Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gSQwR01WcGBiTfXtASTK5uxvqpI.roa
File: gSQwR01WcGBiTfXtASTK5uxvqpI.roa (raw, json)
Hash identifier: jkokeAz9CTPGO2gWF1xY28zSjJgTUDi8s1MGymxsfuE=
Subject key identifier: 81:24:30:47:4D:56:70:60:62:4D:F5:ED:01:24:CA:E6:EC:6F:AA:92
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10DF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gSQwR01WcGBiTfXtASTK5uxvqpI.roa
Signing time: Sun 07 Feb 2021 12:49:25 +0000
ROA not before: Sun 07 Feb 2021 12:49:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 61.58.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4319 (0x10df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:49:25 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=812430474D567060624DF5ED0124CAE6EC6FAA92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:f2:bb:58:5c:23:ad:ff:ae:5d:e4:33:74:
c5:2b:16:b4:ca:c3:3f:66:2d:7f:a6:14:f6:74:61:
3d:b4:eb:09:e7:e7:b4:46:45:42:e9:8e:8b:13:be:
07:3f:46:9b:65:20:ee:97:a6:df:55:32:21:5d:e1:
86:f5:c2:2b:90:c3:b9:5b:a6:58:aa:f2:cd:5f:d3:
e7:a7:01:2a:bc:d3:94:74:50:59:d5:52:72:26:b1:
45:82:f1:65:1c:42:3d:4c:0c:19:88:cd:b1:77:b9:
45:a8:1b:1e:25:4b:f7:9a:99:27:c5:c4:b4:76:3f:
e8:27:e3:04:f6:96:c3:b9:c4:69:54:4c:df:e0:c8:
1e:3c:8a:40:3f:08:96:9f:e8:e2:28:c7:28:af:f6:
48:15:4f:8c:f8:5e:65:e1:a8:5c:46:b8:b4:b3:74:
a1:23:38:f4:54:ec:3f:6b:7d:cb:7a:13:67:30:b4:
c7:95:f5:07:fb:d4:4b:47:78:47:31:19:ae:f0:81:
ea:22:68:35:56:2e:6a:8c:87:db:2d:27:70:7e:f4:
ee:73:54:cb:e3:a2:ff:ff:16:94:d6:d4:5c:19:a6:
2f:10:6a:23:5d:85:5a:ec:69:40:ff:c8:9a:e4:2d:
ac:64:e5:db:73:db:db:27:07:a1:6f:b6:5a:73:87:
e9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:24:30:47:4D:56:70:60:62:4D:F5:ED:01:24:CA:E6:EC:6F:AA:92
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gSQwR01WcGBiTfXtASTK5uxvqpI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.112.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:3a:17:a4:c1:7a:0a:a9:60:83:fb:64:21:3f:0d:bc:de:94:
f4:52:a1:58:c5:79:11:2d:50:34:02:3d:f7:4f:76:c4:4f:5b:
1d:ca:d2:05:e5:d2:91:1d:b8:32:83:e1:a3:0d:87:cf:0f:01:
ec:24:9e:54:89:82:03:bf:57:b4:03:aa:e9:dc:e8:dc:5b:61:
24:f0:7e:3f:36:50:3c:66:2a:50:3a:d1:17:a6:27:f7:e9:27:
48:df:5a:9d:73:22:03:8e:53:de:44:5d:08:87:72:0c:fd:db:
ab:0a:63:61:0f:b3:f1:a4:d2:c4:dd:ca:2a:67:ec:97:c8:99:
9d:e4:5a:52:e7:60:69:28:45:fa:61:a2:e2:b4:46:d7:72:88:
4f:c3:e4:00:e3:71:dd:30:2c:6f:ff:1b:e5:7e:f2:05:57:ab:
4b:b5:a2:6a:6e:e1:51:72:0d:58:b3:48:fb:13:85:c8:ce:fe:
cd:91:95:93:79:d1:0e:28:81:16:79:a0:52:10:b0:7e:fa:c4:
29:93:20:09:f8:82:9b:86:c1:ff:40:39:67:86:7b:2e:c8:1f:
e7:cc:91:13:03:86:35:c0:cf:66:15:ef:39:24:e5:60:19:df:
53:f1:3d:81:e4:8e:ec:dc:c4:c8:c6:bf:fb:59:aa:74:67:11:
2f:2c:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org