Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dlbFp2ae7lDjFKWwytsBYZTN8mg.roa
File: dlbFp2ae7lDjFKWwytsBYZTN8mg.roa (raw, json)
Hash identifier: OiPdFzdTrb5X/r0EjeeyOXqHlAGBwRGfblx5+PBkfS0=
Subject key identifier: 76:56:C5:A7:66:9E:EE:50:E3:14:A5:B0:CA:DB:01:61:94:CD:F2:68
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10EF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dlbFp2ae7lDjFKWwytsBYZTN8mg.roa
Signing time: Sun 07 Feb 2021 12:49:49 +0000
ROA not before: Sun 07 Feb 2021 12:49:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 211.76.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4335 (0x10ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:49:49 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7656C5A7669EEE50E314A5B0CADB016194CDF268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:87:8b:ab:2c:90:8d:17:f5:2d:03:aa:45:
0f:5f:4e:32:22:6e:2a:16:9f:af:fb:48:10:eb:75:
b1:a8:f7:e6:d1:e2:ce:dc:17:1f:ad:96:7e:d3:77:
22:f3:87:b4:2a:86:5d:e4:cb:0c:d0:a8:51:b1:9d:
f5:27:0a:dc:c0:fb:01:74:38:9d:28:3d:af:cb:81:
41:1a:69:15:4f:5f:53:93:08:c5:6c:06:2a:3e:69:
02:8e:cf:3b:95:49:6e:b7:9b:27:54:97:9a:d3:86:
36:9c:5c:53:94:2b:bc:7b:30:50:e2:cf:4b:2a:b3:
9e:a3:40:62:eb:6c:47:61:cb:0d:9b:aa:2d:96:7e:
69:18:36:54:2b:2e:ba:11:96:f4:d0:7c:f1:62:76:
cc:be:14:46:0d:49:50:3f:10:04:76:27:82:d9:91:
9d:67:be:65:8a:87:8b:e8:54:dc:38:40:3b:8a:1f:
de:2c:bd:a4:ec:eb:21:ad:2b:57:b1:f6:dc:03:5f:
ec:da:b7:7c:4c:80:ce:bc:f0:a8:4f:51:10:27:de:
bb:74:d8:99:3f:f7:2c:4b:60:b7:d7:62:bb:70:01:
7c:ae:a6:6d:6c:3b:38:73:88:99:67:c1:fd:c3:4e:
15:9e:ce:a4:3c:fb:e2:47:cd:5d:1c:da:80:2d:7c:
74:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:56:C5:A7:66:9E:EE:50:E3:14:A5:B0:CA:DB:01:61:94:CD:F2:68
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dlbFp2ae7lDjFKWwytsBYZTN8mg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:fc:d2:3a:f3:1a:b2:2a:ff:58:c4:9d:5c:ba:57:70:89:38:
9b:b9:4b:66:ca:7f:1c:b1:7e:d9:d6:dd:fd:33:c9:0d:fb:fe:
7e:6f:a4:06:24:57:03:bb:48:8a:9f:15:c2:b8:17:a2:43:ae:
72:3f:f6:f2:1f:d9:18:6f:8c:b3:7c:38:63:b8:0b:24:e3:c8:
84:35:3b:27:48:1f:be:fe:ef:99:ed:92:60:20:e4:03:cc:53:
84:9b:65:96:a0:34:06:15:03:ad:ad:cf:e8:74:6a:5b:52:80:
b3:ab:5a:d1:67:16:77:d2:e3:b1:99:15:35:bb:6b:15:76:27:
af:e5:05:97:36:cd:38:2c:5e:3e:63:cf:a2:2e:fd:b6:d0:f5:
b9:bf:a6:27:ba:f7:39:f6:d2:ae:b0:35:ab:71:78:f2:fe:32:
03:c3:57:fc:1d:ca:02:40:a2:36:9a:9a:22:a3:e1:d1:6b:3e:
fa:9b:e3:02:47:94:b1:92:a8:25:28:35:9d:cf:0f:ae:cf:88:
ca:d3:71:1c:19:35:27:8f:75:36:16:af:e7:af:54:14:38:d0:
38:df:db:b7:11:2e:81:f8:d0:b3:54:14:08:49:da:de:b5:ab:
1e:4d:db:fa:ea:61:83:11:7c:22:7d:81:6a:04:4e:64:b3:05:
fc:f0:8a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:50 2023 by rpki-client on console-fra.rpki-client.org