1:5a:f1:81:da:75:39:f5:74:cb:34:a6:d4:b4:fa:
1d:82:8c:f9:71:e5:96:62:12:fa:57:33:67:63:3f:6f:04:09:
fa:08:7c:db:9a:31:a7:2b:82:09:03:9a:3b:d4:38:c6:6e:04:
25:ea:b6:b1:ed:18:69:6c:3a:1b:7c:cd:fa:5e:7a:36:db:db:
d9:74:b6:fe:30:6b:15:85:d8:7e:55:f3:fe:c8:d2:89:22:f2:
b4:3d:8e:86:1d:a2:d9:bb:3a:67:68:e9:f2:3c:3c:5f:28:30:
a4:50:6e:a7:54:00:3a:59:27:8d:81:a0:87:d6:4f:5f:d9:f9:
f6:33:20:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org