Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jnwuB94QjGJiJCU4PqE9wTrHXKw.roa
File: jnwuB94QjGJiJCU4PqE9wTrHXKw.roa (raw, json)
Hash identifier: etKziy8URe3SAWl4w/F9Fc7ORaG2o5FBWYVj0Ly4mD8=
Subject key identifier: 8E:7C:2E:07:DE:10:8C:62:62:24:25:38:3E:A1:3D:C1:3A:C7:5C:AC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1905
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jnwuB94QjGJiJCU4PqE9wTrHXKw.roa
Signing time: Sat 22 Oct 2022 06:06:00 +0000
ROA not before: Sat 22 Oct 2022 06:06:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 211.76.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6405 (0x1905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8E7C2E07DE108C62622425383EA13DC13AC75CAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:2b:e6:4b:b2:1c:51:8d:6f:97:72:32:4f:
0c:a3:c3:aa:b5:62:8d:f6:fe:7d:c2:e8:85:c2:23:
ca:22:fa:a6:69:19:67:e3:89:30:c4:65:5e:be:de:
ac:23:a2:a4:11:88:d6:8e:04:f3:ae:b6:8c:a2:31:
57:d6:dc:2c:04:0e:d8:ef:b2:2d:2c:ef:41:27:ab:
05:a4:fe:bc:9e:1c:05:de:ec:77:57:30:e7:41:48:
87:21:f5:57:81:9c:e2:a1:9b:87:26:6b:49:e2:cc:
c9:33:f8:ac:81:43:ac:41:10:4d:c7:fc:9b:8e:79:
f2:ef:b0:03:4e:e8:50:a3:14:55:73:f4:58:84:9b:
4a:e9:a3:1b:10:5c:b3:95:b1:b8:98:e4:07:b0:4b:
95:c0:6c:84:fa:b6:71:a6:f4:93:64:74:c4:ab:6b:
71:52:61:e8:b3:0b:11:c0:8a:55:27:86:25:3c:a8:
a1:91:27:fc:94:b8:5e:ed:33:88:7f:18:e6:d9:c2:
41:07:1f:54:cd:9a:1f:df:4f:53:75:58:91:98:2c:
46:86:3c:1c:0d:b5:bd:5c:2f:64:a3:41:b2:ff:9b:
75:10:51:1a:da:0b:ef:10:72:22:7c:70:ca:d4:6a:
ac:fe:d5:db:72:59:33:cf:9d:0c:9d:2d:a9:da:0e:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7C:2E:07:DE:10:8C:62:62:24:25:38:3E:A1:3D:C1:3A:C7:5C:AC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jnwuB94QjGJiJCU4PqE9wTrHXKw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.64.0/20
Signature Algorithm: sha256WithRSAEncryption
28:ac:14:1f:81:9a:43:39:4e:70:6f:9f:e3:6c:e3:f3:f9:b5:
ec:13:a8:0a:b6:9f:f0:c2:d2:69:9d:6e:29:fa:1f:73:86:00:
da:2a:72:51:0f:9d:1d:e9:fd:49:97:86:34:49:44:aa:89:d0:
c0:b9:5e:36:b1:b5:10:d4:75:9d:0d:24:f2:bd:96:08:19:8e:
99:3c:60:b9:3d:f0:ae:f7:9c:ae:cc:96:bc:29:23:43:4e:33:
a9:21:46:db:94:69:15:6a:1c:17:de:6f:40:c9:33:27:11:ed:
8e:e9:c6:3d:a6:1a:c8:32:2d:1d:ab:6e:75:33:51:d7:60:b6:
6b:24:04:9d:4c:8f:a2:b1:ff:4f:0d:c5:c5:b0:7b:3a:1b:70:
97:52:8f:58:99:0c:0d:36:d7:e1:d0:1c:fa:78:94:2e:4f:98:
75:ed:cd:7c:40:14:b6:4c:71:20:22:9e:2f:25:6f:43:7b:c2:
a9:6f:7f:16:13:f1:3f:02:38:87:35:18:39:bf:65:b5:dd:a7:
28:64:f6:2e:b5:b7:03:f9:e2:03:6c:d8:84:8a:f2:23:e9:c0:
32:d5:9c:e4:82:19:38:2d:25:ae:da:5c:03:51:28:e0:5f:93:
bc:85:2a:47:63:3d:d0:4a:ac:7a:47:37:23:d8:b7:ee:5e:dc:
f2:45:cb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org