Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SUUVYByOcK8TbhmPNSQkXozFdJ8.roa
File: SUUVYByOcK8TbhmPNSQkXozFdJ8.roa (raw, json)
Hash identifier: USGw2euo45/Jmc+GXo5+NJuWSokyGjoXUy8VhwDZWek=
Subject key identifier: 49:45:15:60:1C:8E:70:AF:13:6E:19:8F:35:24:24:5E:8C:C5:74:9F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1147
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SUUVYByOcK8TbhmPNSQkXozFdJ8.roa
Signing time: Sun 07 Feb 2021 13:14:50 +0000
ROA not before: Sun 07 Feb 2021 13:14:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.61.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4423 (0x1147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:14:50 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=494515601C8E70AF136E198F3524245E8CC5749F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:72:f6:7a:f7:47:6a:7c:db:2d:2d:e1:f9:
27:d2:cf:85:4b:82:3b:f6:b2:12:65:60:67:20:64:
d7:10:a4:e4:dc:5f:33:15:3c:8d:de:c0:42:c3:6c:
35:13:96:de:8e:fc:d0:9d:4b:46:67:0b:81:90:de:
1c:e0:27:83:b5:43:16:7a:08:b6:58:3c:8b:de:2d:
d4:16:db:cc:28:63:7a:a0:bf:75:b7:aa:92:9d:5c:
aa:94:a9:1d:72:8f:f2:e0:e0:4e:40:9e:30:f7:45:
06:50:38:49:22:54:08:11:4c:d1:ed:c2:58:74:a5:
af:f5:f1:81:1f:db:e9:85:a5:97:5f:c3:c5:4e:53:
f3:0b:bb:16:d5:67:62:3d:5f:ba:5f:9b:f4:15:c9:
fc:30:30:91:0b:a0:5f:c5:b7:2b:f7:76:3b:4c:4e:
ab:7b:48:09:12:97:84:48:77:a1:da:cd:39:d6:21:
64:88:08:d0:2c:cc:4c:23:ba:09:a0:a2:43:78:0b:
01:e3:36:3a:1c:a5:08:fa:f3:86:77:ee:4a:07:64:
6a:d0:6e:ee:ef:a3:37:be:8e:ed:f4:d1:d4:01:37:
27:89:e1:f7:a2:2b:b8:d8:85:f0:df:76:91:2c:27:
c4:c5:9f:97:95:51:0e:4a:ea:48:f9:47:95:a9:ed:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:45:15:60:1C:8E:70:AF:13:6E:19:8F:35:24:24:5E:8C:C5:74:9F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SUUVYByOcK8TbhmPNSQkXozFdJ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.216.0/22
Signature Algorithm: sha256WithRSAEncryption
33:40:70:ef:33:30:a8:18:c1:b6:61:f8:21:7d:0f:82:5a:d5:
d8:03:48:ea:3b:43:55:87:a5:12:d0:ab:d5:43:b6:08:88:b1:
29:a3:65:6b:cc:81:77:fa:25:07:b3:1e:a9:5c:6c:41:62:78:
29:97:96:0d:5f:97:a4:54:c4:b3:33:a7:42:6b:03:d7:67:6f:
87:35:22:65:99:c3:2c:a8:1f:e1:cc:7e:88:5f:45:bf:44:63:
1e:c1:81:9d:7a:8b:84:9d:99:56:91:f4:74:32:a4:4c:3c:18:
0b:5c:b6:e4:ab:53:b3:80:1f:b9:05:e0:2d:50:6c:45:4d:6a:
30:61:3b:e1:e3:e8:87:c2:8b:cf:35:c0:3f:e0:74:97:e5:70:
5a:08:0c:ab:bd:8d:e1:1a:53:bf:45:e4:a6:35:c9:29:a2:cc:
0b:f1:44:8c:48:7b:de:c7:81:b8:2c:c6:24:b5:46:b7:50:6e:
27:58:31:95:7b:68:b2:15:93:a5:8c:2c:f9:58:0c:5c:be:48:
f7:6a:72:7b:b7:8d:70:ce:0a:a4:9f:c7:5a:7b:20:f2:eb:6b:
6d:97:9b:d8:13:05:57:c6:5f:2b:b6:c4:06:82:cb:44:17:90:
90:f2:f7:fc:b1:f7:61:e0:f1:e5:94:b6:14:a0:f0:71:20:31:
e7:15:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:37 2023 by rpki-client on console-ams.rpki-client.org