Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qfXYtFpsZkHnvO6V2V4MeiLJjIk.roa
File: qfXYtFpsZkHnvO6V2V4MeiLJjIk.roa (raw, json)
Hash identifier: EfKiieAPEnERTi5B9oXL5O6dt9riNwQQScA7ISDwgVE=
Subject key identifier: A9:F5:D8:B4:5A:6C:66:41:E7:BC:EE:95:D9:5E:0C:7A:22:C9:8C:89
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B79
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qfXYtFpsZkHnvO6V2V4MeiLJjIk.roa
Signing time: Tue 29 Sep 2020 10:08:28 +0000
ROA not before: Tue 29 Sep 2020 10:08:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 61.60.215.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2937 (0xb79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A9F5D8B45A6C6641E7BCEE95D95E0C7A22C98C89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:18:94:56:3b:bb:99:1b:58:57:f8:a6:ba:dd:
c9:f1:df:a3:e0:ad:c8:b1:c8:b2:36:b6:d1:93:be:
7b:dd:e0:41:d7:80:63:4a:e2:b1:d1:3a:89:06:41:
14:64:30:44:80:e7:33:19:ba:33:60:e5:60:3b:0f:
5a:65:9e:9c:f5:e9:90:23:70:08:bf:2b:f0:95:1b:
e9:1e:67:c2:03:dd:36:68:cd:ba:78:83:62:d6:f8:
03:71:77:21:3b:b6:41:24:31:60:ca:e7:5e:8a:f5:
f1:07:42:dd:0c:10:21:af:1e:1c:f5:4f:aa:08:9b:
ac:4d:c2:67:b4:18:31:89:a3:39:5f:3a:42:9c:e0:
cf:4a:3e:dc:fb:54:86:ec:f5:0c:89:a4:78:81:6c:
aa:45:80:da:61:bb:75:24:b8:c9:93:8e:7c:8a:24:
24:d5:63:22:d2:f5:86:74:64:b8:83:cd:f0:98:2b:
be:6b:e4:87:ed:60:89:16:74:b8:39:18:2e:8d:86:
ea:25:e3:9a:e8:11:be:08:fb:6b:e3:43:4a:44:05:
8d:8e:31:39:a7:c2:ac:28:d9:be:73:68:a2:a3:3a:
6f:c3:10:21:a1:c8:f4:f3:7e:50:20:95:03:ab:a1:
70:25:b9:08:7d:6d:62:fb:df:1c:56:9e:c9:90:6a:
63:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F5:D8:B4:5A:6C:66:41:E7:BC:EE:95:D9:5E:0C:7A:22:C9:8C:89
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qfXYtFpsZkHnvO6V2V4MeiLJjIk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.215.128/25
Signature Algorithm: sha256WithRSAEncryption
01:9b:7b:34:75:bb:09:87:7e:4b:9f:4e:f5:b5:b5:19:2a:ed:
6c:5e:7e:4f:bb:5b:5f:0f:c6:f8:75:24:ea:6c:3a:73:84:7c:
92:20:aa:24:d2:a3:d8:e2:46:af:4c:d6:59:52:8d:3f:6c:a4:
09:02:b9:a9:9a:56:98:f2:ce:6d:a4:22:ee:63:e3:11:d7:15:
d3:f8:24:3a:e6:f5:05:28:08:fe:15:18:01:d5:e4:18:3d:c5:
67:96:3d:78:b2:fd:c5:37:5a:72:d8:fa:60:b6:c3:39:94:0c:
70:bc:8e:e2:e9:37:ea:10:3a:17:dd:49:5a:8b:48:9a:c8:09:
b1:90:86:c6:35:31:db:af:e0:74:38:d0:0b:9f:e6:26:b2:e9:
41:a4:77:02:1d:2c:36:ea:30:13:ae:7c:23:5d:78:d9:07:1b:
8b:9d:a3:db:23:a6:b2:f6:47:7a:96:a6:94:9a:1f:56:c7:0c:
23:79:4b:af:0e:c7:e0:50:aa:ac:48:be:07:95:61:62:90:6a:
70:4a:b7:d1:e5:a8:02:09:14:49:0d:a9:bb:3c:64:4d:b5:15:
38:82:8e:a0:e9:7e:44:d8:c8:3e:72:d1:93:d2:ef:48:aa:62:
36:60:1d:58:40:e5:62:c4:38:f6:f9:32:7c:f3:d0:6a:43:a8:
ac:8e:b0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-fra.rpki-client.org