Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kuZfSLH_y90-ci6iQXosWKY26po.roa
File: kuZfSLH_y90-ci6iQXosWKY26po.roa (raw, json)
Hash identifier: o6t9IqhVNfp+NfA4T2V3bButpsv8zkSlpKAYKsAZP8U=
Subject key identifier: 92:E6:5F:48:B1:FF:CB:DD:3E:72:2E:A2:41:7A:2C:58:A6:36:EA:9A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10DD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kuZfSLH_y90-ci6iQXosWKY26po.roa
Signing time: Sun 07 Feb 2021 12:49:22 +0000
ROA not before: Sun 07 Feb 2021 12:49:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 61.58.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4317 (0x10dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:49:22 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=92E65F48B1FFCBDD3E722EA2417A2C58A636EA9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:23:80:7a:ae:10:7d:d2:99:bc:11:08:ec:
ae:0c:8a:e8:f6:b3:ff:97:2b:77:dd:8f:59:82:0a:
70:d2:61:0e:3f:73:a4:46:56:b9:71:62:af:40:1f:
80:d8:72:2d:39:cd:aa:75:07:2d:fc:8a:cf:05:a9:
ad:bd:ea:dc:fb:bc:43:c8:ad:a9:6e:13:27:68:c4:
94:59:f8:78:2a:ff:c2:97:a3:48:d9:52:71:c1:84:
d5:b4:e8:65:4b:a3:03:60:3b:ec:f3:84:8f:d6:eb:
52:8e:a1:27:bc:13:9e:1d:aa:9f:b1:55:91:2f:e7:
78:e5:ee:55:23:bc:75:af:76:e0:b7:a8:ab:74:ac:
a9:08:36:e4:05:8c:95:b8:41:23:09:11:0e:69:1a:
66:b4:73:95:5a:24:f0:fd:37:c1:95:be:5f:eb:9d:
f0:88:17:5b:f5:0d:46:4c:8e:dc:88:71:f2:0a:fc:
a0:16:e6:01:9a:25:da:c1:84:7d:3f:a4:53:60:ea:
b9:74:e0:8c:1b:9b:46:78:dc:f2:d1:4b:ce:58:df:
66:dc:ee:06:85:a7:02:77:af:13:86:a6:aa:73:89:
ed:df:1b:d2:c7:a3:ba:8e:15:32:65:6a:63:64:e9:
fa:12:44:a2:24:e7:d0:8b:03:b9:05:37:fc:17:d7:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E6:5F:48:B1:FF:CB:DD:3E:72:2E:A2:41:7A:2C:58:A6:36:EA:9A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kuZfSLH_y90-ci6iQXosWKY26po.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.96.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:5f:0c:1d:c2:f0:3d:99:61:a7:1b:6c:76:9a:62:92:51:96:
28:b6:e6:28:57:01:3d:69:98:58:ff:a1:c9:50:49:3f:77:1b:
bb:30:88:6e:21:b7:cb:56:c3:52:d9:68:d1:60:cf:56:ad:96:
19:29:86:98:32:1b:30:6d:81:97:52:4e:da:25:11:d5:97:b3:
5b:0d:c6:02:e6:77:34:9a:74:03:2c:d5:9b:fc:96:08:9e:5e:
87:10:93:7f:d5:d1:8d:ed:6d:68:a5:bc:58:cb:e9:e9:66:a7:
cd:6a:f4:3a:ba:a4:77:67:e6:24:c9:e6:71:b0:ec:fa:2b:7a:
2d:37:a5:f0:59:0d:99:80:c1:01:18:fd:65:29:84:49:d9:56:
09:83:44:53:7a:ff:e9:cb:f0:9a:dc:c5:2f:05:40:2e:99:35:
c5:68:86:2e:07:b6:64:12:cb:ff:e1:b9:d6:13:71:e4:cd:8b:
dd:3d:68:05:d7:30:98:ee:88:84:3a:e1:e1:f4:45:c1:15:7e:
c7:38:6c:b7:14:68:05:be:f0:e1:a5:d6:1f:8e:75:39:e6:32:
df:eb:e0:38:70:b5:8b:c0:ca:7e:54:c1:1e:68:b9:69:6a:ee:
9d:5a:72:72:15:3b:f0:5f:fa:1a:fc:eb:34:68:43:a5:0e:7e:
ba:76:c6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:40 2025 by rpki-client