Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YAd1MB3yPEaJ88Z1Um0bItZgE8I.roa
File: YAd1MB3yPEaJ88Z1Um0bItZgE8I.roa (raw, json)
Hash identifier: oYz0CB8gW0a5lwX6hIwVT2AV8khqJQLjRyUFgYx/J2s=
Subject key identifier: 60:07:75:30:1D:F2:3C:46:89:F3:C6:75:52:6D:1B:22:D6:60:13:C2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F8D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YAd1MB3yPEaJ88Z1Um0bItZgE8I.roa
Signing time: Sun 07 Feb 2021 12:34:39 +0000
ROA not before: Sun 07 Feb 2021 12:34:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 211.76.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3981 (0xf8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:34:39 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=600775301DF23C4689F3C675526D1B22D66013C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:36:dc:4f:89:2e:5f:9e:ac:2e:3c:0c:60:
16:3b:d2:a6:19:0f:76:c5:c3:d5:2f:05:0a:d5:ee:
ad:5b:98:81:9e:5d:cb:ac:a5:ec:fb:84:df:f0:f3:
1d:cc:8b:76:17:b2:8f:5a:6b:9a:4d:b9:41:2d:6a:
5f:2c:50:bc:05:33:54:2f:6c:68:13:a5:ca:51:d2:
d1:ac:f1:d4:5e:aa:1e:d9:91:e1:bd:5a:95:a6:f7:
42:7e:19:99:32:1d:68:fe:d5:28:6f:e4:fb:d5:1c:
ae:c6:18:1a:32:2f:ff:2b:ba:b9:ee:e9:48:c3:8d:
a9:f2:fe:61:2a:59:dc:e4:72:28:5b:33:aa:60:99:
fc:ef:73:ff:30:9c:dd:6f:01:4b:01:bc:87:8b:31:
28:04:81:05:3a:fa:86:41:5d:23:8c:ed:3b:fa:42:
5f:5e:26:82:10:b1:18:92:e6:97:7a:be:65:bf:28:
70:40:f2:f2:58:07:ca:97:ff:4c:3d:2f:c5:66:14:
91:e7:5f:34:36:f5:19:72:36:21:8e:19:98:e9:0a:
7d:8a:72:63:6d:38:21:3d:ef:cb:ac:06:c6:a8:4a:
0c:66:bb:e1:af:a9:4b:0b:52:f4:15:b7:cc:3a:20:
2a:c0:93:a9:96:4f:c0:77:af:85:d3:82:0e:7b:77:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:07:75:30:1D:F2:3C:46:89:F3:C6:75:52:6D:1B:22:D6:60:13:C2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YAd1MB3yPEaJ88Z1Um0bItZgE8I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.63.0/24
Signature Algorithm: sha256WithRSAEncryption
97:40:4a:d1:d2:2c:73:c3:fc:ff:78:a9:49:74:dd:0c:43:ee:
82:e4:c4:7c:72:84:ef:7a:87:2c:6d:57:16:50:a8:c2:e2:cf:
56:e6:d6:13:60:6a:6b:b7:93:6b:07:fd:0b:68:0d:79:84:06:
90:6c:47:48:0b:85:70:07:85:8d:b3:e6:6d:e3:a3:5b:52:42:
63:d0:b4:70:d1:90:2e:9a:d1:a7:d6:f7:28:85:35:dc:49:32:
97:b6:95:e2:1d:79:c1:d5:69:e1:3f:a7:08:cc:4e:82:7e:80:
13:33:98:4b:5e:e4:df:b4:6e:07:ea:69:35:5c:69:64:99:f2:
b2:ba:8d:5a:26:86:84:d1:6e:d3:42:dd:35:91:85:9e:c2:f8:
ad:a8:e4:29:87:04:2e:f2:b7:8a:ae:3f:82:d2:43:bc:0b:d9:
7d:b2:5b:41:f6:ac:d3:dd:9d:bb:fe:a7:90:4d:17:fd:dc:6e:
85:ef:cb:f6:17:bb:d7:7a:26:9a:3e:48:60:ea:43:3c:c7:ef:
38:d8:58:bf:27:32:64:23:a1:c1:c2:54:7f:e9:15:d8:90:2d:
f5:6e:2b:dd:72:2a:03:dc:6b:39:f6:3f:47:d9:43:c7:84:7c:
04:91:90:98:27:ba:99:ed:2e:9c:53:02:ce:7d:10:f8:ed:7a:
0f:71:86:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:37 2023 by rpki-client on console-ams.rpki-client.org