Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t8Uugx0kNZfnswPWw64MQQvOZW4.roa
File: t8Uugx0kNZfnswPWw64MQQvOZW4.roa (raw, json)
Hash identifier: Ajf3UmcFhTdgel0KMSBX0nazbW+i9E0pRHmh22WfU5U=
Subject key identifier: B7:C5:2E:83:1D:24:35:97:E7:B3:03:D6:C3:AE:0C:41:0B:CE:65:6E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B5F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t8Uugx0kNZfnswPWw64MQQvOZW4.roa
Signing time: Tue 29 Sep 2020 10:08:21 +0000
ROA not before: Tue 29 Sep 2020 10:08:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 61.56.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2911 (0xb5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:21 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B7C52E831D243597E7B303D6C3AE0C410BCE656E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:31:6e:7c:5d:2a:d4:07:1d:2b:4f:83:f3:
64:5f:5b:48:f5:a5:17:f8:b9:85:d6:37:7a:ec:c5:
2a:27:37:c6:6a:c6:5d:75:cd:ae:64:f3:5a:39:17:
88:aa:f4:85:b1:99:c6:36:23:5e:f9:34:7b:b3:48:
83:e3:5b:37:3b:07:7a:f5:ce:51:51:fa:b6:7a:f6:
cd:8b:5a:d3:82:18:a1:40:24:6b:5b:16:8d:07:20:
18:64:7a:64:a1:d5:b1:0e:b1:64:ba:d0:5d:dc:f3:
b4:01:c3:29:4a:ae:ce:e0:db:ce:08:a9:69:33:fb:
00:f4:54:c0:95:7e:b6:9f:a6:c2:84:ca:19:ac:52:
3e:f9:15:7f:1d:66:94:d1:67:eb:81:db:95:c1:55:
28:6f:d5:8b:c4:33:1c:9f:a7:e8:0f:f7:cb:2d:e2:
05:d5:95:d7:9d:29:9f:2b:95:2d:a2:53:20:fc:a2:
18:86:76:bc:39:3d:f2:cb:a1:67:65:44:db:5d:b3:
66:e2:b2:46:62:13:fb:a7:29:2e:ba:a2:ab:a0:6d:
b5:63:93:82:07:b4:ea:63:dd:26:1d:8c:3d:c0:72:
d1:b5:aa:62:5e:cf:68:44:93:b9:7e:41:4c:55:78:
d1:07:e8:5d:be:20:a7:8f:f6:81:48:0b:65:0c:41:
7f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C5:2E:83:1D:24:35:97:E7:B3:03:D6:C3:AE:0C:41:0B:CE:65:6E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t8Uugx0kNZfnswPWw64MQQvOZW4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.160.0/20
Signature Algorithm: sha256WithRSAEncryption
73:90:47:eb:f7:a9:04:5e:5e:bd:1a:00:1e:68:ce:0e:f2:92:
a2:71:8b:a2:65:37:06:76:d7:25:92:01:c5:55:e6:2e:2e:43:
75:e5:86:62:1b:f1:aa:c5:6f:87:3b:73:77:f6:fb:71:dc:9e:
3d:34:ff:9a:c4:56:80:a4:c7:57:3c:61:8f:b4:83:25:66:53:
0d:db:74:47:5e:10:c5:92:dc:56:31:37:f7:5a:a4:fc:ce:63:
2b:9d:36:99:16:9a:72:38:95:76:da:0b:3f:b5:fd:98:4d:98:
7a:34:dd:ed:0d:8e:08:55:73:10:c6:b0:4f:c8:5e:37:2b:44:
aa:35:1e:e0:99:be:13:d3:eb:47:75:6a:2c:42:42:8c:73:dc:
d8:b6:10:e8:8b:9b:95:33:33:73:51:a9:d3:a4:76:c8:26:49:
a7:17:01:2f:b0:f7:23:da:32:b7:b0:6d:b4:15:d6:09:9c:02:
2b:bd:4f:c1:f4:1b:aa:62:cb:06:f3:25:9f:c5:dc:23:0b:99:
65:c6:5b:18:63:72:4e:d1:aa:78:ec:a8:dd:b2:9b:0f:a1:7d:
1c:55:24:ae:29:c4:ca:5c:ed:28:94:17:a3:07:4d:3d:57:eb:
32:b9:e4:13:bf:d4:79:02:51:62:35:e0:49:2c:41:f1:6f:c3:
ca:02:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org