Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tFogLhPbzM2YGl1OIm_m617yZWk.roa
File: tFogLhPbzM2YGl1OIm_m617yZWk.roa (raw, json)
Hash identifier: tLxH6Lc/vzGYvEphpdYl6Anv9TsfotxC5/ydWPV7n64=
Subject key identifier: B4:5A:20:2E:13:DB:CC:CD:98:1A:5D:4E:22:6F:E6:EB:5E:F2:65:69
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F97
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tFogLhPbzM2YGl1OIm_m617yZWk.roa
Signing time: Sun 07 Feb 2021 12:34:54 +0000
ROA not before: Sun 07 Feb 2021 12:34:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 211.76.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3991 (0xf97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:34:54 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B45A202E13DBCCCD981A5D4E226FE6EB5EF26569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7b:0b:ce:58:b8:e6:bb:58:7b:30:ec:4b:ca:
73:7d:bd:c0:69:34:19:28:70:a6:e0:be:d8:f2:e0:
59:3f:06:2f:f2:f2:da:7c:f1:75:03:aa:0d:50:43:
7d:c8:4b:0d:57:62:88:dc:bc:16:04:90:74:5e:0f:
b2:2c:a7:fa:40:a2:4b:c7:8a:3e:8d:3b:22:4d:92:
de:6f:0c:89:08:97:79:47:59:2e:72:38:89:f2:8f:
64:92:7c:39:70:06:d7:f0:e0:5d:29:dc:d3:ed:c7:
8d:f8:bd:1d:44:c4:5b:c6:10:02:dd:a5:47:83:1a:
5c:d6:f2:68:a1:66:af:cf:15:52:6b:83:24:24:cc:
70:1f:dd:5c:fe:61:3a:50:16:90:69:e6:6a:59:c8:
79:cb:a3:ae:9a:04:a2:03:f3:24:d2:f8:c4:08:10:
e6:3a:05:55:b2:a3:23:bf:f1:65:7b:96:17:a4:14:
f6:fd:75:bb:6e:d7:94:54:24:29:62:82:d5:70:75:
35:8b:08:d1:18:be:c0:e7:01:29:75:db:d0:cf:7d:
f7:84:bc:e2:7a:c4:9e:23:7d:83:c8:e0:31:55:72:
36:58:03:3b:81:50:30:8f:cf:c1:c7:fb:36:9d:7e:
4d:bc:66:28:0e:38:19:ab:4d:b4:59:75:cf:12:c8:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5A:20:2E:13:DB:CC:CD:98:1A:5D:4E:22:6F:E6:EB:5E:F2:65:69
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tFogLhPbzM2YGl1OIm_m617yZWk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.79.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:3a:aa:0f:ee:33:3f:86:c3:9c:3e:4e:98:bc:48:13:9f:0d:
69:67:bf:73:df:c3:18:81:0b:8e:89:99:47:e0:a5:b1:ba:11:
2f:9c:1e:1f:d4:b5:8c:21:93:3f:c9:a8:53:20:08:eb:b3:47:
74:45:17:8d:37:cb:31:ea:3f:50:38:e5:53:e5:16:4b:e1:e7:
03:78:ab:ab:58:14:0a:b0:1e:69:ee:45:78:13:18:32:ea:be:
24:f2:f5:cb:e4:fb:d8:73:fd:46:d4:3f:65:33:4d:a3:ed:66:
ee:08:12:57:d1:66:00:d6:51:d7:77:c7:f4:f7:d2:82:5d:c0:
25:17:48:d6:63:32:93:83:17:8e:46:27:9a:72:81:67:2c:82:
5b:1b:a0:4a:26:10:30:35:36:d6:68:6b:65:85:b3:f6:79:8a:
ba:66:04:b3:46:94:b4:cc:13:68:71:4b:bf:14:f3:16:9b:46:
ee:5c:67:b8:67:65:8b:43:e8:c8:16:4b:fd:e0:9d:c9:83:dc:
77:c0:57:cd:99:e4:a4:6c:2e:90:02:ed:55:f0:82:ab:17:13:
52:fd:07:90:3b:01:50:9f:c3:e7:84:66:d0:4f:4d:d5:ea:17:
8c:e8:d1:61:19:44:ad:8a:c4:0b:da:5b:59:74:6d:27:6e:b7:
de:23:8e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org