Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u6RWCQmWQqwmr9906-kvgXympnk.roa
File: u6RWCQmWQqwmr9906-kvgXympnk.roa (raw, json)
Hash identifier: V5mxV2Z9Z79+cW6ZiWYWHzHUp27jAFm+r5Yrn33K5Wk=
Subject key identifier: BB:A4:56:09:09:96:42:AC:26:AF:DF:74:EB:E9:2F:81:7C:A6:A6:79
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F0F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u6RWCQmWQqwmr9906-kvgXympnk.roa
Signing time: Sun 07 Feb 2021 12:32:44 +0000
ROA not before: Sun 07 Feb 2021 12:32:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 61.60.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3855 (0xf0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:32:44 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BBA45609099642AC26AFDF74EBE92F817CA6A679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c0:4c:2c:a0:97:aa:b3:1b:f4:50:ef:5f:30:
0e:69:4d:91:38:a0:17:53:18:77:a7:04:d5:80:c1:
61:1a:02:d2:b6:32:26:cb:7f:9e:cd:06:90:f0:78:
6e:f0:ba:1f:9a:c0:32:aa:29:d0:aa:85:76:c8:2f:
ed:57:dc:66:a6:65:d7:9b:12:c1:6b:55:85:64:f1:
80:23:0d:30:e0:44:f1:83:32:06:b1:6e:57:5b:59:
85:93:c7:20:74:7f:a5:2b:44:fc:76:d3:67:b5:6b:
bf:37:ed:37:76:bd:61:0a:98:66:66:24:d3:7b:4b:
94:5c:15:ea:67:05:50:5e:f8:7b:bc:9c:77:b8:36:
b7:92:9b:e2:df:6c:26:9b:77:eb:43:a0:6c:b1:3b:
09:0a:e3:8f:4b:ab:23:94:3d:ca:92:b8:e7:be:85:
3f:36:bf:7c:f0:9a:32:63:05:c6:98:14:0e:a4:22:
d8:1c:ea:6a:8b:2b:76:3d:9b:b4:79:ae:02:f2:1b:
ba:67:dc:f9:41:12:11:b5:9b:68:31:e2:30:96:d3:
36:5e:91:b3:87:b9:c1:3c:98:31:20:1e:38:bd:1e:
88:65:de:0d:f3:c8:80:29:e5:f3:50:b7:1b:17:de:
ff:a1:e5:dc:1b:8b:f8:ec:d3:b7:9f:c9:3a:58:fd:
da:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A4:56:09:09:96:42:AC:26:AF:DF:74:EB:E9:2F:81:7C:A6:A6:79
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/u6RWCQmWQqwmr9906-kvgXympnk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.214.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a3:d6:37:6d:5f:88:6d:dd:97:58:e2:ce:2c:89:5f:ac:85:
0f:5a:b6:38:f2:5b:bc:64:8d:c9:47:e4:71:e6:7b:10:47:18:
70:d9:42:17:1d:26:f1:32:ce:8d:20:37:a7:6c:93:45:ab:24:
56:7a:2b:8b:22:86:26:05:57:c2:9d:8f:f5:19:25:4d:75:55:
fc:c0:9d:a0:b9:ed:a5:15:ef:3d:6a:47:e6:ec:05:e0:80:23:
bf:13:46:8b:c7:90:ee:67:7a:ca:80:c8:fa:77:75:18:a9:a1:
cd:87:77:00:f4:4e:00:0b:0b:23:6b:16:85:b3:20:b6:f7:96:
f7:c8:81:0a:65:f0:20:8c:08:4d:55:ca:8e:7f:66:1c:99:29:
dd:72:c7:f3:b5:82:a9:e9:cf:98:81:d7:b3:5c:27:77:5a:33:
c0:58:85:7f:0b:6e:5b:65:e3:66:64:45:76:c0:c3:b5:7e:e8:
c1:1b:8b:10:b0:89:86:f5:2b:0f:2f:ce:32:a3:1b:06:52:d9:
2b:b6:5f:9d:1f:81:08:a5:a6:91:82:49:4e:07:82:58:12:e9:
75:23:d1:ac:50:93:ae:c4:25:11:3c:47:90:29:0d:24:36:20:
f2:ab:96:ef:1a:59:3b:38:87:8f:21:7d:03:80:3b:39:b3:83:
1b:13:fb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org