Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QWJSSWxv6hPfPBVqYdEgH4X8NDI.roa
File: QWJSSWxv6hPfPBVqYdEgH4X8NDI.roa (raw, json)
Hash identifier: InutUeS9A4u/WcSqaqIjKRMXhhB9PXenGnZyy/7x6c8=
Subject key identifier: 41:62:52:49:6C:6F:EA:13:DF:3C:15:6A:61:D1:20:1F:85:FC:34:32
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B9E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QWJSSWxv6hPfPBVqYdEgH4X8NDI.roa
Signing time: Tue 29 Sep 2020 10:08:38 +0000
ROA not before: Tue 29 Sep 2020 10:08:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 211.76.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2974 (0xb9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:38 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=416252496C6FEA13DF3C156A61D1201F85FC3432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:a6:40:f8:93:54:f7:ac:56:89:a2:0a:bd:
06:8d:fe:03:6e:78:0c:3a:14:f8:b4:cf:19:c5:bb:
a8:2c:5f:11:f4:0d:43:52:fc:4d:45:3d:71:49:d6:
c3:26:83:b5:d0:ea:f4:0d:85:89:ca:e7:b3:7c:13:
a5:f5:fd:49:e2:df:3a:05:12:c1:d6:dd:64:ec:7e:
42:63:29:2f:ef:53:09:10:5d:91:07:60:77:e5:e3:
79:97:00:9b:97:7d:68:c9:c1:74:51:76:28:7e:27:
63:c7:ad:f7:d6:15:5a:6b:d9:35:1c:c8:7d:39:2e:
d6:46:15:4c:7a:84:94:f5:b9:a3:f5:98:c5:ac:8c:
ac:d4:6f:6b:3f:c5:2c:49:2d:16:15:7e:c7:34:b7:
f1:93:87:15:a3:ee:b3:d1:0d:af:6f:00:16:52:d7:
e7:65:cb:f5:d9:3e:8c:86:b1:dd:29:a4:59:1c:ab:
13:5f:64:d6:76:a3:17:44:a4:4d:9b:a4:3f:f6:63:
d8:6d:bd:bd:fc:d8:46:a7:ae:d7:a8:4d:f1:47:c2:
df:5d:d1:3c:5f:ec:2f:09:95:68:4b:b5:8b:eb:bc:
ac:bc:9c:c5:59:ef:a9:86:64:d0:27:67:c9:f7:f1:
df:23:47:68:5d:9d:d5:1d:21:15:67:c5:4b:06:43:
eb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:62:52:49:6C:6F:EA:13:DF:3C:15:6A:61:D1:20:1F:85:FC:34:32
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/QWJSSWxv6hPfPBVqYdEgH4X8NDI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.52.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a9:ef:be:1b:4b:c2:89:08:bb:db:29:8a:be:67:04:b7:66:
20:47:e2:8c:c4:46:bb:a6:42:d0:19:c6:2f:52:89:67:94:cd:
91:8f:4d:49:b2:e6:25:95:3e:9a:eb:e3:95:25:bd:c8:af:49:
b1:41:bd:08:3a:be:f3:94:ff:38:89:c2:90:89:57:4e:f1:6d:
ed:6f:b0:1e:3a:a7:a5:a0:d2:5f:c2:57:02:61:34:5b:96:ca:
4f:ed:d2:73:fd:0b:69:0e:fe:66:1b:7f:f7:13:99:bf:6a:43:
a8:b1:1e:92:eb:a0:d5:32:b0:48:c0:cf:20:0c:95:ed:41:20:
53:2c:26:f4:51:0b:52:82:45:6e:61:b5:73:4f:6d:b4:fd:63:
2d:bb:af:91:d8:7b:8e:c0:dd:da:db:c5:34:d5:83:fa:73:40:
ab:69:de:09:a1:f7:e6:3b:c1:69:e1:d6:6e:ca:2a:fa:72:6e:
35:37:e5:64:60:6b:1c:5b:af:1e:4d:0a:59:49:52:5c:92:21:
96:44:d0:e0:31:ef:76:d4:b1:7f:61:08:8e:ff:6f:63:1f:1d:
04:66:e0:ea:fc:4e:f2:bc:d5:e5:5a:c6:5c:1b:61:a6:ec:2e:
08:a0:87:39:89:d9:66:e1:c3:9a:6c:cd:91:ed:b5:45:41:62:
8e:4a:13:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org