Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/krT0tuAaB_Mpbd8-kVPkzIah6cU.roa
File: krT0tuAaB_Mpbd8-kVPkzIah6cU.roa (raw, json)
Hash identifier: HzjQOslJXujSRPDPxCm2N9+HnL5gAYeAfFKpBtxjndU=
Subject key identifier: 92:B4:F4:B6:E0:1A:07:F3:29:6D:DF:3E:91:53:E4:CC:86:A1:E9:C5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 127A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/krT0tuAaB_Mpbd8-kVPkzIah6cU.roa
Signing time: Wed 29 Sep 2021 02:54:37 +0000
ROA not before: Wed 29 Sep 2021 02:54:37 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 211.76.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4730 (0x127a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:37 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=92B4F4B6E01A07F3296DDF3E9153E4CC86A1E9C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:8c:d3:52:d6:af:a7:72:3f:43:06:27:68:
7c:42:67:aa:67:b9:5a:59:25:f3:05:5f:e4:f1:12:
da:07:49:b8:24:ac:f2:df:43:bc:5b:3d:0c:0b:9a:
87:3b:d5:ef:6e:d0:ed:a8:73:69:ce:09:87:47:d0:
be:ba:4b:e2:fd:7f:ea:82:69:fe:3c:7c:2a:dd:c0:
d9:22:0b:bf:34:20:66:e8:e8:a5:93:92:48:e7:28:
b4:1e:4c:5a:7b:5d:9d:3a:1d:3e:31:d6:bb:29:18:
49:59:91:32:67:f7:0f:97:0e:a3:76:eb:de:61:59:
e7:5e:35:0b:9d:57:5f:18:c6:20:a4:7f:b2:ad:05:
e8:e3:69:5c:86:01:50:8d:86:5c:98:f3:f2:e9:66:
57:b5:44:6b:1a:a8:c1:d2:41:11:98:bc:c2:83:bf:
7d:ad:4e:48:e7:a9:a2:96:2e:8a:a1:d5:bb:14:cc:
6f:1f:90:f4:75:3e:ec:4b:e2:e0:cf:a4:54:d2:ca:
49:bf:71:48:2e:be:c7:dc:e3:61:bb:8e:fd:30:e6:
82:56:d4:db:89:31:6e:d0:96:f5:51:5c:8a:fd:27:
f1:c4:1b:45:d6:1b:73:0d:55:76:91:63:d6:a8:34:
b3:03:d5:8c:4b:db:36:ce:32:bf:91:dd:c2:36:f1:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B4:F4:B6:E0:1A:07:F3:29:6D:DF:3E:91:53:E4:CC:86:A1:E9:C5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/krT0tuAaB_Mpbd8-kVPkzIah6cU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.54.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e1:29:ea:92:1f:4e:34:19:46:0b:35:11:88:f7:96:26:29:
62:fa:fb:2c:94:f4:5d:a7:b1:9b:ce:cb:1c:61:31:02:eb:0e:
17:ae:b7:e0:be:c5:c7:56:4d:44:82:53:87:1a:1a:a5:1f:88:
80:da:ab:0c:32:03:e5:fa:cc:d8:33:1c:85:45:df:8a:7c:70:
40:2c:ab:a0:fd:22:c5:59:c4:8f:5e:f9:9e:70:d3:e7:b8:de:
60:45:29:73:ac:cf:19:4d:a8:54:a1:27:c7:2c:d4:69:07:ff:
8f:e9:db:fe:3f:74:0e:17:48:24:0e:46:8d:0c:79:d9:fd:81:
06:ec:f9:c6:2e:f1:5c:2c:74:f1:04:c8:93:67:1d:d3:8c:5f:
20:71:bf:d0:4e:ed:ec:ba:25:c1:27:cc:8a:22:95:87:6b:15:
3e:9f:7a:b2:d9:94:cf:d3:96:76:f2:41:82:5d:04:57:01:34:
68:30:53:68:cc:b9:32:2e:4a:d0:f7:86:14:a4:40:23:1a:a2:
7e:6e:28:86:84:57:be:9f:22:e4:70:4f:c7:0c:14:04:2c:58:
f9:9e:9f:d7:33:e6:34:6a:09:d3:49:c9:f9:1b:0d:4a:a5:98:
a6:78:3b:12:19:00:17:35:4d:10:a7:76:0e:63:9f:58:c8:38:
d3:38:d8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org