Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VzzNJXFIF0Rahq4xpI6_gb2abJM.roa
File: VzzNJXFIF0Rahq4xpI6_gb2abJM.roa (raw, json)
Hash identifier: Y3yUXWzzBCNijQgxzgcSh55UhXhrRCrxLVSCo+3sJJw=
Subject key identifier: 57:3C:CD:25:71:48:17:44:5A:86:AE:31:A4:8E:BF:81:BD:9A:6C:93
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1334
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VzzNJXFIF0Rahq4xpI6_gb2abJM.roa
Signing time: Wed 29 Sep 2021 02:55:28 +0000
ROA not before: Wed 29 Sep 2021 02:55:28 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4662
IP address blocks: 61.58.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4916 (0x1334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:28 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=573CCD25714817445A86AE31A48EBF81BD9A6C93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:8e:a1:d0:02:54:21:1e:2f:11:1e:65:e8:04:
0f:3f:d5:2a:5f:be:ee:6d:96:5c:02:30:ca:4b:c0:
88:04:0d:78:1e:85:29:fd:91:0e:63:b3:14:15:68:
62:19:a1:e6:a5:c9:93:ad:71:35:64:bf:2b:68:cd:
e6:44:5c:e2:1e:12:7a:9f:cb:5c:6d:c5:f1:79:6a:
f3:0e:3d:df:87:01:23:60:35:5c:02:c8:a7:d2:9b:
dd:46:34:34:11:5d:d0:39:a1:a5:2b:d1:ae:14:73:
37:bf:cd:44:e1:1e:25:f0:18:56:96:56:fe:b0:b4:
4f:49:ac:11:e0:95:54:e8:33:7a:14:67:00:7b:b8:
85:1f:1e:5e:56:f5:50:4d:fc:75:5f:ed:89:f4:13:
41:f1:20:ce:57:39:6d:a5:47:98:9f:ad:d1:e0:19:
53:67:0e:0a:3e:e6:35:d2:b5:fc:d7:b9:93:80:0c:
dd:e2:13:d0:6e:05:4c:eb:0f:08:45:db:b8:fa:55:
f0:4a:2f:9b:73:3d:ad:42:7c:1a:1b:b3:79:42:4b:
0c:13:7d:9b:78:8d:15:fd:a5:6a:66:91:f0:3e:18:
7c:d2:10:c0:dd:c2:cf:4f:13:23:fa:b0:41:08:0d:
1d:2d:9d:99:62:74:18:59:ac:a4:3d:b0:b6:a1:0a:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3C:CD:25:71:48:17:44:5A:86:AE:31:A4:8E:BF:81:BD:9A:6C:93
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VzzNJXFIF0Rahq4xpI6_gb2abJM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.112.0/20
Signature Algorithm: sha256WithRSAEncryption
59:2d:84:09:1e:79:42:c5:c6:d2:2f:75:7f:ae:d2:59:3a:93:
5a:e3:91:fc:a0:04:e2:89:42:a2:82:a3:c6:a0:e5:9a:4f:ae:
6e:4a:92:a2:8f:bc:e6:eb:de:2d:5b:f5:61:d7:db:a4:a9:9e:
fb:9d:c5:1a:e3:3f:fb:50:58:89:6d:6f:af:76:52:22:9d:7f:
cd:db:d2:f0:80:0a:2e:ae:61:d2:3d:37:aa:f6:eb:05:47:d9:
ed:55:c7:41:8f:70:7e:91:0e:aa:5b:5e:af:de:1a:f5:20:3e:
f4:90:f4:62:dd:66:91:89:ff:47:7f:77:0a:09:66:d7:49:98:
4c:ff:cc:db:7f:d1:57:a9:4c:27:7b:ee:d4:37:9e:95:34:f7:
0b:91:db:3d:97:53:b5:58:a5:f5:2a:be:8f:04:e0:03:79:32:
4b:af:22:61:3c:37:32:1a:2c:27:32:68:c9:ce:25:a9:e3:5e:
1e:43:5d:ec:ba:7e:7a:94:71:fd:db:b1:d5:8b:45:90:e1:19:
78:1d:ed:cb:b6:07:94:53:81:89:e0:59:22:e7:7d:a5:52:1d:
1e:a3:bb:e7:0d:9c:5e:a7:2b:28:77:d4:3e:dc:fd:12:2e:4e:
02:a1:48:65:00:98:68:dc:99:fd:ed:47:8b:06:11:f5:ad:92:
6f:94:c9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org