Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xCFptljXuwn_iMFt2HfCBIeDsEI.roa
File: xCFptljXuwn_iMFt2HfCBIeDsEI.roa (raw, json)
Hash identifier: mEQGcSXaKDwhlTgNW5eA830WiqiUITz5XZNQCXtovH8=
Subject key identifier: C4:21:69:B6:58:D7:BB:09:FF:88:C1:6D:D8:77:C2:04:87:83:B0:42
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BC0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xCFptljXuwn_iMFt2HfCBIeDsEI.roa
Signing time: Tue 29 Sep 2020 10:08:48 +0000
ROA not before: Tue 29 Sep 2020 10:08:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4662
IP address blocks: 61.61.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3008 (0xbc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C42169B658D7BB09FF88C16DD877C2048783B042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:ad:e9:99:c1:f4:2b:53:04:0c:93:b8:9c:
03:1e:e6:42:d6:f8:ef:ca:f1:3e:c9:d4:05:85:a4:
61:25:ff:ee:52:b5:da:c9:47:45:02:a6:21:32:26:
b8:32:b0:81:98:ed:be:81:f2:3e:61:df:53:04:dc:
74:d0:9b:b3:d6:b2:d4:b7:89:5b:bf:57:f9:58:68:
d9:6d:e8:73:dc:86:bf:a6:82:db:c7:70:6c:03:3c:
0a:49:63:4b:f6:da:23:3b:6d:93:17:7b:ba:ad:93:
26:a8:30:6a:58:c9:c8:3d:3b:68:f8:a4:5b:cf:19:
57:1c:2e:0a:a7:9a:73:d0:db:01:29:fd:8d:67:bc:
e8:88:65:c2:dc:0c:2f:68:b8:10:21:3d:73:12:e8:
e3:a4:9d:14:42:c5:09:ce:69:ad:27:eb:c4:04:d7:
d2:1a:32:99:86:e2:ba:07:13:19:b9:7c:80:e4:46:
c3:55:6a:13:be:13:12:4b:07:ff:a9:1e:a8:05:6e:
60:d5:32:c2:bb:45:1b:c7:65:77:67:68:f0:d8:2a:
82:56:0f:35:10:6c:bc:c9:7d:59:e6:5d:56:fd:84:
b2:2d:07:d6:a7:7e:3e:ba:43:db:6e:da:a1:97:4d:
c4:63:a5:05:79:1a:74:bf:0d:da:4f:07:f4:a9:d8:
0f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:21:69:B6:58:D7:BB:09:FF:88:C1:6D:D8:77:C2:04:87:83:B0:42
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xCFptljXuwn_iMFt2HfCBIeDsEI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.224.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:f9:da:f3:cc:cb:7c:f1:d7:41:0f:e5:42:10:36:80:8f:4e:
7d:95:0e:73:27:ad:e0:84:3b:93:02:51:84:db:e9:b8:b5:29:
66:27:3c:2a:25:91:d9:12:7a:79:a8:ce:fd:3f:9b:10:70:b3:
58:5f:bc:93:cc:cc:bd:9f:55:4f:ba:1c:72:48:aa:9c:9c:0b:
d8:1e:6f:c1:0a:f0:78:f6:2a:e3:87:2f:58:fe:80:c7:71:48:
ff:8f:1e:58:63:b7:eb:03:c1:1b:40:a1:ab:ed:6a:e8:0b:1c:
0e:44:11:29:9a:51:1f:24:99:bc:08:18:b5:be:d9:03:f5:c8:
c7:b2:14:6e:be:6d:60:69:1c:0c:ba:c9:f2:89:4b:30:87:9e:
02:3b:18:62:d8:31:76:c8:2c:e3:40:e7:3c:66:5c:92:d8:3e:
6a:5e:8b:db:3d:18:d3:3d:84:07:7f:4a:5c:8c:fc:1b:77:e7:
6d:3c:f6:82:f1:b3:3b:70:83:4b:28:89:d8:f2:02:30:a1:6a:
13:a6:c9:82:e7:ae:36:c6:9e:ef:e3:87:f9:a2:08:8a:d7:35:
7b:b2:9f:6b:1a:fb:af:0d:d1:67:c5:3f:2f:13:94:1e:6f:c5:
31:e7:5f:7b:f0:42:78:71:ad:ec:05:2c:af:17:5b:89:23:fb:
d9:60:28:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org