Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/n2LWBnKjdDiI2ca5QS9wuTnSMTk.roa
File: n2LWBnKjdDiI2ca5QS9wuTnSMTk.roa (raw, json)
Hash identifier: UdxI7dw+ceyDXGx3JuC6lCy2W9A25LssSiP+6aE4PfQ=
Subject key identifier: 9F:62:D6:06:72:A3:74:38:88:D9:C6:B9:41:2F:70:B9:39:D2:31:39
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14B9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/n2LWBnKjdDiI2ca5QS9wuTnSMTk.roa
Signing time: Wed 24 Aug 2022 04:02:11 +0000
ROA not before: Wed 24 Aug 2022 04:02:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 2407:4b00:ff01::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5305 (0x14b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Aug 24 04:02:11 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9F62D60672A3743888D9C6B9412F70B939D23139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:41:8b:e2:1f:15:02:12:a7:9f:65:86:69:76:
45:6f:ad:9f:5d:97:64:5c:37:e3:47:2b:1c:a9:a0:
20:0f:5e:d4:62:52:00:ff:b9:bb:4e:8a:b0:a9:67:
09:cc:7a:7b:1a:3b:cb:d6:b6:dc:1f:cb:24:65:0d:
bd:3c:75:13:d6:8a:0a:0e:38:ba:4e:1e:a5:1e:46:
be:c6:c7:43:fd:7d:49:2f:ff:88:75:5f:21:40:3d:
90:43:f7:a7:c6:95:4e:51:9f:c1:3e:07:b5:b3:c5:
fa:3a:ef:84:fb:45:d6:dd:04:bc:7e:41:1c:82:97:
a2:41:5d:a9:ef:a2:72:16:c9:4f:b5:2b:b9:07:56:
9e:56:b2:2e:35:27:89:61:c1:8f:7f:de:41:1a:86:
26:af:65:d6:ed:11:17:ba:58:85:14:d3:43:bc:fa:
5b:f3:60:db:f9:96:32:b1:81:28:e1:29:d1:10:2d:
ed:09:df:2e:ca:90:af:43:86:f9:54:d5:01:1e:5d:
80:5a:8f:9f:75:1b:2c:a2:5b:31:d6:95:3c:5b:47:
b6:85:7f:4b:6c:e1:17:c5:ee:34:43:14:81:20:b2:
40:99:6d:23:47:36:4f:58:b0:ef:ee:d7:27:ab:a1:
ff:c3:bb:18:c9:4e:60:b6:cd:b0:99:56:ff:c1:0a:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:62:D6:06:72:A3:74:38:88:D9:C6:B9:41:2F:70:B9:39:D2:31:39
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/n2LWBnKjdDiI2ca5QS9wuTnSMTk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4b00:ff01::/48
Signature Algorithm: sha256WithRSAEncryption
1d:de:ab:60:f3:a7:e5:2d:af:a6:fd:8f:b7:5e:3e:bc:00:b5:
84:13:0b:83:c0:15:b8:d6:62:b2:24:b5:ad:1d:72:1c:00:4c:
e4:3d:c8:10:18:60:cd:40:ef:fe:91:eb:a8:66:78:47:30:2b:
5a:21:1a:d4:16:ca:d2:61:a4:60:07:37:c6:9d:8a:e6:39:37:
f5:bc:71:7e:4e:ef:20:b0:77:30:9b:b6:05:3d:0f:bd:2c:95:
31:fd:fa:7f:45:3b:ea:ea:e9:01:76:84:48:d0:f2:2b:42:51:
56:ea:fa:44:b6:bf:6f:7a:89:a8:00:32:87:7f:01:04:15:32:
a1:49:ab:88:e6:5f:b0:dd:2c:36:b5:2c:db:39:3f:78:aa:80:
67:ec:f4:b6:d0:33:45:15:bc:9b:b8:6a:c3:34:ee:e9:6d:ee:
ea:ca:ee:84:7a:e6:84:0a:c2:af:15:d9:b5:16:49:2b:44:d9:
73:8b:e8:5c:b7:f9:1a:0a:9b:cc:92:5d:ea:7b:e9:67:c5:ee:
43:ba:70:9d:74:df:c9:aa:13:43:f4:0c:38:2c:35:f1:07:a1:
a6:9d:ee:ad:f0:a7:25:37:25:2e:7f:8d:b2:40:76:48:ed:b8:
1d:ce:50:b3:22:c8:d7:3f:f0:2e:6c:3b:0c:58:af:73:fd:bd:
2a:e4:0a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org