Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YsH5q5fvUSpS2xMUk9C8MduFXlc.roa
File: YsH5q5fvUSpS2xMUk9C8MduFXlc.roa (raw, json)
Hash identifier: SOubvZm3vKS5Ba4EuRS6/qEB4+0IN9ukYw+VqTZlqFI=
Subject key identifier: 62:C1:F9:AB:97:EF:51:2A:52:DB:13:14:93:D0:BC:31:DB:85:5E:57
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A14
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YsH5q5fvUSpS2xMUk9C8MduFXlc.roa
Signing time: Sat 22 Oct 2022 06:17:37 +0000
ROA not before: Sat 22 Oct 2022 06:17:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.61.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6676 (0x1a14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:17:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=62C1F9AB97EF512A52DB131493D0BC31DB855E57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:31:5c:74:01:ed:b5:81:ef:15:ee:c4:d9:
bb:03:64:d3:82:22:8f:99:32:3b:f1:2a:c5:3b:75:
58:de:b8:dc:47:31:aa:82:85:4a:6b:12:f5:94:d6:
d5:23:30:01:d6:4f:03:36:62:64:ca:84:0c:1d:80:
c3:eb:5d:b3:7f:22:4b:54:27:a2:30:a7:d0:27:7d:
71:df:6d:73:c6:5b:18:95:3a:32:39:73:7e:34:38:
03:a4:3b:b9:fb:54:f9:75:6e:b6:ba:60:24:c5:d1:
c0:36:e4:e8:fe:6c:d2:5a:f7:3d:84:13:a6:1b:10:
e5:c4:2a:cf:d7:e8:47:be:7c:49:f9:a9:b3:2d:93:
09:52:30:35:bd:24:12:0a:86:0c:30:56:cd:f7:00:
f3:79:8a:bf:d5:95:40:09:75:45:dc:ad:a9:4e:60:
b3:d7:32:7f:0d:d2:86:d0:c4:18:b6:76:f0:28:1c:
f6:82:bc:3f:9f:99:9c:b2:34:05:86:13:59:cf:45:
80:3d:1e:0f:e3:ff:4c:c4:77:e7:df:73:ca:61:0e:
0e:cc:d4:3b:e9:b1:2d:c6:b8:8c:77:47:4c:9d:65:
db:90:b4:d9:91:8d:18:1e:fd:75:61:e4:f2:0d:ed:
7f:2e:3b:35:20:f2:ab:e2:0d:ae:22:af:6b:68:a3:
db:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C1:F9:AB:97:EF:51:2A:52:DB:13:14:93:D0:BC:31:DB:85:5E:57
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YsH5q5fvUSpS2xMUk9C8MduFXlc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.236.0/22
Signature Algorithm: sha256WithRSAEncryption
20:b9:63:c5:71:01:ec:cb:c0:66:fd:ef:88:bc:9d:0e:ef:92:
71:f0:b3:e7:72:ed:7a:cd:f2:8c:69:7b:8a:7f:3c:5f:26:a6:
2d:26:27:e1:d1:04:4b:f2:9a:cd:05:1e:8b:72:8c:e9:2f:c5:
9e:b6:02:d2:ae:94:31:df:68:e0:d4:cf:df:b0:3b:bc:d7:6d:
2a:fa:7d:f0:cf:be:12:6b:ca:51:f2:29:ab:72:5b:95:b8:97:
0f:86:63:53:42:83:7d:24:3d:8a:d4:e7:a7:5d:c7:f3:f5:82:
13:ab:32:ac:d3:f5:4d:15:a4:82:0c:df:82:9a:32:45:8f:ad:
3f:37:cd:de:0c:c9:b7:cb:74:d4:45:c3:6b:cd:2b:d0:89:08:
de:56:9a:50:43:fa:0e:ea:78:75:d6:f3:d3:ce:7e:1c:dc:12:
7f:f0:d3:49:52:f3:46:0b:53:01:28:0d:ad:02:10:b7:8b:41:
66:b4:a6:6a:54:2d:39:3a:cc:e1:62:73:e6:d6:11:26:38:c7:
da:5b:3a:4f:bd:b7:50:f8:92:2f:b3:42:4e:84:b6:81:c9:3d:
4c:bf:5a:11:c0:f8:34:2e:99:27:c9:78:27:f6:74:41:1c:eb:
da:02:63:08:f5:38:9f:e3:43:73:2a:87:b4:42:3d:a9:54:b4:
81:6e:f3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org