Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ibKscUkY6KA1Sc7lQxbqQeZgEE0.roa
File: ibKscUkY6KA1Sc7lQxbqQeZgEE0.roa (raw, json)
Hash identifier: op2p53E8t9bObt0VWKB9vWeEzxfZfNyCavgqRTkcSwA=
Subject key identifier: 89:B2:AC:71:49:18:E8:A0:35:49:CE:E5:43:16:EA:41:E6:60:10:4D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10E5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ibKscUkY6KA1Sc7lQxbqQeZgEE0.roa
Signing time: Sun 07 Feb 2021 12:49:34 +0000
ROA not before: Sun 07 Feb 2021 12:49:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 61.64.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4325 (0x10e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:49:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=89B2AC714918E8A03549CEE54316EA41E660104D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7b:1a:6f:a2:66:36:c5:21:88:33:ec:25:62:
e7:9f:f3:d8:5f:a8:9c:68:3f:02:cd:57:49:99:ef:
23:51:8b:32:cc:69:8e:a2:0a:5a:68:64:38:98:57:
91:d8:37:0a:d3:39:1e:cd:6f:82:c4:7c:28:ae:89:
33:77:ca:e7:04:1a:fc:7d:ef:36:f2:c0:a9:2e:2c:
56:94:b9:bf:44:59:48:bf:35:dd:76:9e:6c:79:47:
34:3c:32:cc:26:46:47:33:72:3d:b1:f8:0d:c9:5a:
07:b1:42:d7:6f:76:91:1d:b2:ba:a0:2f:49:c1:a5:
4b:4b:84:48:f6:ad:cc:41:c9:50:33:0a:ac:52:f6:
65:a1:77:5e:1d:51:a7:d8:5c:f8:1c:9a:fc:1a:cb:
66:77:50:07:d3:d6:8b:05:37:45:7f:87:2d:d5:64:
90:7b:06:4d:72:e5:d8:30:5b:b5:b7:f9:6a:a0:79:
e7:06:d5:98:10:c5:32:ba:9d:d6:b6:69:45:0d:a2:
e2:b7:da:5a:4d:68:11:b8:88:78:06:ec:49:40:4f:
cd:49:d5:d8:c3:d6:d9:d0:ad:67:3c:ab:5a:0e:e1:
29:14:18:23:7c:55:ef:a5:13:77:2a:af:e9:61:c5:
d1:5f:20:56:80:cd:8c:c2:3d:e0:47:d2:53:dd:3c:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B2:AC:71:49:18:E8:A0:35:49:CE:E5:43:16:EA:41:E6:60:10:4D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ibKscUkY6KA1Sc7lQxbqQeZgEE0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.0.0/19
Signature Algorithm: sha256WithRSAEncryption
7c:51:eb:e3:a0:25:c0:46:10:3d:88:6c:3a:1b:30:bc:56:f4:
0a:b1:4c:85:f4:71:64:46:fe:97:55:4d:c8:28:8b:8d:db:98:
a9:fe:05:48:92:7d:9c:50:86:6a:a5:f6:de:06:bb:3c:d7:84:
06:00:c1:c4:e2:ed:bd:c5:d8:89:c6:0e:12:c7:06:1c:b3:f1:
48:fe:cb:7c:49:41:49:df:49:dc:6b:1c:a3:e1:c4:7f:82:89:
75:84:39:f8:41:c6:97:da:e3:ea:44:0b:84:d3:69:16:4a:a8:
7a:61:9c:e0:c0:5d:32:38:2c:ee:2c:71:fe:bb:e5:ef:b9:d1:
b8:d9:3b:79:1d:28:71:27:9c:bf:91:b3:3f:39:1d:fa:f2:a8:
7f:f4:c6:4b:0b:9d:cf:6f:0f:f3:71:14:b3:a0:49:0e:09:ea:
46:7e:9e:ce:b3:7c:76:73:82:fe:74:34:9c:84:1a:0a:4a:4a:
cc:69:96:0f:78:06:b3:8d:4e:95:e5:69:20:bb:8e:12:d3:ea:
87:9f:52:dd:1a:22:35:13:32:0c:5c:6d:4c:2f:4e:b2:b1:4b:
f8:f8:b5:23:cd:d8:e5:1c:1f:e8:61:1e:49:ad:f2:37:8e:c8:
3d:b5:4a:2b:85:75:14:df:2f:18:eb:43:18:77:31:59:2c:5a:
53:15:53:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org