Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q7lhdNbNNjcczoCiYjbF547kz2o.roa
File: q7lhdNbNNjcczoCiYjbF547kz2o.roa (raw, json)
Hash identifier: MSW+3doSguOYGGHIyzTEUVsrQnz4qZRZqFsAenQM840=
Subject key identifier: AB:B9:61:74:D6:CD:36:37:1C:CE:80:A2:62:36:C5:E7:8E:E4:CF:6A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1019
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q7lhdNbNNjcczoCiYjbF547kz2o.roa
Signing time: Sun 07 Feb 2021 12:37:36 +0000
ROA not before: Sun 07 Feb 2021 12:37:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 61.58.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4121 (0x1019)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:37:36 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=ABB96174D6CD36371CCE80A26236C5E78EE4CF6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e5:fd:03:9d:ed:29:49:30:c9:4e:1b:5f:96:
2b:67:ba:b5:bd:08:05:b4:6d:7e:8b:13:15:f5:b8:
80:9b:77:72:34:03:a9:59:71:47:e3:56:15:0a:70:
ab:76:b7:c6:86:2b:fd:fc:aa:9d:06:f5:fb:e7:3d:
c2:b8:f3:63:af:11:77:6a:b8:39:a3:62:41:2a:49:
04:e2:60:10:49:16:67:bc:a5:18:c5:ad:b9:fc:b0:
ab:5a:ad:9a:7e:b5:0a:33:f1:cd:86:b8:1d:8d:40:
22:5e:f7:3f:bf:8b:46:ad:b4:70:37:4f:42:a6:a5:
5b:a8:bf:0e:6e:49:25:82:70:71:45:45:2e:10:77:
a4:35:78:d9:d4:36:b8:5d:78:fb:1e:bc:9c:2c:27:
c6:66:99:16:36:52:8c:77:3a:da:cc:da:45:2d:ed:
08:b1:27:a3:d5:5d:64:6a:93:45:73:96:7c:c7:33:
eb:a3:26:47:8a:e9:ab:57:4f:00:f9:85:40:68:30:
70:14:30:f1:4f:3d:6c:48:01:01:d4:7b:cf:5a:17:
8f:b3:f6:08:9a:8a:69:ed:82:1d:64:ee:d2:ab:19:
13:95:79:a4:02:d7:21:4f:77:a4:56:ef:67:ec:26:
b4:50:b7:a0:b1:26:bc:f1:89:b7:e4:ea:8a:e5:1d:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B9:61:74:D6:CD:36:37:1C:CE:80:A2:62:36:C5:E7:8E:E4:CF:6A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/q7lhdNbNNjcczoCiYjbF547kz2o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.120.0/22
Signature Algorithm: sha256WithRSAEncryption
94:9b:ce:cd:6e:77:b5:69:54:4c:02:ba:e8:38:58:04:6f:30:
c2:bf:20:28:97:b9:53:02:6b:68:d0:60:52:45:70:2c:2a:f8:
80:80:7e:48:c3:5b:70:04:8b:f7:fb:e3:7e:e5:fa:ec:3e:78:
cf:18:88:d2:d2:c8:d2:4b:ee:dc:32:8a:85:5f:b9:be:d1:4b:
d1:f8:7d:66:e5:ba:26:30:95:d6:57:ab:ce:49:dd:fb:b9:d3:
fc:76:40:03:3c:53:35:3a:72:56:32:e8:72:a6:3d:b2:a9:ca:
db:d5:94:03:48:92:c8:a3:46:1b:db:33:93:01:5e:6d:d0:e9:
5d:c6:65:06:4a:75:0a:1e:50:61:89:0f:0d:78:09:4e:03:b7:
9a:59:10:a6:3e:67:5f:36:0b:a2:85:40:c5:3d:c9:cc:c5:a2:
a8:dd:02:63:cb:00:53:3c:2e:1d:83:06:62:61:87:3b:58:59:
c1:99:43:03:0c:2a:82:35:43:2d:1b:43:cf:a4:cb:56:b7:ff:
a9:bd:53:4b:2b:b7:85:f6:88:8c:e9:8e:a1:30:64:9e:ea:5e:
04:35:75:9f:bc:72:c0:2e:a4:fc:a2:86:b9:8f:7a:28:e3:85:
e7:b5:9b:04:52:57:04:00:be:17:de:e8:ac:bc:c1:a4:05:7b:
b6:32:15:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-fra.rpki-client.org