Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qcq9DacfJICbYkiuveb4UEqpdlw.roa
File: qcq9DacfJICbYkiuveb4UEqpdlw.roa (raw, json)
Hash identifier: JxqXBtCuw+5KhAaEUuu6rVsa6sgdcnIQo/XXaITwqm0=
Subject key identifier: A9:CA:BD:0D:A7:1F:24:80:9B:62:48:AE:BD:E6:F8:50:4A:A9:76:5C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BAF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qcq9DacfJICbYkiuveb4UEqpdlw.roa
Signing time: Tue 29 Sep 2020 10:08:43 +0000
ROA not before: Tue 29 Sep 2020 10:08:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 61.56.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2991 (0xbaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A9CABD0DA71F24809B6248AEBDE6F8504AA9765C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e0:9d:ca:9b:55:1a:3d:2b:01:1b:31:c9:c1:
b5:1f:e9:c4:99:c1:01:2e:ef:60:70:10:67:de:7e:
32:20:b9:d6:e5:55:9d:a1:fa:94:b0:9a:a3:21:a6:
2d:cf:2a:44:67:9b:bb:cd:6a:8b:fd:12:9f:7a:c7:
79:04:2e:09:af:fd:9f:af:e0:78:cd:c0:b6:41:3e:
6f:45:b4:15:fb:b5:f9:f3:19:a6:ac:d4:23:d4:7e:
e2:64:d2:9e:30:7c:0a:3e:70:0c:e8:b1:cb:1f:e9:
19:01:ef:05:b6:c7:1e:e6:a3:cc:88:3d:b9:88:13:
39:0b:13:45:c3:4f:af:dc:8d:8a:58:93:1c:a9:7e:
71:a2:4c:64:41:69:68:05:83:24:7f:b9:38:be:ff:
a9:41:97:f6:af:e0:7f:80:6c:d8:a2:ff:0a:ce:75:
35:51:58:e9:7a:fd:b8:7b:29:f2:5c:cb:bc:b0:6a:
bc:08:45:a0:a2:1c:dd:9e:f8:88:36:c1:ad:0d:8e:
04:c0:af:b1:9a:38:a1:66:4b:98:d6:59:14:36:56:
ea:fe:de:d1:a5:15:4c:94:fd:5b:89:ed:ca:5d:3d:
08:ba:c6:05:06:77:d6:66:3f:ce:c2:28:f6:c0:d2:
73:f7:dc:bf:fa:e8:26:30:fa:55:51:22:37:ad:40:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CA:BD:0D:A7:1F:24:80:9B:62:48:AE:BD:E6:F8:50:4A:A9:76:5C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qcq9DacfJICbYkiuveb4UEqpdlw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.160.0/19
Signature Algorithm: sha256WithRSAEncryption
69:46:81:78:df:0a:97:19:22:f1:c8:4c:d7:0b:48:44:31:48:
4b:79:f6:0a:f3:b6:2a:a2:4b:ad:2f:70:06:38:88:7c:f4:1d:
fb:2e:68:18:9d:c0:80:f1:8e:f9:f8:14:0b:70:7d:f6:9e:7b:
8f:56:b2:bf:58:68:df:1c:45:b0:a1:f8:43:0b:8f:dd:02:ad:
a6:9a:26:a2:b7:82:37:74:65:dd:0a:6c:45:c0:a5:50:63:a9:
6c:4c:65:7a:13:94:a5:bc:15:f2:ce:34:36:1b:90:bd:aa:7f:
5e:07:c9:e6:36:35:d6:6b:f1:f7:77:f4:52:19:da:4e:61:c8:
c7:0b:d3:a9:35:7e:72:e6:ac:2c:31:19:82:1e:ea:33:2a:3d:
40:9c:95:57:c6:a1:3a:69:0f:1f:3a:c6:fe:8e:9b:81:cf:ad:
4a:10:e9:3d:95:c6:e4:80:11:dd:94:62:ae:9e:04:59:8e:2b:
01:1d:a0:73:82:9d:82:5a:16:8a:24:cb:ae:e1:9a:19:b7:88:
c7:66:30:fd:78:8d:0f:d5:38:e2:1f:b2:78:79:e0:6f:12:6e:
3e:f9:1d:4f:76:9c:29:c4:a4:94:9a:ed:68:1c:27:22:0b:2d:
4e:b9:11:9e:bf:2c:cd:74:a7:77:a7:e8:fd:dc:ef:c3:54:23:
fc:d7:2a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org