Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cAenY8qPnCFX0PlAKM-zeCYhmlA.roa
File: cAenY8qPnCFX0PlAKM-zeCYhmlA.roa (raw, json)
Hash identifier: aXnNlrMR4MYBJyfm/AnKnV0NJ+dtGgwPbZ1UQqcokEE=
Subject key identifier: 70:07:A7:63:CA:8F:9C:21:57:D0:F9:40:28:CF:B3:78:26:21:9A:50
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cAenY8qPnCFX0PlAKM-zeCYhmlA.roa
Signing time: Thu 15 Sep 2022 02:36:37 +0000
ROA not before: Thu 15 Sep 2022 02:36:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 61.60.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7007A763CA8F9C2157D0F94028CFB37826219A50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:7a:43:f4:26:9e:72:c1:73:27:eb:e6:d2:
be:da:a7:8d:54:d0:e1:b4:03:32:0d:9c:fc:1d:61:
98:4c:70:43:c8:52:fa:c7:fc:cd:ab:8f:fb:97:83:
f0:c1:14:e2:61:c5:13:e5:b9:e9:1c:48:9e:b7:91:
4e:72:c2:80:a3:8e:05:d4:26:94:ec:07:18:5a:97:
38:1e:23:59:a6:da:e0:29:79:dd:d2:af:b7:01:d3:
51:66:5b:1d:94:4f:e3:05:03:80:f9:f5:38:43:b1:
30:44:26:fc:57:60:46:b0:5b:f6:6a:b7:e0:53:4c:
3b:cb:57:23:f9:f6:b4:86:5e:ba:af:1c:fd:d0:da:
44:a1:3a:9f:12:d9:c6:73:51:47:3d:db:ad:81:d8:
de:b0:bd:d3:bd:ed:37:f7:42:84:e2:7b:af:9b:76:
bf:19:07:68:e3:c9:4b:c6:e2:cf:87:a5:bf:13:0c:
ef:e1:07:ca:3a:5e:05:41:42:e6:27:fa:b7:db:87:
90:21:b3:9d:53:25:a5:af:a1:01:67:56:a9:d6:e5:
ca:95:c5:0f:0c:df:7c:91:00:42:21:d6:eb:ab:b1:
85:51:83:e9:f3:4e:3e:8c:a7:50:8f:fe:ee:e6:20:
37:e2:4d:c0:66:2e:2e:e3:b8:6d:31:f9:3b:d8:9e:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:07:A7:63:CA:8F:9C:21:57:D0:F9:40:28:CF:B3:78:26:21:9A:50
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cAenY8qPnCFX0PlAKM-zeCYhmlA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.216.0/21
Signature Algorithm: sha256WithRSAEncryption
47:ea:00:04:c8:4a:46:9e:3f:b1:1d:6b:3e:92:c6:c6:b1:dd:
42:ff:28:bc:7d:e6:48:ab:4c:70:d6:be:5a:e8:46:69:8f:1a:
a8:9f:21:9d:56:fe:a7:f7:70:be:ff:38:ad:06:5d:86:be:c7:
3e:ed:e1:17:c3:37:7a:6d:d5:7b:70:c5:f9:31:d6:a2:75:e1:
ea:9c:4f:6c:bc:d9:04:d2:0a:00:75:06:08:b0:5b:87:e6:23:
a0:67:d6:a9:84:84:58:75:dd:b2:b3:ee:08:70:32:10:52:68:
af:7e:42:f5:ae:8e:80:61:5d:6d:e0:f5:f0:52:6f:c2:a0:1c:
d4:6b:bb:58:50:dd:4e:f9:a8:c0:ac:dd:94:c5:6d:b1:9a:bb:
fb:1f:0e:a9:7c:00:da:ca:31:55:8b:49:53:df:69:69:a2:2a:
c7:56:0c:5e:ba:b3:dd:3b:7d:c5:31:e7:ee:b6:34:13:b5:27:
67:f9:f6:5c:6a:e2:8c:94:c4:bb:e1:7d:a3:f8:69:21:87:43:
79:4f:c2:5b:65:e2:8a:c7:9e:ee:b3:64:f0:f5:7b:b0:b9:e5:
39:9d:78:a7:0c:21:7e:3f:2d:e2:6a:bc:37:98:04:ad:8a:51:
13:ef:64:94:2a:26:8a:bf:52:3b:43:f8:cd:18:a3:ec:02:95:
93:a4:9f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org