Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p_Wgtk_kBERoIbfqGdTeWDbi80E.roa
File: p_Wgtk_kBERoIbfqGdTeWDbi80E.roa (raw, json)
Hash identifier: pHG8IkEEEU8QJwfA31tx627i3ZYsUhErNLcgGw1Vxtg=
Subject key identifier: A7:F5:A0:B6:4F:E4:04:44:68:21:B7:EA:19:D4:DE:58:36:E2:F3:41
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p_Wgtk_kBERoIbfqGdTeWDbi80E.roa
Signing time: Thu 15 Sep 2022 02:35:41 +0000
ROA not before: Thu 15 Sep 2022 02:35:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 211.76.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A7F5A0B64FE404446821B7EA19D4DE5836E2F341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:18:88:a2:2d:a5:fc:8e:6b:e0:1b:9f:ed:
88:39:9c:39:00:61:14:af:d6:2b:6e:cf:67:3d:31:
04:1b:6d:81:25:66:b8:bb:0b:16:0b:22:18:0c:ff:
72:b1:7d:48:64:35:73:62:57:26:b8:21:b2:35:25:
13:e1:ef:ed:25:9f:59:32:dc:d2:58:d3:d9:c0:63:
e7:b2:86:e5:bb:69:07:04:34:39:0c:8e:cd:54:ef:
81:9c:77:83:5d:48:70:16:be:e9:37:77:e6:2e:bf:
49:01:9e:45:70:fe:49:7b:46:c8:b8:cb:b0:e7:91:
0b:68:a4:b7:6e:de:fa:9c:bf:c8:e9:9b:53:07:6b:
1e:1c:aa:ab:cb:dd:2b:ea:f6:f6:31:55:79:c7:a6:
d0:ad:43:57:53:e3:14:66:b1:08:0f:59:33:fd:57:
6c:f4:df:18:b4:1a:b7:c2:e9:8c:b5:4f:3e:ed:df:
e2:8d:77:24:81:55:4f:03:e3:c9:f4:19:ac:9d:f6:
d4:40:96:31:40:9c:cf:ae:73:84:a8:29:f4:0d:a6:
82:28:46:6c:2e:1e:4f:21:41:72:0e:9c:d0:9d:6b:
21:c0:37:2c:44:d0:53:f7:57:6a:b6:b8:cd:1b:ce:
ca:2e:ce:e3:f0:fb:e4:f6:12:56:3a:27:8e:87:4c:
56:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F5:A0:B6:4F:E4:04:44:68:21:B7:EA:19:D4:DE:58:36:E2:F3:41
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p_Wgtk_kBERoIbfqGdTeWDbi80E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.54.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3e:7c:4b:27:99:6a:f4:54:59:8e:69:90:17:a7:9a:87:2d:
6b:23:b8:55:24:e1:24:8d:1b:d3:5f:f6:1c:67:20:4b:d1:e6:
aa:7f:40:ff:67:b3:5d:06:7e:cf:60:69:e5:89:67:f1:c0:c9:
4f:46:79:49:e0:3a:d0:c3:67:46:a2:83:7d:46:d1:68:eb:f6:
ba:72:83:4e:46:f3:de:fc:45:14:10:d1:29:53:0b:80:d0:91:
cd:d6:4f:93:c4:2c:68:6d:96:4c:04:b8:f7:75:ab:97:4d:ae:
e9:65:34:48:bc:65:4f:fd:e1:13:44:82:59:9e:66:d4:0a:8a:
b6:bb:70:aa:7c:6b:5c:48:83:9d:52:f4:06:48:f0:09:78:58:
3b:ff:33:e4:90:3d:e0:31:fb:2d:f1:0e:e8:3b:b0:61:dc:51:
55:7c:ff:10:1c:f7:7f:49:47:ff:e3:52:71:b8:91:d6:5e:46:
f2:2e:8c:e7:87:91:31:0a:9c:58:55:bb:f1:ab:74:99:22:54:
83:ae:96:9e:15:6a:32:c8:b4:0d:08:ad:05:cb:28:15:11:c7:
85:e1:b6:f6:74:32:c4:f1:2e:d2:e3:52:38:fd:21:3c:7a:25:
bc:51:01:c2:fa:78:89:27:67:c3:b4:f8:c3:f1:c9:20:6e:09:
d7:54:75:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org