Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/y3npGH35TdeDqtXzJjMWE7Ja0to.roa
File: y3npGH35TdeDqtXzJjMWE7Ja0to.roa (raw, json)
Hash identifier: uiOGJfvS47SBBueqDgdzjEe6vJYPCYKoilULDRoEarc=
Subject key identifier: CB:79:E9:18:7D:F9:4D:D7:83:AA:D5:F3:26:33:16:13:B2:5A:D2:DA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19F4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/y3npGH35TdeDqtXzJjMWE7Ja0to.roa
Signing time: Sat 22 Oct 2022 06:13:26 +0000
ROA not before: Sat 22 Oct 2022 06:13:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4662
IP address blocks: 61.60.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6644 (0x19f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:13:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CB79E9187DF94DD783AAD5F326331613B25AD2DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:8a:50:71:a5:86:d2:47:f6:65:f3:ec:3a:
8b:45:5a:4c:0e:36:0b:1a:3d:14:e1:fb:b4:a9:76:
b8:e2:9d:61:c8:24:8d:7e:52:2e:49:ef:6c:aa:6f:
54:d4:72:19:8e:b5:8b:06:d4:c8:93:6b:40:10:b3:
0b:c4:ab:e9:39:b3:8c:65:26:7d:58:bd:92:57:3e:
99:35:82:5d:22:98:da:d2:67:23:61:5a:0c:30:45:
88:43:5a:f1:c9:75:50:cb:f8:9f:8d:c2:8e:cf:da:
b1:cc:0b:c6:03:be:d1:79:af:ee:ae:b6:3b:cf:13:
de:39:f7:67:11:3b:0c:9b:23:92:f9:4d:64:9f:f9:
f3:ce:f2:04:36:d0:69:07:2f:20:55:e0:a0:53:a0:
fb:ae:41:cc:3b:a7:f2:cf:b2:19:5d:2a:dc:5f:64:
44:17:cc:89:10:2c:df:22:b2:0e:37:b3:cc:d7:c0:
5a:c4:5b:d6:33:1b:5f:9e:27:cb:a0:e6:36:a0:f1:
c8:cc:92:37:ab:43:c9:30:2a:55:a5:ce:32:9e:a8:
f8:47:1d:d8:0f:99:4e:38:17:1b:44:fe:22:e9:09:
58:24:88:aa:f1:58:93:ab:39:86:24:8a:35:e5:d4:
62:6c:6e:56:ea:07:fc:31:50:36:a4:cb:11:1c:d4:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:79:E9:18:7D:F9:4D:D7:83:AA:D5:F3:26:33:16:13:B2:5A:D2:DA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/y3npGH35TdeDqtXzJjMWE7Ja0to.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.208.0/20
Signature Algorithm: sha256WithRSAEncryption
68:29:5d:6e:a6:68:fe:35:2e:67:e0:0f:71:89:2e:f3:97:51:
dd:45:a8:5a:09:96:10:1a:72:81:ef:3d:4a:bd:c6:6b:c9:6c:
90:6a:61:eb:7a:0a:a3:ce:80:f8:17:86:2f:df:70:72:12:ea:
ea:ae:7f:cc:84:1f:e1:c9:f8:4f:0a:09:6f:0b:93:37:06:5f:
c9:7c:fb:47:69:91:76:5d:51:5b:e0:1a:f3:f8:49:d0:c7:09:
fa:3a:98:0d:75:73:cc:fb:58:22:74:0a:07:b7:38:e1:6b:9e:
43:78:ab:59:03:72:88:32:97:4f:2a:a5:a8:01:5c:1b:3c:af:
64:bc:0f:e5:dc:e2:76:56:8b:12:c5:f4:3a:48:d1:11:20:e2:
eb:63:8c:59:1a:d2:73:76:c9:06:e1:76:f8:c1:96:a8:7b:3a:
ee:e9:86:64:6a:a5:4e:b1:46:88:36:e9:16:28:c8:77:1d:18:
db:59:27:e8:a3:0d:03:2d:b2:be:54:5b:b6:e4:2f:9d:7f:63:
a5:4a:fd:7b:2c:18:76:71:59:b2:e8:31:5d:c0:41:1a:f9:c3:
e0:8f:a3:ba:b4:c4:8f:da:f7:21:c6:dc:e2:cd:af:79:69:a2:
f4:0a:ac:d3:40:db:28:85:56:35:dc:8b:d1:5d:0f:27:8c:e4:
27:5b:58:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org