Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aYWTEN0n4c6guIvtrwgEkXJfQo8.roa
File: aYWTEN0n4c6guIvtrwgEkXJfQo8.roa (raw, json)
Hash identifier: OYMjh8dtL/UhmlYOQ3CEcTdteQMUOIIpRodrVB+YV4k=
Subject key identifier: 69:85:93:10:DD:27:E1:CE:A0:B8:8B:ED:AF:08:04:91:72:5F:42:8F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aYWTEN0n4c6guIvtrwgEkXJfQo8.roa
Signing time: Thu 15 Sep 2022 02:35:23 +0000
ROA not before: Thu 15 Sep 2022 02:35:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 61.58.96.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=69859310DD27E1CEA0B88BEDAF080491725F428F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:88:70:44:0e:4b:26:10:8a:df:05:ea:34:
86:14:99:c1:4b:af:93:f8:4f:73:3c:4f:6e:69:40:
0a:39:4c:66:01:5a:44:f5:3d:b7:0c:46:44:df:dc:
32:c4:7a:e1:bb:9a:3c:33:30:78:01:3a:2f:1f:e2:
a1:b2:f0:48:cb:02:5f:ab:02:46:22:fb:5e:b0:be:
55:39:46:56:db:76:6f:a5:86:4c:45:ba:ea:a7:9e:
0d:36:46:59:ca:0c:f8:f9:bf:5b:bd:0c:00:cd:23:
2e:05:5c:03:aa:9f:3b:d5:e1:de:3a:3a:5c:94:31:
50:84:54:26:af:45:3f:42:35:9b:8f:df:46:57:b0:
a6:51:35:e4:2d:5c:69:58:02:83:48:16:d6:d8:4b:
62:29:ce:63:ea:19:ee:62:13:a4:5d:87:dc:a1:9d:
89:7a:3d:45:c0:8a:67:f8:73:17:d3:3e:47:54:72:
57:2c:c6:bc:96:d4:47:6b:e6:e7:34:8e:1c:a1:77:
3f:66:29:38:73:d8:35:27:99:1d:f0:a1:5c:13:30:
7b:99:ba:da:dd:02:f5:68:7e:85:52:50:0b:16:05:
5f:33:c8:05:cc:fe:5d:8f:0e:23:da:6c:bd:10:16:
24:28:b6:1c:08:28:2d:6b:6d:7f:a0:87:b9:77:04:
dd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:85:93:10:DD:27:E1:CE:A0:B8:8B:ED:AF:08:04:91:72:5F:42:8F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aYWTEN0n4c6guIvtrwgEkXJfQo8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.96.0/20
Signature Algorithm: sha256WithRSAEncryption
16:44:e4:80:7b:4b:b3:39:59:da:f4:9c:73:71:1c:33:c9:65:
dc:f5:de:1c:e0:7a:e6:b6:8e:ca:d0:a0:18:b8:71:83:e6:32:
1b:c9:7c:5d:4a:42:6b:91:3d:5e:4f:74:7e:db:2c:f9:40:f1:
14:a1:a8:24:b7:5b:d2:39:5f:5f:93:11:e2:a9:b7:17:bd:34:
f3:f5:c4:d2:f4:5d:f9:7f:9e:2f:5b:63:49:06:f8:bf:42:36:
b1:b8:9b:47:25:e9:8e:2c:cf:b6:fb:a1:a8:4f:ef:42:22:46:
2f:1c:99:eb:0f:38:ef:10:39:04:49:0d:2f:7e:d9:7d:21:19:
42:3c:23:d4:24:0a:0a:48:e0:3a:2a:b9:ed:c8:6d:a0:a5:f8:
30:02:0b:45:21:1f:62:cc:9f:a3:d2:b7:92:de:72:96:aa:59:
9d:5e:ef:99:21:57:26:d7:fa:67:eb:62:63:50:2f:99:21:a7:
17:45:fd:80:f1:01:b7:c7:b0:fb:6c:be:2a:58:ab:b1:0a:be:
3c:dc:ae:86:21:ae:a8:ad:55:68:e7:07:f2:9c:e7:1b:4f:5f:
4a:37:a0:24:ba:6b:58:48:3c:78:7b:98:d0:bf:db:ba:e8:b4:
4d:99:fe:dc:4a:ef:a5:7d:29:47:63:26:6a:ba:a5:1e:32:67:
49:d4:09:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org