Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w95kF3zgkxAg73y3ZSmVROqENWI.roa
File: w95kF3zgkxAg73y3ZSmVROqENWI.roa (raw, json)
Hash identifier: 1imFrdpe3Rs7i49PMEwnG46sM5P3UvdzFIRnYQ+TOhU=
Subject key identifier: C3:DE:64:17:7C:E0:93:10:20:EF:7C:B7:65:29:95:44:EA:84:35:62
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A26
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w95kF3zgkxAg73y3ZSmVROqENWI.roa
Signing time: Sat 22 Oct 2022 06:20:57 +0000
ROA not before: Sat 22 Oct 2022 06:20:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 61.64.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6694 (0x1a26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:20:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C3DE64177CE0931020EF7CB765299544EA843562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:79:57:a0:eb:e3:7c:56:da:8d:72:7c:ed:
e6:1f:7e:8d:f1:4d:e1:a1:8e:ef:09:40:24:66:9f:
cb:bf:5e:45:ea:08:fe:64:72:d3:ed:60:90:1c:2b:
8f:89:31:4f:21:4a:97:f0:9a:55:75:fb:b5:ec:67:
c7:e3:b0:81:77:14:86:cb:76:8c:f6:8e:57:d9:3b:
86:b0:cd:56:e5:f4:60:38:cc:f0:ea:59:46:69:de:
13:4d:79:28:cc:ce:9d:90:ce:28:c4:0c:2b:98:12:
ff:59:d7:5c:21:40:58:a8:f9:bf:78:b0:23:9c:eb:
e9:64:05:2a:9d:a8:03:a0:21:57:9e:4f:39:69:0c:
39:fa:52:22:bc:86:85:6d:18:e7:d3:94:f2:c6:f7:
1d:53:5d:c2:74:88:23:1d:86:de:eb:1e:5e:b1:65:
27:ee:b6:64:8d:de:61:a6:54:3c:6b:b1:4f:38:27:
19:66:e6:1b:72:c9:d9:e2:1e:57:d6:df:46:c8:52:
20:09:67:10:77:7e:db:ec:60:01:30:24:03:3d:57:
5e:f5:5d:c9:23:92:67:ad:6c:7e:ad:e4:b1:5a:75:
ba:fe:9c:14:3e:92:7f:03:02:20:b6:7a:5e:95:99:
44:53:b7:06:65:9c:e7:ca:02:68:5e:26:c1:9e:2a:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DE:64:17:7C:E0:93:10:20:EF:7C:B7:65:29:95:44:EA:84:35:62
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w95kF3zgkxAg73y3ZSmVROqENWI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:91:1f:34:79:33:13:cf:b9:e5:48:c1:47:8a:cc:63:2d:12:
22:eb:2a:68:96:7c:42:1c:77:e0:f7:6f:b1:98:dc:5e:1d:b0:
63:10:b1:fb:2e:68:c6:bc:ad:3d:2a:cb:75:54:b9:60:fa:a1:
b0:a5:46:43:a9:c6:63:1d:29:99:9f:da:10:94:87:fc:0e:3e:
ea:6e:57:cb:38:b0:5e:00:a0:e8:61:37:e6:06:a5:2b:e1:a0:
80:29:e9:27:f1:26:25:75:cb:a4:9b:ec:de:0e:3e:7c:8a:ee:
f3:c6:6b:55:1b:d1:e3:34:eb:d4:f6:82:4e:6f:bc:21:39:ac:
18:92:dd:7d:62:e7:5d:74:44:2f:d0:31:28:b1:a1:99:3a:94:
26:77:ed:aa:7e:9d:3b:b5:4d:36:06:65:37:c0:c3:10:ea:4a:
5f:5a:6f:94:e9:00:66:2f:cd:32:e2:4f:a9:1e:6f:d5:17:7b:
7e:7e:37:75:60:92:6a:64:b4:2c:7f:f2:14:41:58:1b:ad:8e:
2d:a8:c6:9c:2f:3d:0e:cb:22:f0:aa:c2:b0:9d:88:22:49:0b:
60:cc:84:72:bf:76:50:3f:15:1c:e3:fd:01:ba:70:ce:5f:85:
0f:82:db:9c:1c:04:e1:e6:13:2f:bc:b4:a6:c4:13:cc:80:15:
75:43:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org