Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sCbx58ntxVsi5tpyegYE6Iyk33g.roa
File: sCbx58ntxVsi5tpyegYE6Iyk33g.roa (raw, json)
Hash identifier: OheFSvW23MDY8Ku5n1oDqBStgZrL0nZc63eR6EiH8Hk=
Subject key identifier: B0:26:F1:E7:C9:ED:C5:5B:22:E6:DA:72:7A:06:04:E8:8C:A4:DF:78
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sCbx58ntxVsi5tpyegYE6Iyk33g.roa
Signing time: Thu 15 Sep 2022 02:36:05 +0000
ROA not before: Thu 15 Sep 2022 02:36:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 61.58.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B026F1E7C9EDC55B22E6DA727A0604E88CA4DF78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d0:89:8c:54:ea:fa:0d:43:be:56:32:3d:c0:
c5:71:a8:d7:a6:44:f2:6c:95:64:07:86:59:58:15:
75:d3:88:af:73:f4:30:24:a7:1d:6b:0d:e1:92:ca:
5f:23:5f:23:d1:c8:1f:6c:8b:5c:87:0c:28:9f:49:
7e:63:41:bc:d7:dd:a7:ac:d1:99:f8:de:b5:2d:a4:
56:e4:ee:0e:59:19:40:03:aa:03:03:89:91:ba:82:
21:35:58:ef:74:f2:8f:e6:e9:be:cc:97:5e:70:23:
6c:cb:01:b3:07:05:f3:74:8f:5c:37:0c:98:23:d1:
7c:d3:ac:d8:73:2b:73:f8:74:ec:1f:16:a5:9e:62:
0a:3c:45:80:c8:d1:0d:df:69:8d:41:16:14:70:4d:
cd:85:2e:84:f2:97:70:14:37:c9:2c:fa:b2:f4:82:
c4:c4:63:8c:69:06:2d:5c:57:c2:72:10:94:86:2c:
ca:8f:e1:c5:4c:30:12:98:17:36:26:78:9c:49:0b:
ed:80:c5:0b:f2:05:dd:d5:9a:b0:12:19:76:bb:75:
a3:69:1f:89:d6:7c:e1:a1:d6:bd:07:f2:71:0a:d5:
c8:f1:ba:3c:22:a8:5c:6c:b8:f7:ce:d5:2f:9f:fc:
22:e5:af:29:fe:e2:b2:40:1e:ab:ff:20:c3:4d:d9:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:26:F1:E7:C9:ED:C5:5B:22:E6:DA:72:7A:06:04:E8:8C:A4:DF:78
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sCbx58ntxVsi5tpyegYE6Iyk33g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.112.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:e0:d6:d5:e9:fd:71:87:63:df:3f:75:7a:2c:22:b2:b7:2c:
bb:19:19:c1:d5:e2:ff:d3:80:59:9c:97:04:f9:ff:34:ba:80:
e4:b1:64:3e:e8:ad:e4:24:e9:aa:e7:c8:8e:43:26:24:5e:d3:
f7:89:7c:fd:2c:70:85:0c:fd:67:e3:51:19:2a:cf:66:1c:e8:
d7:e0:d3:c6:fe:4c:6c:ac:c2:db:4f:d4:91:57:4f:71:17:25:
46:e4:4a:78:dd:9e:7c:bd:78:2f:39:ad:ee:91:d9:d2:22:da:
90:61:d1:4f:5e:d6:7a:d4:93:e7:ae:f4:e4:46:26:78:77:f3:
2d:6f:65:45:db:34:b2:9b:9b:a8:30:84:cd:89:43:3a:49:6f:
05:09:5a:59:58:7b:d4:20:a8:24:09:a0:22:f5:c5:d6:75:24:
d8:e6:61:96:2e:ef:c3:2e:1a:4c:fb:02:85:5b:43:94:dd:52:
8d:e2:7f:ad:8b:f6:47:90:33:cc:cf:44:8b:bd:21:45:53:27:
60:39:6d:aa:54:94:48:da:1d:c4:57:f3:8e:63:1c:2e:41:ca:
dc:3a:30:c7:ec:26:d4:a2:9e:87:79:59:a8:37:3b:07:0a:47:
6f:a6:c4:80:67:74:c2:57:45:98:00:ef:b9:ee:a5:d5:46:33:
3a:49:b0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org