Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b6vRSpHszHMxdBVi3Tt8nFPiSwM.roa
File: b6vRSpHszHMxdBVi3Tt8nFPiSwM.roa (raw, json)
Hash identifier: aE03pIemDdceb8Coq5oIK27AUifdngZ3sKCb1ZupK8s=
Subject key identifier: 6F:AB:D1:4A:91:EC:CC:73:31:74:15:62:DD:3B:7C:9C:53:E2:4B:03
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1995
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b6vRSpHszHMxdBVi3Tt8nFPiSwM.roa
Signing time: Sat 22 Oct 2022 06:06:43 +0000
ROA not before: Sat 22 Oct 2022 06:06:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 211.76.48.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6549 (0x1995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6FABD14A91ECCC7331741562DD3B7C9C53E24B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:26:dc:1c:26:17:b7:1a:a1:e0:28:cc:3c:
34:e5:38:0f:d9:79:77:a6:15:a7:ec:a5:cf:90:b1:
4e:f0:8d:f6:da:cc:d9:f9:5b:8f:01:89:70:d1:f0:
20:28:a5:0d:aa:45:64:a5:e0:c5:fd:6e:23:a2:aa:
63:c1:eb:00:b5:c7:7c:b9:ad:e6:94:d3:fe:cf:0a:
cd:ae:5b:74:03:b1:c2:e7:6f:0d:fb:0a:27:13:80:
84:85:f1:e2:f9:be:49:63:d4:05:3b:58:f2:d9:e7:
5b:5e:95:f8:27:40:37:6b:cb:fc:ec:24:18:6c:cb:
dd:19:0b:00:bb:33:0c:3a:c5:8a:c4:84:9e:8e:f2:
99:c7:15:06:63:9a:a6:0b:eb:89:2d:85:ca:86:9d:
d8:88:1f:66:9e:66:a5:1c:3c:cd:29:91:2e:90:ab:
d5:ab:aa:26:a8:bd:7d:77:1d:01:88:5e:11:c2:e9:
42:d0:d5:45:e6:e5:09:22:76:2e:57:f2:9b:7c:ed:
5d:61:4d:54:be:c9:76:2c:f9:26:05:d7:42:6c:b8:
d7:a5:ad:a0:0e:74:e4:41:03:fe:04:09:28:ab:16:
a1:e8:8a:54:64:41:50:78:29:5c:57:56:fa:75:f1:
94:36:17:08:c5:3d:5e:84:8b:b4:14:e2:df:2e:3a:
8f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AB:D1:4A:91:EC:CC:73:31:74:15:62:DD:3B:7C:9C:53:E2:4B:03
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b6vRSpHszHMxdBVi3Tt8nFPiSwM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:34:89:16:98:0b:09:7a:71:c8:52:1f:24:4b:53:dc:0f:2d:
c4:e2:b2:b9:95:8f:d8:0e:c8:78:d7:ad:fa:a4:bb:5c:b2:83:
03:78:16:a8:9f:4e:84:12:30:0d:db:57:22:76:33:3c:32:62:
d6:91:ad:87:6a:a6:3a:67:4b:e2:51:05:c8:11:64:2c:c6:16:
4e:91:49:bf:f8:96:2f:3a:50:17:9b:61:83:be:7f:9a:49:71:
8b:87:6c:98:f7:ce:ef:5c:a9:99:fe:fd:17:47:5b:ac:7d:48:
d5:2e:bc:17:aa:25:d8:90:79:8b:40:95:94:47:94:1f:97:c9:
21:9b:f9:97:a7:a9:21:b6:d5:6d:46:66:c1:cd:c3:89:6d:77:
27:26:32:8b:e1:74:fd:a7:7f:33:05:b6:6c:d0:34:be:a8:c1:
91:24:70:bc:09:48:9b:ac:10:54:55:5a:c1:1a:05:cd:bd:f9:
a3:ae:a7:b0:4b:6f:d5:bb:61:e6:38:1d:12:16:b2:9f:1f:52:
c7:e6:d3:52:b3:ac:63:5c:7a:46:4e:09:90:e0:aa:79:a9:5f:
0e:8e:c1:d2:30:9f:b7:5c:0d:81:64:cb:ca:17:26:d1:80:49:
95:a5:d9:b7:84:2f:c9:fd:54:13:b8:c5:9d:71:fc:2a:40:a5:
fe:bd:3c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org