Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gZv0yzXjCzBOZNwHSTPHtZ6icu4.roa
File: gZv0yzXjCzBOZNwHSTPHtZ6icu4.roa (raw, json)
Hash identifier: ZaJUjr6NikS2NWshLqMEwkXrbTt/25Tlsi54Tkg82uw=
Subject key identifier: 81:9B:F4:CB:35:E3:0B:30:4E:64:DC:07:49:33:C7:B5:9E:A2:72:EE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A1A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gZv0yzXjCzBOZNwHSTPHtZ6icu4.roa
Signing time: Sat 22 Oct 2022 06:18:19 +0000
ROA not before: Sat 22 Oct 2022 06:18:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 61.64.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6682 (0x1a1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:18:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=819BF4CB35E30B304E64DC074933C7B59EA272EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3c:79:f9:94:45:b3:39:51:cf:0d:ec:1d:3b:
3f:73:0e:2c:ce:17:26:79:ec:2e:f0:b1:96:a3:aa:
4a:63:38:89:0b:58:b6:7b:0b:7b:df:4d:7e:39:8e:
36:bf:9f:37:30:17:ee:40:c8:f2:c9:98:1c:54:71:
b0:0b:a2:d2:b6:95:53:4e:c9:25:ef:2a:57:7b:17:
bd:42:57:c4:71:21:2f:a7:4c:9c:ad:34:5f:6c:49:
fd:b4:70:fb:9a:6e:2b:1b:8b:f1:39:70:dd:3d:ef:
26:72:ea:01:f9:c6:c9:36:f7:be:67:73:bf:a8:92:
e5:14:82:fe:aa:ee:bf:aa:8c:c0:dd:59:50:54:4c:
63:2b:85:98:a8:ed:44:94:89:bb:42:58:b5:34:90:
1f:2c:03:5e:28:3e:99:15:17:12:2d:67:bd:ff:a9:
74:a1:06:8f:e4:f7:83:3b:2f:c6:c2:37:b6:b7:6a:
de:0b:92:e9:9d:a1:d2:53:70:0f:25:27:a3:7b:50:
1b:68:cc:30:c4:a4:11:00:2d:90:d0:33:5d:da:84:
c6:af:39:d8:fa:66:4e:bf:74:7c:95:ec:ba:2e:58:
ff:c6:c9:df:f0:1b:97:a0:ac:9f:75:ad:6e:db:d8:
f9:45:9b:6a:67:d2:50:6c:ca:27:60:65:74:57:2f:
99:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9B:F4:CB:35:E3:0B:30:4E:64:DC:07:49:33:C7:B5:9E:A2:72:EE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/gZv0yzXjCzBOZNwHSTPHtZ6icu4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:a0:94:76:de:5d:8b:84:6b:31:40:ed:fa:87:c0:75:06:75:
02:d1:36:06:b1:7a:65:90:be:ab:8c:91:f6:8f:32:96:51:e2:
29:6d:4f:1c:2a:b8:74:bc:bf:1a:30:30:8e:11:d2:59:ec:25:
9d:06:b7:49:2f:ff:a4:ee:36:a9:cf:d2:8c:15:56:65:c2:29:
dc:25:fb:d7:a4:45:62:3b:de:d8:60:ab:82:41:a6:88:c6:42:
7b:c3:18:26:66:87:1c:55:77:7d:4b:76:1f:fe:05:b0:a6:b9:
60:3a:23:75:64:9d:94:cf:62:89:a0:17:7c:ca:06:cb:43:fd:
a2:b2:f7:cc:b0:e3:9b:12:7c:1d:3a:d1:75:88:87:14:47:f3:
3c:b8:a5:be:94:45:b1:7c:e1:89:9a:27:75:c8:40:78:79:ef:
9a:6a:c4:ac:6b:d3:6f:36:5f:85:16:ca:c0:52:0a:df:8a:c8:
90:0d:8d:63:4f:08:0c:1a:1d:c1:93:36:55:d9:85:b6:9b:ad:
8c:9c:f3:52:38:85:4e:cc:fa:22:d9:ca:3e:4c:dc:42:34:53:
f2:78:0b:b7:ac:ab:17:65:d8:b8:73:7b:60:12:4c:9b:ef:c0:
cb:9b:d5:b9:67:6a:01:b8:dc:d3:50:48:5e:75:9f:52:54:65:
eb:60:64:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org