Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bg3p8avC-7hxlwPRoZ0zpTqxFCE.roa
File: bg3p8avC-7hxlwPRoZ0zpTqxFCE.roa (raw, json)
Hash identifier: WnhGHJv5IiZxKBKQ4dh0L7l9/J7erP9WQNKb4lFNCdw=
Subject key identifier: 6E:0D:E9:F1:AB:C2:FB:B8:71:97:03:D1:A1:9D:33:A5:3A:B1:14:21
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E34
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bg3p8avC-7hxlwPRoZ0zpTqxFCE.roa
Signing time: Fri 01 Sep 2023 10:15:47 +0000
ROA not before: Fri 01 Sep 2023 10:15:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.58.120.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7732 (0x1e34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6E0DE9F1ABC2FBB8719703D1A19D33A53AB11421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:3d:1c:78:b9:cf:a2:d4:b1:53:5e:76:ad:
18:0e:64:dc:49:35:98:75:0a:7d:e0:73:11:f4:d7:
0f:69:bc:28:1f:70:f7:ff:a8:1a:72:74:cd:af:65:
98:35:68:10:d9:04:5a:54:d0:e4:80:87:c9:63:27:
46:e8:3c:59:19:0e:cb:dc:1a:0f:4c:c3:59:fe:cf:
c6:39:a8:61:44:75:4c:3c:67:91:c3:7b:88:09:7c:
3b:be:e9:52:1d:ec:48:02:24:f1:cf:32:4d:7c:8d:
67:0c:bf:0c:87:a5:c8:a9:35:fe:18:0e:c6:27:26:
49:4b:03:c6:ba:cc:a4:ee:be:6f:55:29:cf:e6:d6:
5b:95:ae:73:7a:86:c9:13:68:4d:66:77:33:05:4f:
e6:43:62:1e:df:a5:1e:8c:01:ca:85:6b:68:7f:ba:
56:1b:ac:07:b5:94:11:d4:aa:87:61:2b:83:89:f1:
d7:c5:9d:b2:c4:01:ed:82:d5:1b:22:4a:53:42:15:
60:c0:bc:7e:f0:3c:57:f8:19:4a:43:6b:07:01:af:
b8:01:5a:28:ee:cd:5f:f8:1b:16:39:49:14:ab:86:
f8:64:5b:67:aa:56:55:61:9b:01:c9:4d:24:71:a7:
62:d1:4f:73:0b:cb:dd:b7:c4:7b:13:32:e4:16:c3:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0D:E9:F1:AB:C2:FB:B8:71:97:03:D1:A1:9D:33:A5:3A:B1:14:21
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bg3p8avC-7hxlwPRoZ0zpTqxFCE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.120.0/23
Signature Algorithm: sha256WithRSAEncryption
75:9d:66:54:33:d1:0b:de:61:b1:04:47:f4:db:15:44:e9:51:
8c:fd:20:ed:42:da:09:3a:ff:b9:92:d9:cf:39:59:e6:1a:83:
86:9a:05:dd:71:16:d9:8b:a8:94:d6:5a:df:a2:2f:86:da:7a:
16:38:16:63:a4:11:39:a8:df:1b:a3:e4:6f:cf:33:75:d0:74:
b3:65:3d:67:07:2f:4c:e5:26:9a:4f:d8:8c:87:d1:02:9e:b5:
51:7a:49:98:75:1e:ac:d8:21:4b:cf:e6:c1:f9:01:8a:14:3e:
05:6b:d6:15:c9:24:70:e2:14:00:23:03:1b:4a:c4:98:75:11:
5b:9d:09:08:1d:43:05:ea:81:2e:d7:4c:84:6a:54:91:26:3a:
db:96:cb:f4:a1:be:58:bb:a5:5b:17:c5:49:10:13:67:1e:1e:
64:27:8b:1c:af:d5:21:30:ff:3d:da:2b:4f:56:e1:25:9c:55:
be:11:94:b5:18:da:1d:4d:2b:ce:9e:52:27:29:4a:7a:37:2e:
46:e4:b6:23:c5:88:cf:5d:6b:aa:54:e1:84:e6:9e:9c:bb:8b:
63:ce:93:3d:bb:af:97:97:37:ee:15:b6:0b:91:da:ce:93:df:
62:d0:16:3b:4d:3b:06:b7:29:d6:40:7f:ad:c2:c3:30:48:f9:
72:2e:cd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:10:50 2025 by rpki-client