Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bgur1TD1LXmOEc2Mrppc6Ym5jTg.roa
File: bgur1TD1LXmOEc2Mrppc6Ym5jTg.roa (raw, json)
Hash identifier: qEyGA+iVi4HHyBeNQRNozQfhlw4uLitojxgPo3EEL2A=
Subject key identifier: 6E:0B:AB:D5:30:F5:2D:79:8E:11:CD:8C:AE:9A:5C:E9:89:B9:8D:38
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1540
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bgur1TD1LXmOEc2Mrppc6Ym5jTg.roa
Signing time: Fri 21 Oct 2022 08:50:47 +0000
ROA not before: Fri 21 Oct 2022 08:50:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 211.76.44.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5440 (0x1540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 21 08:50:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6E0BABD530F52D798E11CD8CAE9A5CE989B98D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:e8:9d:8e:1a:ae:75:a3:a5:f5:02:76:81:
d4:4d:25:a1:d7:f0:e2:be:a0:bb:ed:9e:78:27:39:
99:3a:1d:b8:f2:ad:2e:87:41:3a:6a:9f:92:b2:33:
ee:6c:db:16:19:f5:d2:92:1f:77:03:c1:74:96:5b:
f5:27:ea:a1:b6:d3:25:b2:82:6f:7d:ac:7b:34:42:
c4:20:cc:d9:4e:34:d3:7d:e7:0d:0c:bb:4c:4c:72:
89:7a:23:51:fb:8b:bd:a9:ce:ee:10:b2:a9:91:46:
d3:fe:05:27:25:59:4c:a3:1a:22:8a:dd:dd:c1:44:
9c:ff:a5:cb:52:57:13:80:72:c1:59:e5:a8:e3:9d:
2c:ef:a8:3f:93:e6:e2:45:8d:c2:c7:de:24:2b:91:
aa:c1:ae:ac:e6:b6:c8:2f:1d:44:14:4c:a4:4b:2c:
0e:5a:ac:30:69:04:ec:76:04:7f:26:f2:33:87:db:
2e:7e:bf:cc:ab:70:08:a4:0c:64:07:fe:dd:9f:89:
3e:c1:b5:03:45:a9:ec:15:ea:17:e8:82:7f:b6:69:
90:78:4e:eb:e3:ac:d2:44:35:06:8a:9c:66:d3:a2:
a8:24:bc:98:c8:b4:c7:44:a5:87:59:35:99:45:1c:
86:7c:80:c9:17:e4:ff:5a:76:1a:71:41:4e:f0:22:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0B:AB:D5:30:F5:2D:79:8E:11:CD:8C:AE:9A:5C:E9:89:B9:8D:38
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bgur1TD1LXmOEc2Mrppc6Ym5jTg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.44.0/23
Signature Algorithm: sha256WithRSAEncryption
19:6d:9a:df:48:9f:52:da:4e:b7:ff:c9:f0:23:6c:9a:87:63:
e5:a3:1c:a1:49:f4:48:3e:00:13:6b:8c:f8:75:d0:68:5f:e7:
bc:c8:c8:49:60:9b:a0:92:d2:a5:55:f5:f4:50:95:04:77:f4:
8f:3e:3a:af:c5:55:c3:10:9b:49:49:ba:aa:3a:b4:93:fe:b0:
c1:81:db:ef:e9:97:bd:c0:72:6b:48:50:5b:bd:a6:5b:88:1f:
83:db:a7:7f:45:b1:7a:f6:73:21:e6:0f:fc:7d:50:2b:e2:a6:
cd:c7:17:ad:6a:8f:e9:2c:da:f2:11:1c:ae:c2:9f:bf:2b:f0:
b0:bc:bf:8c:db:8f:47:65:42:ef:eb:ec:b5:48:3a:76:cb:74:
ae:be:7a:18:39:06:f2:23:f8:ae:0f:2e:14:30:4e:92:56:b5:
03:ed:90:97:28:61:c4:2f:9c:6e:ab:82:b2:b3:4b:2f:86:a5:
4e:55:60:83:59:43:01:b2:1e:c5:2f:52:2b:0c:f7:11:9a:52:
03:76:3c:ef:34:43:53:5c:56:60:b1:ff:1d:be:16:13:f4:2d:
16:6e:c5:06:f2:72:e5:4c:c5:14:e1:8a:0c:7d:79:f8:89:58:
d8:5e:e2:ff:f2:d6:14:51:aa:c2:71:fd:92:15:48:59:54:ad:
16:1a:9d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org