Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l7jzssFxWkkOpJy80g3hKYXkR2o.roa
File: l7jzssFxWkkOpJy80g3hKYXkR2o.roa (raw, json)
Hash identifier: AEzlxRqLIioZwGXz6qqtrm0Hd6uuwG2mJvNdTuWJNH0=
Subject key identifier: 97:B8:F3:B2:C1:71:5A:49:0E:A4:9C:BC:D2:0D:E1:29:85:E4:47:6A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 114B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l7jzssFxWkkOpJy80g3hKYXkR2o.roa
Signing time: Sun 07 Feb 2021 13:14:56 +0000
ROA not before: Sun 07 Feb 2021 13:14:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.61.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4427 (0x114b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:14:56 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=97B8F3B2C1715A490EA49CBCD20DE12985E4476A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:13:64:1d:e8:d7:9d:34:60:81:1e:8a:a1:
20:fe:cc:b1:70:ad:e1:50:da:a7:b4:63:76:e0:27:
ad:87:19:78:80:fa:11:0e:af:d6:01:20:8f:28:23:
c1:d1:37:d5:45:56:97:ee:d4:0b:cb:a3:4a:60:f4:
92:c7:eb:75:cc:a7:8e:2e:d6:ef:6a:53:23:92:40:
a6:a3:48:e8:f1:e9:af:c1:84:a5:f5:4b:c3:6c:4b:
9e:80:54:b6:4c:ea:91:74:de:80:16:23:a4:80:90:
a0:e8:f9:88:02:ee:d0:67:db:0d:fd:8d:ee:9f:5e:
d3:bd:c8:2e:9c:4d:94:05:90:a0:e4:d9:36:b0:23:
8b:45:68:22:4d:83:52:24:86:78:58:d4:95:11:39:
fb:d5:9b:8a:54:91:20:34:6d:04:ef:bd:db:2c:a4:
99:d3:69:a1:75:65:23:a5:cc:3e:e7:0e:40:e4:21:
a2:73:f1:13:42:a8:c0:40:15:07:72:2c:a0:72:cc:
71:42:71:bb:8d:3c:d2:1f:8f:b1:4b:41:5f:0b:06:
4b:f1:2f:ef:56:9e:ee:59:34:01:78:2a:2b:ad:f6:
e4:4f:cd:28:f6:c4:68:08:36:c9:16:66:96:22:d2:
1e:b8:64:aa:35:dd:04:ee:18:e5:21:97:ed:56:17:
95:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B8:F3:B2:C1:71:5A:49:0E:A4:9C:BC:D2:0D:E1:29:85:E4:47:6A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l7jzssFxWkkOpJy80g3hKYXkR2o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:7b:b7:5d:10:f7:7c:d4:c6:f0:49:51:f3:4c:b2:49:f7:bc:
99:fc:67:6f:e6:97:81:df:b7:9b:bd:79:77:c1:3e:9f:01:5c:
f4:64:f8:e2:52:99:3f:2c:3c:3a:39:2e:d9:d3:4f:c7:13:2a:
6e:36:fc:24:b4:8c:81:92:b0:4a:93:fd:ea:de:e4:ed:63:a3:
e0:60:1e:1d:34:84:ac:a7:e7:9d:5d:6b:bd:4c:ee:4d:56:32:
eb:f3:df:65:0a:df:29:7b:d1:37:5f:22:e9:76:c3:1f:ed:98:
17:ac:85:11:fa:86:96:99:aa:87:98:77:a2:e5:d6:3e:f6:92:
f7:15:19:c8:81:14:a0:cd:2e:09:6a:7d:67:ac:c3:39:1b:4d:
5a:6e:1e:fd:22:47:b1:97:a2:9c:c4:28:b6:bd:e0:61:37:8f:
f9:3b:96:fe:d2:51:5e:15:67:cf:d1:76:7f:89:df:33:c2:75:
b0:9f:ba:db:ad:f4:ba:64:6c:4a:c7:b7:2c:7d:70:41:7e:9e:
1c:f0:37:7d:26:a1:a4:77:eb:21:8a:03:a5:ad:16:61:34:01:
62:07:2f:60:3b:bd:07:2d:06:04:ad:69:84:02:25:2a:6b:70:
46:e4:cf:a3:50:0b:ea:27:c9:4b:56:1c:39:77:18:cf:70:c2:
51:75:62:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:39 2023 by rpki-client on console-ams.rpki-client.org