Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hTczQQV3Qesi6XZ58_RnYuwbDmU.roa
File: hTczQQV3Qesi6XZ58_RnYuwbDmU.roa (raw, json)
Hash identifier: FN2t9vWn1LEtnQ4kt4jqEM+HbxKTHu2bk+UldnGNcHg=
Subject key identifier: 85:37:33:41:05:77:41:EB:22:E9:76:79:F3:F4:67:62:EC:1B:0E:65
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10BD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hTczQQV3Qesi6XZ58_RnYuwbDmU.roa
Signing time: Sun 07 Feb 2021 12:47:38 +0000
ROA not before: Sun 07 Feb 2021 12:47:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 211.76.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4285 (0x10bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:47:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=85373341057741EB22E97679F3F46762EC1B0E65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:3e:ff:ed:19:11:9f:d2:86:83:0f:ec:df:
0e:fd:91:15:1f:cd:96:ca:4b:31:85:b6:9b:89:c2:
98:a8:88:69:46:83:4e:5a:d9:37:df:81:83:11:31:
1c:03:bd:fc:18:d3:2f:d0:2f:3f:77:a6:86:8f:c6:
02:c0:a3:61:f4:19:f5:cb:e3:e5:cf:6d:21:e7:50:
98:fb:bf:d7:41:ce:71:47:7e:80:9d:39:44:97:a7:
c4:e3:e6:4f:36:76:5b:a6:e2:54:5c:b9:d5:1a:83:
77:fa:f6:66:d7:f6:27:a3:51:68:d2:6d:8f:a1:7e:
29:28:2e:bf:e7:4a:c6:46:6c:4a:c0:dc:cc:28:cd:
95:2a:64:75:d8:ce:56:43:17:b8:9b:2a:57:ff:04:
6d:ff:70:fd:37:5d:18:cb:58:90:a2:fe:85:06:b5:
f5:d0:e9:82:1e:7d:c6:57:90:93:2a:79:2a:d8:ce:
9f:91:19:85:45:93:5d:02:3a:97:20:a8:50:c7:c5:
da:b9:04:c1:d1:9e:4c:a5:18:b1:60:09:2a:6f:4a:
40:e3:82:8e:82:9d:1b:70:f6:fd:3c:08:9b:5b:83:
7c:dd:ee:74:25:36:4a:e2:51:39:db:22:eb:4c:26:
38:da:b3:48:d3:bd:3b:c0:f5:c7:4d:eb:9b:11:89:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:37:33:41:05:77:41:EB:22:E9:76:79:F3:F4:67:62:EC:1B:0E:65
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/hTczQQV3Qesi6XZ58_RnYuwbDmU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.78.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f3:ab:cb:90:74:91:01:3e:6a:53:d5:40:f8:a0:e1:9c:65:
c6:9f:19:31:af:1e:3b:b2:cc:3f:92:3a:d5:c5:ac:25:1a:d7:
ad:e6:46:69:7a:7d:24:28:ad:7e:c6:cd:86:93:26:da:dd:4f:
9f:93:47:be:02:82:dd:6c:84:55:b4:79:00:61:03:8d:08:08:
a3:6d:9f:a2:bf:34:29:83:43:94:e1:37:ca:5e:af:f9:75:80:
2c:71:c5:37:44:60:ec:94:05:00:21:7a:4f:18:fd:8f:07:95:
83:d7:04:e5:bb:c8:a5:32:4a:d4:51:91:84:cc:6c:6a:b1:8c:
fa:71:e7:32:b5:9d:f5:45:f1:10:c5:d3:0e:6f:3e:87:91:ab:
67:8a:91:90:5b:5e:05:c9:c9:27:e7:43:5a:71:d6:48:be:be:
90:28:5a:02:58:80:2e:9e:a8:23:38:89:99:19:cc:90:a0:65:
8c:77:df:c4:cf:63:53:83:a0:a8:20:ea:ae:dd:f4:f2:83:ec:
95:db:9e:56:f3:80:85:a2:ce:75:25:5c:33:7f:87:51:24:b0:
ff:8d:3c:06:1d:c5:80:5c:f0:18:10:5f:76:c0:58:fe:72:ea:
8a:31:b5:c1:9b:88:8e:d1:c3:cf:de:34:6e:99:bf:f7:08:51:
8f:32:ae:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org