Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xvr1dbrgbHtd720NiXqJ_z2-3yk.roa
File: xvr1dbrgbHtd720NiXqJ_z2-3yk.roa (raw, json)
Hash identifier: vzZEbakk42Bz3n0IeA5Fz1Zlq/gAVc+FLMyviCv+obU=
Subject key identifier: C6:FA:F5:75:BA:E0:6C:7B:5D:EF:6D:0D:89:7A:89:FF:3D:BE:DF:29
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B73
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xvr1dbrgbHtd720NiXqJ_z2-3yk.roa
Signing time: Tue 29 Sep 2020 10:08:26 +0000
ROA not before: Tue 29 Sep 2020 10:08:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 211.76.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2931 (0xb73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:26 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C6FAF575BAE06C7B5DEF6D0D897A89FF3DBEDF29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cc:db:ef:9e:db:2d:e1:49:90:8e:5a:2a:46:
b7:f8:f5:82:ec:67:ad:b1:3c:72:8b:b9:09:aa:22:
4d:6f:4f:0c:c0:0e:a7:40:5b:be:ae:a8:1f:f0:0b:
59:7a:58:2b:f4:71:22:86:b1:f2:8d:e6:db:3d:76:
c0:6d:34:78:46:4c:81:a8:20:56:bb:db:b6:d8:20:
2d:5a:6e:cf:2c:f9:f1:49:4e:a2:2a:d9:a2:4e:a0:
4e:12:b2:27:8e:19:33:32:13:1f:1e:33:5a:1e:d4:
0e:e4:5b:7d:65:3c:33:39:cd:8d:af:80:ed:ab:5f:
e2:bb:29:6f:50:b8:84:d5:3b:92:46:6c:58:d7:06:
32:97:68:40:6b:c2:ea:10:df:55:0b:41:f1:d4:c0:
1e:c7:76:d3:a4:33:e3:92:b5:fe:5c:a0:2b:e5:99:
3b:64:f7:68:02:44:20:2b:2a:4c:f1:d9:0d:bf:69:
57:42:ab:7d:fa:04:a7:1a:cc:bb:a1:f9:6d:d9:0c:
88:5d:60:cc:79:ce:84:14:85:68:55:19:d7:e6:9b:
d9:e0:06:ca:ac:8f:5b:89:0e:95:fb:4c:af:0f:8f:
9e:06:e4:e7:12:4d:9e:7e:0d:80:9c:27:56:bc:1d:
f8:90:f3:78:51:33:7b:7c:ab:4b:72:56:74:d5:ab:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FA:F5:75:BA:E0:6C:7B:5D:EF:6D:0D:89:7A:89:FF:3D:BE:DF:29
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xvr1dbrgbHtd720NiXqJ_z2-3yk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.54.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f3:61:3d:67:54:e7:d0:be:a2:15:9e:a0:9d:36:8b:04:eb:
12:52:ce:f6:b7:f5:e3:e1:b7:b8:0e:7d:db:35:d2:14:f3:db:
bd:41:14:e7:51:3c:7d:09:e4:0c:96:e5:bd:80:bb:9f:c6:64:
ed:7d:10:ec:15:6d:59:b7:e9:d6:33:32:0e:74:21:23:28:fe:
01:70:ec:9e:28:75:1d:d9:9a:ed:32:4c:f7:05:b1:4c:3f:20:
e3:d0:23:dd:6d:0f:d2:80:99:1d:56:99:43:2d:15:f6:6d:f8:
62:f5:21:4a:c9:78:e3:79:72:21:91:2e:04:aa:48:8a:ab:aa:
87:5b:ed:ae:12:c4:af:07:6a:a2:5d:a8:3f:d0:26:79:56:b0:
b5:c9:e7:20:dc:37:e4:af:8f:f9:0a:2d:6d:f6:a2:1b:b1:a0:
be:c4:59:5b:a4:dc:b0:60:5e:aa:3d:0c:86:82:67:20:92:d9:
c1:4d:64:ba:2a:82:3b:59:02:84:d1:f3:de:1e:ad:bd:d3:65:
0d:1c:1d:14:09:2b:db:6b:d2:5a:e1:63:db:fb:b0:87:1f:8b:
aa:f4:24:7d:19:af:b9:c8:41:fa:63:66:1d:59:a9:32:1e:86:
fa:11:53:88:4d:d5:7a:51:aa:d2:1f:50:9b:8c:4e:7b:18:77:
c7:41:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:41 2023 by rpki-client on console-ams.rpki-client.org