Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l9K9CkMXSrq88RxJJFk3YhB7tK8.roa
File: l9K9CkMXSrq88RxJJFk3YhB7tK8.roa (raw, json)
Hash identifier: I7Icv23TcMvlKz8Nr7ZhQ87UGtrs0GiqgCoVCHmv0do=
Subject key identifier: 97:D2:BD:0A:43:17:4A:BA:BC:F1:1C:49:24:59:37:62:10:7B:B4:AF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B4C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l9K9CkMXSrq88RxJJFk3YhB7tK8.roa
Signing time: Tue 29 Sep 2020 10:08:15 +0000
ROA not before: Tue 29 Sep 2020 10:08:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 211.76.46.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2892 (0xb4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:15 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=97D2BD0A43174ABABCF11C4924593762107BB4AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:51:2c:ed:6e:3b:95:93:e2:94:f8:3d:1d:
81:26:03:e6:0c:40:3f:52:23:5c:52:79:9e:1b:98:
b0:d6:f7:c0:4d:1a:d8:c5:65:d2:09:3f:69:98:c4:
bb:88:80:97:6d:f8:ad:dd:9a:15:00:fc:90:60:dd:
2f:fe:d7:db:eb:85:a1:fb:8b:4b:89:fb:0f:a8:be:
d8:e7:c2:f8:70:2f:33:b3:cc:04:8f:8b:0d:07:45:
f0:eb:9d:69:a2:7c:87:76:0d:cb:cb:34:ca:5c:44:
fa:07:8f:24:52:83:d8:92:fd:95:b1:3e:50:66:12:
87:0a:e0:42:44:be:ef:df:c2:ca:59:f8:68:ac:c0:
d3:d2:8e:8c:15:3c:5c:ef:3e:a9:7d:35:27:3b:e2:
2a:46:7b:6a:87:1f:82:2d:b8:84:2e:88:06:9c:bd:
5d:a6:ff:fc:d9:b7:7f:55:d5:ea:ad:b2:b5:1f:88:
f7:c3:02:5b:d1:14:5b:a4:12:0f:e0:93:31:c2:bd:
1b:02:41:5d:0b:b0:96:05:25:52:06:53:24:a0:15:
7a:98:19:2a:43:08:c4:74:8f:61:ce:2e:cc:84:af:
0a:43:b1:02:c3:fe:88:5b:5f:ed:4f:52:e3:18:d2:
9b:2d:d9:63:d7:f3:41:b5:6b:1f:d2:0c:e4:11:4b:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D2:BD:0A:43:17:4A:BA:BC:F1:1C:49:24:59:37:62:10:7B:B4:AF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l9K9CkMXSrq88RxJJFk3YhB7tK8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.46.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:cf:89:94:79:b6:1f:35:8e:20:53:f4:4f:b4:7c:2e:10:a7:
f7:33:f8:5f:a5:63:69:13:79:df:ff:be:7d:5b:45:a7:87:18:
bc:8d:c8:89:d6:46:6f:7e:ba:d6:f8:3a:89:22:e6:8b:78:e7:
2d:f0:c6:50:22:8f:8d:5d:e2:81:d3:8c:98:38:ab:ae:92:1e:
63:a2:c7:f9:c7:c1:fb:e1:b2:d4:58:91:d0:16:7e:06:51:c7:
c6:ca:a7:a4:35:90:da:af:ff:83:13:45:75:90:b6:40:63:61:
a6:bf:79:fe:48:32:7a:b8:2d:57:8a:46:7b:5d:8e:40:b2:ec:
73:02:4a:c5:70:e1:13:be:1d:ce:a7:14:c1:ae:12:b7:6e:77:
84:11:b1:ff:2a:a7:c0:ae:9c:ce:be:4a:36:24:37:88:9c:e0:
5e:35:aa:85:82:98:20:57:eb:96:94:74:47:51:bc:a0:30:c6:
ff:e0:4e:5f:0b:ae:95:6a:94:db:97:7f:2c:a2:70:bc:2b:79:
e3:6a:38:04:e3:2a:88:b7:38:c7:9c:ff:8a:ce:5b:db:33:7e:
e5:a9:c4:a0:cf:94:0a:e3:65:d8:53:38:2d:57:6b:70:19:46:
0e:38:e6:72:7d:a5:cb:f1:d3:4c:87:53:fc:81:75:10:c9:c7:
69:51:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:39 2023 by rpki-client on console-ams.rpki-client.org