Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v7c8mDItIInCKMGJBDl8WawRVBc.roa
File: v7c8mDItIInCKMGJBDl8WawRVBc.roa (raw, json)
Hash identifier: ZSNyRwpuV+qiTruiKRCwN8rTepa1PIHTlBLpyhlpRh4=
Subject key identifier: BF:B7:3C:98:32:2D:20:89:C2:28:C1:89:04:39:7C:59:AC:11:54:17
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12D2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v7c8mDItIInCKMGJBDl8WawRVBc.roa
Signing time: Wed 29 Sep 2021 02:55:02 +0000
ROA not before: Wed 29 Sep 2021 02:55:02 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 61.61.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4818 (0x12d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:02 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BFB73C98322D2089C228C18904397C59AC115417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:b8:94:97:22:6d:e9:d6:27:fc:f4:90:97:
0e:5c:bf:50:57:e3:20:ab:8b:b2:a4:08:3b:90:ae:
fd:9e:37:c7:89:09:d2:9f:41:2a:1c:92:d5:07:38:
aa:15:58:5a:b5:31:65:88:79:38:00:87:33:3b:ba:
ed:37:da:cd:01:a4:7f:95:a5:3e:f0:c9:05:bc:07:
15:76:79:6b:8a:c1:44:d4:2d:2c:d1:7f:fe:ad:0a:
df:2e:5f:7c:86:d2:84:15:1a:33:e9:77:95:98:c6:
c9:32:53:80:5f:9c:b6:88:be:d0:9a:c0:b4:a3:f4:
fe:c1:98:5a:b5:dc:db:55:48:a4:ad:5a:a0:10:a4:
cf:64:e1:e2:cc:a8:62:f2:62:2c:af:da:6e:67:28:
1c:17:cf:33:40:30:b9:6b:1d:eb:5e:bc:83:d3:f6:
a3:3f:fe:5c:a6:02:f2:cc:7d:68:5c:ad:24:4e:ca:
4b:1c:40:50:a3:a9:2a:26:18:38:9e:34:47:cc:d8:
ce:51:54:a1:7c:84:a9:a7:49:1b:c1:12:0f:ca:cf:
d4:ca:e4:e2:c7:80:a3:5f:d7:2f:7f:a7:d6:a3:be:
87:90:16:d2:67:80:35:3f:52:50:47:65:af:55:2d:
ed:73:7e:60:86:58:84:3c:a0:d0:42:f8:ff:1d:2d:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B7:3C:98:32:2D:20:89:C2:28:C1:89:04:39:7C:59:AC:11:54:17
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v7c8mDItIInCKMGJBDl8WawRVBc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.236.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:1f:11:50:24:24:c8:68:f6:fe:47:12:9f:4f:45:10:9d:c1:
f7:cc:b0:3c:fd:90:d8:c6:23:e8:3e:f3:b7:97:e6:5f:5a:67:
f6:c6:63:10:02:d2:08:60:62:80:25:f7:2a:19:a1:3e:bb:6f:
95:00:21:58:78:e7:c0:5d:58:84:f3:ab:cd:8b:20:a0:99:40:
9a:97:66:0c:10:88:5f:54:ab:87:00:12:2a:60:6c:ef:f1:fd:
eb:1f:8b:e1:96:de:82:8a:4d:93:4b:80:d5:c2:56:98:f9:02:
cd:d6:44:0c:60:1d:e4:d2:11:09:23:23:ef:79:56:7b:6f:ff:
d5:99:2c:2f:0d:53:3e:33:cf:3d:82:21:8e:e0:ca:f7:3e:47:
e6:e0:8f:14:d3:87:d5:d1:99:11:f6:9d:8e:23:ad:e6:2d:dd:
ac:89:40:3a:a0:8b:e4:6d:e5:7c:16:af:71:d0:d9:e3:6d:7f:
fc:a9:e7:43:b0:06:8c:b4:45:b1:39:de:1b:a9:1e:d5:9f:09:
79:d7:54:fc:93:4f:2c:d1:c4:f6:23:7e:a5:7d:f5:5b:1c:24:
dc:21:c2:5a:af:a6:ff:c3:c8:17:92:ea:75:92:df:5a:ea:b7:
ed:6c:30:ba:86:9d:42:e2:4b:3c:6c:07:ee:d4:d1:b7:13:64:
30:b0:ea:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org