Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VVmrpBsuiJ2D-sFPhc60be_lCG8.roa
File: VVmrpBsuiJ2D-sFPhc60be_lCG8.roa (raw, json)
Hash identifier: NnmC8hBDvBJKQbH7/2KYju/bJQd+19ASF7Mi8UsKtT8=
Subject key identifier: 55:59:AB:A4:1B:2E:88:9D:83:FA:C1:4F:85:CE:B4:6D:EF:E5:08:6F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1530
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VVmrpBsuiJ2D-sFPhc60be_lCG8.roa
Signing time: Fri 21 Oct 2022 08:36:45 +0000
ROA not before: Fri 21 Oct 2022 08:36:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 211.76.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5424 (0x1530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 21 08:36:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5559ABA41B2E889D83FAC14F85CEB46DEFE5086F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:85:2e:66:30:ed:c4:1e:0c:46:c5:63:f2:
20:eb:6b:91:55:44:2a:0f:62:08:04:6b:9a:80:03:
a0:4c:18:9d:34:aa:bc:47:d0:e5:df:bd:50:bf:60:
45:49:7c:52:80:45:cf:37:11:4f:b8:75:9c:8f:a4:
1f:43:a7:25:25:cf:b8:3f:6e:55:27:d4:61:7c:b7:
86:41:91:e2:b3:45:e7:cd:45:91:c5:2e:32:9f:3a:
66:d1:6f:f3:65:7e:64:23:9d:fd:12:a2:40:d9:7c:
36:41:a1:9b:6b:22:2c:6a:cc:cf:6e:31:1e:c9:6d:
e9:3a:70:b7:1c:46:53:51:bf:e4:d7:e5:43:7d:c0:
0e:d5:ef:49:34:ee:97:4d:39:ff:3e:98:1b:d0:a0:
90:9e:1f:57:89:61:77:31:a0:5f:ef:4a:64:b7:07:
80:da:1b:e6:26:26:e8:05:4f:c9:af:28:71:41:73:
09:12:f7:7a:70:16:ea:00:84:b8:d2:30:ad:6b:8b:
6e:a6:7a:6a:bd:35:92:f3:df:2e:19:87:2e:b4:2b:
69:74:ad:e8:9c:ec:88:7a:bb:04:ba:e0:6f:2e:d3:
ce:fe:cf:1f:54:13:8f:d2:0a:02:10:03:cc:ff:af:
9e:92:e6:ff:d1:05:a5:3c:9c:fd:87:80:b9:f7:44:
6d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:59:AB:A4:1B:2E:88:9D:83:FA:C1:4F:85:CE:B4:6D:EF:E5:08:6F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VVmrpBsuiJ2D-sFPhc60be_lCG8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.56.0/22
Signature Algorithm: sha256WithRSAEncryption
06:2c:9b:17:7e:d8:69:46:42:5e:6c:a2:60:58:09:de:8e:75:
27:ab:b9:17:61:22:81:be:47:c9:42:a2:3e:d0:c9:5b:2e:a0:
5b:cb:e1:76:ee:98:84:a4:b3:4d:bc:89:7b:2e:0a:8c:b6:68:
64:b4:0d:85:9f:1a:80:7c:11:af:4a:9c:bc:d0:43:54:d2:f0:
12:fd:7e:09:af:7f:01:0e:fc:67:98:32:9e:75:5c:28:3c:2d:
76:5b:6a:a4:b6:8c:ea:45:f5:f8:b6:5e:73:c7:ad:f2:6c:83:
91:f8:92:66:d2:40:07:56:1f:dd:5b:e5:d5:0c:55:0d:9b:c7:
81:23:4b:d8:23:f5:67:07:bb:f0:ff:24:4c:ab:2b:b7:85:dd:
e2:55:d3:55:dc:6f:54:aa:aa:f1:cc:c4:89:06:1d:ab:3b:1f:
b2:17:75:4b:99:ff:8d:09:4f:dc:dc:fd:77:a3:7e:66:24:e0:
38:22:4e:db:ba:97:c9:59:d6:8e:57:dd:cd:2c:e7:65:b8:88:
8a:d9:30:21:9f:df:e5:76:98:89:30:85:47:99:8b:e8:51:6b:
d1:d5:04:c0:42:6c:81:dc:be:f4:2e:cc:48:a7:6a:70:48:a0:
fa:72:f0:d1:61:e4:bb:a2:6a:de:05:07:92:c1:d4:d5:a2:a5:
d2:24:af:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:56:08 2025 by rpki-client