Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NSfa2bY98-e_Zv72JU63GZTs2dY.roa
File: NSfa2bY98-e_Zv72JU63GZTs2dY.roa (raw, json)
Hash identifier: kVnCbNGVcdezhHA8IAQC1Vx9Ma7PROoehz9P/zDmXaY=
Subject key identifier: 35:27:DA:D9:B6:3D:F3:E7:BF:66:FE:F6:25:4E:B7:19:94:EC:D9:D6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NSfa2bY98-e_Zv72JU63GZTs2dY.roa
Signing time: Thu 15 Sep 2022 02:35:52 +0000
ROA not before: Thu 15 Sep 2022 02:35:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 211.76.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3527DAD9B63DF3E7BF66FEF6254EB71994ECD9D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:df:76:84:34:34:f7:19:d0:d7:4c:15:b6:ad:
eb:fc:0e:07:32:12:74:da:0a:07:3d:e2:96:9c:79:
94:95:9e:b9:d1:b3:7d:d5:e0:bd:27:5e:b7:d5:ea:
39:66:4d:19:33:a7:16:8c:d6:a0:ab:b4:8c:b6:43:
5e:93:91:b5:06:f1:f9:0a:5a:f5:17:11:87:68:1e:
df:93:a8:35:0e:84:6f:f4:de:a5:92:98:f1:f5:c5:
51:b0:97:14:6d:09:0c:fd:de:42:67:d9:d4:0d:c0:
ff:ad:f4:ce:92:4f:50:71:16:67:06:ed:42:57:9d:
1c:33:f3:85:a4:60:f7:62:3c:f8:62:73:7c:6f:5f:
16:f5:33:8c:03:59:ca:49:f7:6c:97:e5:69:8a:07:
49:de:81:7e:88:2c:14:28:60:aa:f0:b0:32:ac:7f:
e5:72:86:b8:7c:10:a4:53:4c:c7:86:a0:0d:de:1f:
67:b3:b4:16:41:ef:6f:49:63:b6:8a:4b:fd:76:0f:
50:c4:93:8b:ff:96:00:19:9f:af:d4:c3:1c:91:55:
1a:00:29:38:df:5f:36:5a:8b:85:b0:12:63:64:e5:
6c:71:ad:92:28:b2:c0:d6:90:0c:9b:68:ed:e5:bd:
25:97:a3:7c:7d:37:64:05:43:82:63:de:ae:fe:bd:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:27:DA:D9:B6:3D:F3:E7:BF:66:FE:F6:25:4E:B7:19:94:EC:D9:D6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NSfa2bY98-e_Zv72JU63GZTs2dY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:37:0b:93:e5:18:2e:93:1d:5c:83:b8:2c:13:71:8c:8e:10:
6e:5a:ae:36:c6:ec:15:2e:3f:9d:87:07:61:40:ad:2c:fb:47:
ef:c4:ff:3b:20:e7:d2:d8:2a:c9:07:92:c8:bd:27:fa:d0:91:
3c:a0:54:fd:39:75:0c:88:a0:02:14:39:ec:6b:d2:70:4a:78:
83:7d:c4:14:73:5f:65:8d:98:a4:53:74:9f:a4:a2:98:68:ef:
3e:d3:b9:bf:b5:67:a0:b6:86:e0:fa:e2:d2:26:e7:22:96:a6:
09:27:7a:9c:a5:2a:4f:f7:c3:17:d3:84:e0:99:96:9d:7b:be:
65:b1:86:39:af:12:d0:5c:21:85:ac:90:40:a1:d5:fb:de:46:
b5:c1:65:53:11:1d:fd:47:22:7a:00:65:ff:d3:7b:3d:7f:7c:
35:ea:cf:ce:3f:32:27:3f:1c:56:b4:c8:a7:ba:01:f1:fd:03:
d5:1d:70:85:16:21:df:b5:89:ab:db:20:62:93:9f:35:12:98:
93:05:8a:56:d2:33:4a:e5:70:2a:4c:00:4c:f7:29:07:b1:d7:
c8:4d:58:e7:80:5e:e9:2f:e5:7d:81:50:2b:76:c8:86:1b:0a:
6b:5f:c2:78:16:07:ec:19:83:87:0d:3e:22:9c:a9:8e:27:f3:
5f:66:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org