Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vxmvF3_XL9rwZFqt5RjMoZBqBjI.roa
File: vxmvF3_XL9rwZFqt5RjMoZBqBjI.roa (raw, json)
Hash identifier: EWeH0wn3s7C9m+EYr0tOcAi3js61IULMdU19LUGioXg=
Subject key identifier: BF:19:AF:17:7F:D7:2F:DA:F0:64:5A:AD:E5:18:CC:A1:90:6A:06:32
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1470
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vxmvF3_XL9rwZFqt5RjMoZBqBjI.roa
Signing time: Mon 06 Jun 2022 06:17:10 +0000
ROA not before: Mon 06 Jun 2022 06:17:10 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 61.61.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5232 (0x1470)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jun 6 06:17:10 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BF19AF177FD72FDAF0645AADE518CCA1906A0632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:ea:3e:97:80:86:9c:e4:98:23:cb:69:8d:
d3:fb:7c:2e:c7:3b:d7:45:a2:fa:cf:22:6e:8d:e6:
88:9c:6c:f6:ce:a2:7d:71:f8:8c:a3:46:4d:a7:83:
81:9d:f7:b6:b4:da:3c:73:0a:63:f6:c8:c8:3f:44:
38:c6:05:9e:b9:33:73:bf:d8:c5:ad:9e:f3:e8:f9:
eb:65:9d:a0:24:56:3d:98:cc:75:d4:ac:90:80:59:
6f:08:63:d1:64:8e:27:53:05:3c:25:d6:2c:95:31:
72:9a:2c:e8:ed:fe:f2:21:4b:7d:54:af:11:b1:96:
eb:52:fb:d2:37:f2:ec:2d:7d:36:c3:9e:a6:1b:da:
e3:0e:bd:7a:5c:c1:a7:b4:79:1d:b8:e2:11:01:82:
54:8c:98:18:43:ec:11:33:39:54:25:d8:f4:d4:50:
84:83:ad:a5:0d:b1:89:dc:eb:f2:fb:41:ab:b2:09:
6d:01:b7:cf:c5:a3:0b:14:d0:26:a4:3d:23:b1:88:
13:35:40:c7:89:1c:b6:0b:52:5e:a6:91:24:9a:ef:
10:54:2d:86:41:a5:ef:83:94:c1:ac:c0:35:c3:08:
b9:e3:1c:ab:61:7f:b2:c8:45:6e:3a:73:34:d9:ed:
8b:8b:43:ae:ae:02:ef:3d:63:15:85:67:19:e6:72:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:19:AF:17:7F:D7:2F:DA:F0:64:5A:AD:E5:18:CC:A1:90:6A:06:32
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vxmvF3_XL9rwZFqt5RjMoZBqBjI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.212.0/22
Signature Algorithm: sha256WithRSAEncryption
04:ce:d6:b1:cc:ef:8e:a1:eb:9f:36:ad:1c:54:d6:e2:46:9c:
85:7d:31:ae:e3:23:3a:c4:92:ec:ca:5e:e8:ed:bc:35:6a:1a:
9b:00:77:0a:f7:5c:94:9a:25:86:d4:87:ec:dc:e5:71:f9:7e:
bf:e0:a0:7f:3e:bb:25:5b:f7:60:b0:13:7e:bd:68:ac:3e:f1:
0f:c6:04:66:6b:1f:cc:8d:df:b7:fe:ff:de:87:50:b8:f4:14:
1e:9b:50:e1:61:49:c2:1c:99:44:63:c4:fb:8b:29:5e:c3:db:
fe:fb:f7:ce:c0:f7:77:1c:d6:7d:55:d7:df:b0:f5:0f:a9:86:
6f:d4:74:6a:d0:f2:ad:4c:29:3e:39:7f:cc:f0:1b:63:06:7f:
d1:3e:d3:97:0a:df:00:87:61:57:49:d4:bf:e8:99:a1:87:f1:
59:ed:f6:f6:e7:d6:08:be:ad:13:53:10:6b:f0:e7:30:77:a5:
aa:01:a4:4d:e4:41:98:12:a9:18:76:2c:df:ec:da:7c:b8:76:
96:6e:9f:80:4d:8c:79:f4:e5:55:1a:95:bb:97:fc:5c:82:0b:
26:fb:88:16:3e:4e:26:8a:d6:ff:be:35:2c:a2:1c:49:c7:f8:
02:50:7c:8e:cb:46:74:2a:be:97:be:a0:d1:cd:98:df:c6:65:
db:db:bd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:53 2023 by rpki-client on console-fra.rpki-client.org