Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mQ_S3pnwoag96BV8NSG6X6M7BBs.roa
File: mQ_S3pnwoag96BV8NSG6X6M7BBs.roa (raw, json)
Hash identifier: ib83g4Zmsz/bGJHy3GDwSE8cdtHLYUN0dQFRUc9tXgU=
Subject key identifier: 99:0F:D2:DE:99:F0:A1:A8:3D:E8:15:7C:35:21:BA:5F:A3:3B:04:1B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1EB6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mQ_S3pnwoag96BV8NSG6X6M7BBs.roa
Signing time: Fri 01 Sep 2023 10:16:22 +0000
ROA not before: Fri 01 Sep 2023 10:16:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 61.60.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7862 (0x1eb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:16:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=990FD2DE99F0A1A83DE8157C3521BA5FA33B041B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a9:1e:65:34:f5:32:5e:2d:fc:f8:e5:34:74:
40:e3:b6:5e:13:9f:9a:57:ca:e4:5b:0b:de:21:8f:
87:8e:32:76:16:cf:d3:8f:d9:09:db:86:fd:35:bb:
1d:e6:70:9c:84:97:66:23:e6:11:05:7c:5a:fc:1a:
bd:24:31:c7:0e:38:7a:7c:95:ac:c0:ba:66:90:fb:
da:9b:81:bc:64:96:38:d0:52:40:72:44:4e:d1:0e:
73:08:cb:6f:8f:ea:9a:67:d7:7b:0e:08:31:81:5d:
ca:cb:cf:4c:58:d5:4f:8c:4b:48:50:28:c8:a5:f9:
c1:79:61:be:99:54:d1:47:b8:17:ca:b4:71:50:3d:
63:e2:62:ad:83:b9:aa:70:c6:47:1b:97:3f:98:7a:
91:92:fc:b6:dd:8c:2d:d7:0d:85:93:d7:04:19:14:
70:c6:9e:8e:15:58:a0:02:31:2c:a0:9d:fa:09:f2:
cd:33:a1:71:b1:c8:a5:79:09:02:f3:bf:6d:23:83:
90:db:4d:dd:4e:a2:54:82:dd:e9:1f:65:2f:78:4b:
9a:2f:14:59:a8:81:90:60:29:9f:e6:31:e9:03:93:
ce:3d:db:b5:2a:52:ea:e2:28:33:04:13:d2:37:e4:
3f:9a:75:0f:a8:98:aa:d9:98:6c:f8:0f:c7:a8:08:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0F:D2:DE:99:F0:A1:A8:3D:E8:15:7C:35:21:BA:5F:A3:3B:04:1B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mQ_S3pnwoag96BV8NSG6X6M7BBs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.214.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:8e:f4:5e:12:71:8a:7b:ac:29:0d:42:21:4a:aa:d3:4a:aa:
4d:32:8b:b8:77:a3:5b:cf:22:e3:55:bb:fe:91:40:b4:af:0b:
9c:69:46:ec:f7:74:5b:84:f5:b4:06:e7:ef:a4:46:cb:f6:9a:
5a:1d:ce:66:66:8f:d0:2b:ff:36:68:f3:16:eb:1f:6b:68:19:
76:e7:ea:86:65:8e:f8:bf:de:52:40:10:8a:3f:74:23:70:10:
22:dd:70:d3:c2:ca:68:07:83:3e:0e:68:da:62:02:28:46:ac:
77:6d:0e:9e:f6:c3:b0:2f:fb:4e:25:2a:98:7e:eb:31:f1:6d:
f0:f1:2d:4c:0e:ae:cf:46:d3:5a:95:c1:7c:df:2a:1c:d5:28:
8d:6b:6b:5b:dd:d1:d5:67:67:5d:19:d4:9b:cf:70:d1:4d:81:
58:fe:f1:cb:1d:76:03:d4:51:3d:e2:d5:ea:96:be:51:15:ba:
3c:c9:d8:31:38:64:9d:e4:69:94:89:ea:a2:77:5e:8c:18:b8:
4f:c5:54:fb:12:f2:b6:ea:b4:f3:49:d4:5d:ea:82:20:6c:02:
22:6a:d3:ed:20:29:8a:3c:23:74:b5:47:35:66:f3:21:84:71:
20:6c:96:10:3c:35:29:8d:26:be:34:8c:18:03:9b:a7:3e:74:
8c:03:ac:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:36 2025 by rpki-client