Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NtcE--bFPvcrxE-JAJIqotwyKuA.roa
File: NtcE--bFPvcrxE-JAJIqotwyKuA.roa (raw, json)
Hash identifier: t/ivcRt/wtuWQVyhxHiqFPpLQRWPG1ELHwlnLuyykg8=
Subject key identifier: 36:D7:04:FB:E6:C5:3E:F7:2B:C4:4F:89:00:92:2A:A2:DC:32:2A:E0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1149
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NtcE--bFPvcrxE-JAJIqotwyKuA.roa
Signing time: Sun 07 Feb 2021 13:14:53 +0000
ROA not before: Sun 07 Feb 2021 13:14:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.61.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4425 (0x1149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:14:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=36D704FBE6C53EF72BC44F8900922AA2DC322AE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:55:ba:3a:9c:a7:c3:44:2e:23:28:d0:7b:8f:
ad:47:47:6d:80:1a:cb:7e:61:e6:5b:b8:ee:de:6f:
24:a6:ee:4d:1a:7c:67:7b:54:17:47:ed:67:7e:97:
e1:14:17:85:8c:f5:75:33:90:1e:f8:5b:f6:e6:29:
6f:9f:ad:aa:5b:03:83:3e:97:d6:ab:3c:46:a8:13:
72:f9:37:0e:24:0b:d4:e9:22:ae:ed:20:a0:f1:12:
0e:71:54:e9:cb:fb:51:e1:1b:fe:af:fd:04:56:2b:
9d:67:25:a8:34:14:6b:20:c0:86:00:84:2d:77:46:
b4:b5:4a:7a:6e:79:29:cf:5a:e8:a5:b3:4f:bb:b3:
14:81:52:44:6d:d0:84:8e:3a:66:0d:51:08:dc:9e:
dd:ac:10:87:8f:c3:85:b6:cc:f1:61:41:d8:60:99:
a7:2b:33:64:18:88:99:f3:a4:0b:56:6e:6f:42:99:
ac:bc:f8:db:98:df:2a:70:57:ff:16:d8:32:b2:2a:
b5:e3:8d:ab:06:17:a4:76:2e:9c:f1:f3:85:86:69:
6d:55:05:07:21:fc:14:77:01:08:f2:79:46:a0:cd:
51:0c:99:70:da:7c:50:6d:46:56:76:82:10:03:3b:
04:62:c6:2c:c9:f3:22:27:0c:d7:30:de:c2:58:fe:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D7:04:FB:E6:C5:3E:F7:2B:C4:4F:89:00:92:2A:A2:DC:32:2A:E0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NtcE--bFPvcrxE-JAJIqotwyKuA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.220.0/22
Signature Algorithm: sha256WithRSAEncryption
14:5c:3b:8d:bc:36:8f:06:7c:bf:b2:9a:ef:19:5a:2f:dc:f6:
b9:fb:e6:5b:67:29:b3:f3:44:02:38:f6:4b:16:6a:b8:3a:7a:
1b:f0:e0:f1:a4:b0:6d:a5:28:2b:31:8d:c4:00:65:67:f8:29:
de:db:59:77:49:82:92:1d:d9:1e:90:05:5c:63:fc:d5:ca:06:
3e:8b:e1:a0:1b:42:ed:34:ff:dd:b8:df:58:a2:8d:d9:8a:4d:
f9:c3:bb:49:17:cb:5c:b0:e4:8b:af:f4:2b:ea:7b:6f:53:59:
d8:c1:12:1b:2a:ff:a4:0c:35:27:84:3e:bb:09:98:1a:4a:25:
b0:29:53:c7:d3:f8:73:8d:1d:12:46:90:36:55:2d:42:65:1d:
e5:58:0d:09:3b:83:77:86:59:35:f8:11:30:0b:34:a5:ea:8b:
de:93:8d:d8:41:07:ce:cb:5c:e6:af:c5:c0:8f:45:b0:26:5d:
bc:64:7c:48:84:5d:74:b0:e1:b9:e2:f2:c0:23:46:91:bf:23:
a0:03:61:30:00:17:69:65:49:dd:fc:b1:5e:ae:c5:29:9e:93:
89:7c:bf:65:32:53:cd:2d:33:cd:9b:f1:b8:36:6e:e4:12:ec:
d7:e1:b9:0b:a1:54:bf:3b:56:10:77:15:7f:26:63:c0:c8:87:
ae:9e:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org