Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zf-Yl54VimoPLEa0LLR1YqiJliI.roa
File: Zf-Yl54VimoPLEa0LLR1YqiJliI.roa (raw, json)
Hash identifier: 8N6cc6Sc6rEB8c6ChPE/lNcGFami3axljit19KHUtMQ=
Subject key identifier: 65:FF:98:97:9E:15:8A:6A:0F:2C:46:B4:2C:B4:75:62:A8:89:96:22
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AFD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zf-Yl54VimoPLEa0LLR1YqiJliI.roa
Signing time: Tue 29 Sep 2020 10:07:53 +0000
ROA not before: Tue 29 Sep 2020 10:07:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 61.60.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2813 (0xafd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:53 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=65FF98979E158A6A0F2C46B42CB47562A8899622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:65:a2:4c:e9:ec:f3:f3:62:02:d5:03:5e:
b5:0a:6b:b7:03:6b:89:2b:af:44:ee:ea:6f:47:73:
5d:b9:96:b0:0a:29:66:43:b6:9c:f2:24:20:68:6a:
ef:17:fe:e7:b0:fc:28:29:c2:0d:3c:80:36:89:b5:
29:fe:bd:1e:94:4a:03:fa:02:9d:95:37:eb:8f:1e:
94:ae:8c:a6:87:e9:66:c5:ee:19:41:e2:61:76:03:
d1:49:a7:48:73:6e:47:f9:9a:91:84:36:5a:71:ee:
85:8d:d3:ef:68:52:a8:c2:dc:b8:92:5b:26:a6:1d:
07:f9:42:16:5c:85:70:df:f7:8a:da:14:af:3f:23:
2c:da:17:67:5f:fa:09:66:00:20:88:84:ad:90:b6:
4a:f2:19:6a:64:c0:b4:15:63:98:39:5d:e6:17:89:
6c:56:d9:84:d5:82:2a:34:86:bb:78:5a:64:88:03:
dd:a4:3b:9e:78:7f:b9:ae:4e:41:ec:ec:c2:9a:17:
2a:c9:de:98:0f:35:d2:4f:20:5e:ab:1e:f2:56:27:
8e:8e:b9:09:f5:14:8c:86:d2:8a:4f:2f:de:b7:0f:
2a:c4:0d:43:24:97:78:8f:8d:7c:dc:8d:95:23:6c:
3c:b3:ee:be:ef:60:c3:c6:3b:ca:5d:0a:99:a4:06:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FF:98:97:9E:15:8A:6A:0F:2C:46:B4:2C:B4:75:62:A8:89:96:22
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Zf-Yl54VimoPLEa0LLR1YqiJliI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.216.0/21
Signature Algorithm: sha256WithRSAEncryption
58:66:9c:43:7c:9b:db:91:a0:ae:d1:48:eb:b7:35:e7:96:ae:
d5:dd:ba:e3:94:39:d5:1c:15:b1:f3:0e:42:ce:90:25:a8:55:
62:3a:4e:3e:3c:d6:5e:a2:8d:f5:6d:65:f1:fd:27:15:25:63:
ba:03:d1:23:76:b6:70:25:b9:70:1e:f1:05:9d:0a:54:25:96:
76:06:d8:71:7b:22:f0:a1:40:7f:76:96:92:f2:6b:bd:a2:08:
68:c9:49:b6:ab:90:af:9c:e5:44:0c:c3:71:3b:d8:15:2a:72:
0b:c7:b5:f9:18:89:52:42:c4:4d:af:66:23:6d:7b:bb:e4:aa:
02:08:2d:92:d0:44:60:44:1b:5c:ff:8e:0a:f7:5d:bb:e5:3a:
cf:3d:4d:73:36:c4:9c:06:12:67:1f:e7:05:bd:28:a9:02:b3:
23:78:4d:e7:55:27:de:f6:f3:8f:3c:61:af:c1:2f:de:23:af:
9a:29:42:b9:4e:d6:09:76:61:ec:3f:76:21:4a:fe:17:48:43:
75:9a:d9:48:cd:4f:64:db:af:cb:68:b6:49:b6:df:cc:81:6c:
0c:53:cb:21:21:bc:33:bb:b6:d3:7c:d3:f8:fc:60:5f:cd:04:
c3:bd:21:30:26:e4:97:64:32:4a:81:2e:cc:65:fb:01:24:b5:
93:53:b6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org