Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j2VZd1qSAiZzpozKWJ7U_O8UZWA.roa
File: j2VZd1qSAiZzpozKWJ7U_O8UZWA.roa (raw, json)
Hash identifier: O0fqOxracIUi9GoJ5LuzZQYJtralHVALajF16tqXgWc=
Subject key identifier: 8F:65:59:77:5A:92:02:26:73:A6:8C:CA:58:9E:D4:FC:EF:14:65:60
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 134C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j2VZd1qSAiZzpozKWJ7U_O8UZWA.roa
Signing time: Wed 29 Sep 2021 02:55:36 +0000
ROA not before: Wed 29 Sep 2021 02:55:36 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 61.64.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4940 (0x134c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:36 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8F6559775A92022673A68CCA589ED4FCEF146560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f3:c8:39:c6:f2:5f:a3:0d:53:b6:b4:57:90:
12:7d:a8:5c:49:30:40:41:62:e1:fe:92:94:e5:7c:
bc:32:9a:8b:3f:c2:52:a8:c6:50:2c:cb:dc:b8:a4:
cf:ca:0b:30:9d:98:4b:6f:78:da:e6:e2:c5:16:0c:
83:49:74:de:d3:94:e0:8a:83:b9:45:41:ab:3e:36:
50:84:08:63:1b:2e:e1:2c:a5:54:d2:08:d4:fc:81:
67:ae:89:b1:82:ff:49:f1:61:ac:e8:31:fc:f7:62:
a8:98:2f:ae:12:4b:3f:8e:e9:91:04:d0:7b:71:e4:
7f:3a:c0:5c:e0:ac:30:23:c6:66:61:93:6d:7a:48:
c5:27:ef:c2:87:5f:ab:e3:b2:87:b4:0e:b9:76:03:
da:fc:b8:6a:0e:85:8f:9e:44:d8:68:3a:1e:8e:b4:
98:a9:6a:ec:f9:61:36:94:1c:da:14:1b:df:22:01:
67:df:cf:99:93:1e:d8:2a:39:e6:77:57:40:82:93:
ea:93:4b:6e:60:33:19:2f:22:88:5c:b1:3b:6d:9f:
fc:77:45:03:56:a1:ef:aa:25:95:c4:39:53:d2:8d:
71:8b:72:47:7a:a4:ee:98:e9:65:ea:e5:e2:dc:00:
28:33:55:1e:97:e9:ed:38:59:ee:5c:e0:cc:0c:9d:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:65:59:77:5A:92:02:26:73:A6:8C:CA:58:9E:D4:FC:EF:14:65:60
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/j2VZd1qSAiZzpozKWJ7U_O8UZWA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.28.0/22
Signature Algorithm: sha256WithRSAEncryption
10:c1:87:83:e2:cb:61:79:bd:7c:a9:80:41:72:bd:50:d1:1b:
c6:ca:a4:a8:d8:ca:41:a9:95:9c:29:ac:53:5e:d9:10:d7:dd:
bd:f2:9f:85:f6:8a:7f:a8:d9:07:05:07:04:a2:4f:2a:dc:98:
d3:35:15:be:47:6b:fe:79:48:ac:15:78:0f:7b:90:7b:bc:9a:
04:49:a6:b3:6e:00:f6:4f:c3:af:f5:11:e5:2d:c4:56:da:0f:
9c:2d:7b:9d:ce:30:90:24:c2:31:62:dc:51:25:d0:58:08:45:
18:33:9c:2b:bc:83:f9:15:f5:bd:35:f1:5c:a5:13:ab:d6:92:
d0:7e:b7:ed:b2:83:d1:8b:40:06:7d:49:75:bf:76:38:fa:15:
7e:f5:64:22:5a:53:73:87:30:cf:3b:3e:3a:85:78:37:ba:67:
7e:9f:9b:68:11:25:e7:b6:50:61:2c:fb:e6:b8:90:df:47:75:
e8:86:84:8b:80:e6:f5:13:d9:f0:01:d4:2f:65:9c:3a:9e:e5:
13:b0:9c:fd:ad:86:f0:9d:5c:10:78:e4:18:df:ec:b3:b3:22:
f5:ef:b6:6d:ff:96:90:57:44:6b:ca:ab:7d:b0:da:54:ce:7f:
54:a2:b0:d3:07:a7:eb:47:7d:95:28:9c:31:86:02:62:df:33:
aa:8d:4b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:39 2023 by rpki-client on console-ams.rpki-client.org