Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gRXBeWEjyc4URwnitUjMLM51YHA.roa
File: gRXBeWEjyc4URwnitUjMLM51YHA.roa (raw, json)
Hash identifier: pHazhks1+VEJEaXUbl6/0eRqHwFQlVx45PeYqkOl6/0=
Subject key identifier: 81:15:C1:79:61:23:C9:CE:14:47:09:E2:B5:48:CC:2C:CE:75:60:70
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gRXBeWEjyc4URwnitUjMLM51YHA.roa
Signing time: Thu 15 Sep 2022 02:36:28 +0000
ROA not before: Thu 15 Sep 2022 02:36:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 61.64.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8115C1796123C9CE144709E2B548CC2CCE756070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:2b:dc:89:d8:2f:36:8e:d8:f6:ce:e7:71:
37:b2:b3:12:80:a8:d0:58:a0:63:a4:cc:9e:26:d2:
de:75:6b:19:c1:39:74:12:f3:c8:ba:2e:f6:c4:a7:
57:cd:7e:55:f6:bc:ef:7f:95:65:55:1b:a4:98:14:
7f:5a:41:0f:8b:45:eb:1d:c9:6b:aa:db:7d:9a:ac:
e2:a9:92:18:95:8a:06:96:29:67:3c:6e:3a:21:34:
bb:5d:b1:6c:9b:4a:23:98:61:d9:bb:87:ec:2f:bd:
27:ab:7c:64:fc:9b:8d:52:e6:3f:a8:e9:23:c8:5f:
6b:c2:b1:07:f6:e8:c8:91:7c:a8:80:8f:70:25:e4:
45:72:a3:8c:46:86:f0:b3:a1:9b:7a:b3:07:1f:d1:
bd:1c:04:7f:a8:9d:de:b8:50:fe:41:bc:7d:9e:ef:
6a:8b:1c:06:85:13:d5:39:ca:d9:38:24:98:ef:5c:
5a:b1:62:45:4e:f8:08:f1:03:cf:4c:5f:f3:68:32:
70:ee:7b:7f:fd:23:3b:e3:73:b7:09:9c:5a:74:ca:
e8:84:9c:cd:fa:17:37:eb:1a:1e:6b:31:fd:0e:17:
bd:d5:bb:f2:6a:e7:57:7f:2a:f4:7d:e4:d5:cd:66:
73:be:a7:df:81:c8:3c:00:2d:8e:30:da:6b:18:69:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:15:C1:79:61:23:C9:CE:14:47:09:E2:B5:48:CC:2C:CE:75:60:70
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gRXBeWEjyc4URwnitUjMLM51YHA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.16.0/21
Signature Algorithm: sha256WithRSAEncryption
81:aa:80:e7:a6:66:50:72:c4:e9:e1:48:fb:3c:a9:4e:ad:da:
f9:13:45:3f:1f:66:8b:ce:b8:d1:13:1b:4d:86:d5:4d:98:89:
0c:62:cf:ec:b2:02:47:ee:c2:4e:82:d0:4d:f3:d9:ae:7c:42:
c5:cb:05:27:82:8f:97:25:b4:02:95:68:d3:b3:65:9c:7f:12:
06:28:3d:b4:e6:de:a1:a4:93:de:64:66:ac:9b:81:ac:34:2e:
81:79:30:e1:b8:87:ef:66:55:55:4e:2e:c5:ee:3e:76:4a:5e:
c0:71:76:25:9d:71:bd:66:21:5e:c8:34:cb:f2:4a:4e:84:99:
c9:0e:0c:d6:a8:e8:3f:a1:06:2b:e9:9c:91:0f:7a:ed:85:e0:
93:d9:bc:c8:fa:b4:c8:c4:90:39:54:cc:5a:b0:9f:8c:b2:3c:
36:cf:7d:47:96:97:7f:63:e0:b2:28:80:cb:37:75:ea:42:10:
b4:e5:b5:29:e5:ac:11:8e:94:e2:49:3b:42:7c:34:26:32:47:
ad:9a:31:29:83:92:cd:2d:5d:8c:1b:73:da:a7:4b:d1:1a:69:
0b:e8:ed:7d:7f:5c:86:0a:fc:21:d4:38:dd:e1:25:19:b6:5f:
93:94:e8:16:77:6f:4f:8e:a1:4b:44:ac:df:3b:c3:89:23:69:
78:97:b1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org