Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ryyx8HnJEGylZc9qWZr1Bomvxhg.roa
File: Ryyx8HnJEGylZc9qWZr1Bomvxhg.roa (raw, json)
Hash identifier: /zHRwg2MjsiUJlPGZfYyzuXxjbCf/N8IS3p9icTil4g=
Subject key identifier: 47:2C:B1:F0:79:C9:10:6C:A5:65:CF:6A:59:9A:F5:06:89:AF:C6:18
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0D5C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ryyx8HnJEGylZc9qWZr1Bomvxhg.roa
Signing time: Thu 14 Jan 2021 07:42:25 +0000
ROA not before: Thu 14 Jan 2021 07:42:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.56.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3420 (0xd5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 14 07:42:25 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=472CB1F079C9106CA565CF6A599AF50689AFC618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:da:63:78:16:1f:14:55:9d:ad:7e:54:46:
03:89:a2:ba:82:f7:b0:e9:b2:25:d8:d5:39:ea:ae:
fa:34:e9:a0:63:23:05:ac:cb:27:cc:05:2d:ce:43:
02:95:b4:3a:eb:64:37:cc:2b:11:be:84:c4:8f:ae:
15:83:52:12:fb:26:f7:07:23:2b:5e:a7:e5:6e:fc:
62:7d:e4:bb:f1:8a:c3:13:e3:f1:0c:a5:5a:01:a2:
16:a7:95:cf:2a:31:51:5c:20:da:91:08:ca:88:5c:
a3:5f:5b:f9:f0:e8:43:e3:02:c6:5f:90:31:f4:b0:
6c:17:de:8f:1f:96:c8:d7:ae:c1:c6:20:0d:11:dc:
27:89:a4:dd:04:c6:46:8f:46:54:95:87:5a:91:19:
74:10:71:2f:4f:4f:27:88:d7:54:f1:ce:71:be:af:
d3:11:c2:35:b8:44:a2:2e:a7:99:25:bb:8c:ac:cb:
e8:44:9c:4b:5d:29:a5:da:d1:85:25:3c:00:c0:0e:
ca:22:ff:e1:da:3b:cf:2b:56:61:3d:0c:22:98:94:
2d:e7:cf:a1:3c:c6:4e:ac:3e:28:9a:b1:35:2e:2a:
7e:29:2d:a4:ae:27:b7:17:5c:b2:16:b0:af:2b:bd:
9c:cb:00:07:87:89:a4:ef:98:58:26:53:33:3c:d1:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2C:B1:F0:79:C9:10:6C:A5:65:CF:6A:59:9A:F5:06:89:AF:C6:18
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ryyx8HnJEGylZc9qWZr1Bomvxhg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.172.0/22
Signature Algorithm: sha256WithRSAEncryption
05:ef:5c:e8:f8:69:f1:47:04:e4:c9:09:3f:84:38:73:de:79:
93:63:fd:fb:c2:f5:1e:0a:fc:62:ab:d9:9f:5f:cf:43:ff:c3:
07:1d:08:ef:33:40:1d:17:b0:a0:06:38:fb:59:5e:d2:ea:76:
96:73:cf:2b:47:10:ea:19:e1:cd:07:54:db:d8:88:35:2f:88:
81:54:66:ae:48:8b:95:57:90:75:e2:ce:3d:5e:c9:65:04:9f:
7f:8b:fc:3e:ba:b5:b8:da:b8:08:65:94:d1:fc:8f:24:3d:15:
25:55:80:94:bf:74:24:8d:13:db:3c:0f:05:8b:b5:b6:58:80:
28:e9:ee:e3:e7:84:25:52:0d:8f:0b:d6:d5:09:56:ee:f7:bb:
bb:83:9f:56:5d:9b:cb:16:ec:ce:2e:4d:c5:7e:24:a4:80:f4:
69:b6:16:b7:9f:0d:e3:89:07:cc:0e:d1:76:63:7e:71:12:bf:
95:e4:48:0c:44:62:53:44:c9:a1:bc:58:ad:fe:af:90:10:1f:
46:4d:44:ed:f2:fe:8f:65:93:53:65:64:16:60:d1:c2:fe:c5:
0c:c7:4e:91:c6:de:82:77:0d:a3:f8:3a:fb:01:ee:a6:66:a6:
73:71:58:92:4d:b5:b2:ec:44:27:a9:21:e9:86:81:e5:bc:aa:
df:be:7f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org