Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Q-JqBVLrGRDGqb93i5HfyQU6cZA.roa
File: Q-JqBVLrGRDGqb93i5HfyQU6cZA.roa (raw, json)
Hash identifier: XuG0JiOReSUECT3aZLyW3vw+RTfbFxdkXqmgsoPbF0M=
Subject key identifier: 43:E2:6A:05:52:EB:19:10:C6:A9:BF:77:8B:91:DF:C9:05:3A:71:90
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 121E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Q-JqBVLrGRDGqb93i5HfyQU6cZA.roa
Signing time: Wed 29 Sep 2021 02:54:13 +0000
ROA not before: Wed 29 Sep 2021 02:54:13 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 211.76.46.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4638 (0x121e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:13 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=43E26A0552EB1910C6A9BF778B91DFC9053A7190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ab:da:ac:80:35:e3:bd:eb:55:22:27:ca:bc:
18:df:5c:c4:d6:de:81:02:c0:ea:46:1c:12:02:ed:
43:c3:ce:7f:0b:d8:9c:f1:f8:f7:0e:5f:cf:f5:44:
c2:88:b2:8f:e3:c1:96:85:b5:f2:f4:7d:4c:78:30:
15:7d:c1:b1:77:ac:45:ea:07:89:85:61:69:66:54:
49:c1:88:a8:2e:3a:7f:82:47:c6:09:ae:38:b1:0b:
c1:b6:3f:46:8c:84:80:17:0d:17:07:53:03:92:6d:
d2:e0:54:2a:61:90:f5:89:14:96:34:b4:36:48:b5:
76:3b:40:47:58:ce:c0:11:15:3e:cf:d3:2d:55:2d:
0b:17:8e:30:4f:8c:9b:0e:fc:25:f2:a6:d5:06:29:
40:1a:65:81:25:ee:bc:c1:27:3f:a1:c9:c7:45:d4:
53:34:e0:84:dc:e5:96:cb:5e:30:b0:17:a2:01:8c:
c7:1c:05:1b:03:a7:2c:81:ef:ba:87:53:cd:fb:25:
8e:ce:95:d1:cd:ae:60:10:e6:7a:9e:12:59:63:fe:
82:50:33:e1:fd:8e:3e:d4:30:d9:1e:f6:6f:07:4f:
5a:83:45:0a:14:41:1d:f4:ca:83:cb:e6:57:77:bf:
3d:16:d2:7d:d7:f1:e5:28:1f:76:ed:83:d3:b0:73:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E2:6A:05:52:EB:19:10:C6:A9:BF:77:8B:91:DF:C9:05:3A:71:90
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Q-JqBVLrGRDGqb93i5HfyQU6cZA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.46.0/23
Signature Algorithm: sha256WithRSAEncryption
17:ba:fe:5a:42:6e:86:5b:71:ee:9f:68:0e:5c:61:6b:7e:29:
60:6e:db:20:11:74:a2:58:c8:66:b2:c4:6b:63:1d:64:67:de:
cb:d7:dd:61:7c:46:02:af:3d:4c:60:7a:00:3a:60:e7:64:f0:
3b:ca:61:92:00:4a:87:61:f0:e9:85:26:50:f3:a5:05:37:43:
b9:10:17:b6:5a:7c:7d:47:ec:6e:fd:4d:98:24:19:cd:4c:80:
6b:38:8f:6d:36:4c:6b:c9:2e:43:33:33:a2:1e:5d:c5:1f:74:
d2:7e:79:55:90:e1:fa:d7:ad:77:16:db:5c:0e:b8:db:2d:bf:
d4:ea:91:0d:8f:00:c9:3c:f1:81:ff:7f:0e:32:ab:ce:d3:8c:
98:1c:8d:8c:59:d6:bd:fa:e3:8a:3c:83:16:78:a8:d2:f6:b8:
10:9b:c5:f2:42:78:b9:29:9e:17:dd:c4:59:6d:92:3b:71:94:
93:04:62:18:fc:fb:4b:7f:f3:cb:0d:71:2b:c4:84:ed:80:4b:
84:0c:6f:98:a1:a3:fd:62:e2:50:d1:22:9e:af:08:a0:3f:5b:
e5:11:6a:41:4d:eb:3b:cc:df:7e:02:f6:b6:88:3e:7e:e4:2a:
8e:86:43:ca:6f:c1:a5:4d:4b:4b:c2:9c:83:a5:0b:5e:02:85:
ed:92:3c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org