Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zM7OUkbHNH28oxG34uWiyAZ2Fuk.roa
File: zM7OUkbHNH28oxG34uWiyAZ2Fuk.roa (raw, json)
Hash identifier: Nn5U3BBhm2w8Gcpfo1PDqaIsYpNay9Y0U0QttXW9CNo=
Subject key identifier: CC:CE:CE:52:46:C7:34:7D:BC:A3:11:B7:E2:E5:A2:C8:06:76:16:E9
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1941
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zM7OUkbHNH28oxG34uWiyAZ2Fuk.roa
Signing time: Sat 22 Oct 2022 06:06:17 +0000
ROA not before: Sat 22 Oct 2022 06:06:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 2407:4b00:ff01::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6465 (0x1941)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CCCECE5246C7347DBCA311B7E2E5A2C8067616E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:86:1b:1d:95:e4:55:b2:bc:0e:ed:52:42:
8b:ef:2f:a9:3b:be:8d:0e:ab:d7:72:f4:d1:f0:83:
a8:22:6c:64:79:9c:35:0b:61:67:46:bc:71:78:d6:
90:bf:54:8f:73:d0:81:16:1a:cc:24:45:5e:48:c5:
4f:d0:0c:e4:53:39:d4:7b:08:bf:de:cf:6d:e1:1e:
79:93:87:1d:e9:3e:29:fe:2f:de:d5:13:fa:9d:19:
19:6d:f2:3b:4b:55:58:4a:b5:22:d6:74:53:60:9e:
0d:46:8d:d1:3e:8f:2a:ec:16:60:3d:cd:60:23:c4:
cb:e4:6b:10:2c:ad:06:87:dd:2e:1d:f7:1d:7c:b8:
98:7d:fa:fc:bd:76:d1:61:8b:d2:50:ed:f0:70:33:
46:5d:11:4a:7f:32:ef:8c:c3:4a:bd:f9:ae:47:f7:
af:df:b6:6c:f1:98:0b:ad:53:03:17:6e:33:5f:13:
cb:b7:5a:b3:ef:a4:0f:e1:8e:96:a3:a7:62:b5:a1:
bb:18:66:b3:b1:65:a5:a0:23:d6:7c:c1:75:0a:14:
49:4b:7d:1d:9a:4b:9f:f3:31:32:95:c1:df:53:63:
f8:f3:cf:34:24:d0:2e:9b:dd:e8:24:a3:a3:7a:0f:
42:78:13:a2:4c:69:83:9b:ce:5d:66:fd:26:95:87:
c8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CE:CE:52:46:C7:34:7D:BC:A3:11:B7:E2:E5:A2:C8:06:76:16:E9
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zM7OUkbHNH28oxG34uWiyAZ2Fuk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4b00:ff01::/48
Signature Algorithm: sha256WithRSAEncryption
49:2e:a1:c9:da:c5:23:60:19:3d:c4:1f:82:94:8d:90:05:e0:
27:a7:c4:fa:60:07:ef:6b:32:5c:d9:fb:29:8c:ed:06:7b:d3:
bb:0f:4b:36:16:0a:94:4f:da:9b:b8:b4:97:44:b3:36:8b:27:
cd:b4:43:db:6a:00:b2:e5:e6:b0:98:f9:7a:e4:f8:1e:72:d4:
56:0f:0f:e2:50:75:1f:59:fd:d3:a0:b6:70:c3:e1:a2:b3:7f:
98:cf:ed:ff:ce:33:e2:eb:c4:fe:26:46:ba:17:22:67:d4:77:
45:bb:fa:eb:e1:46:6b:fd:e8:e4:b1:b8:1d:53:c9:b1:30:3e:
a3:d4:a0:b9:a6:82:14:8b:3a:a0:b1:88:2a:4f:d5:00:aa:fe:
7f:4b:e3:43:66:b6:c2:e1:8a:9f:9b:72:b2:53:b8:a9:b1:07:
af:07:28:5e:70:9f:fe:90:cb:a3:96:1a:df:17:ff:e2:10:db:
2e:cf:b7:00:5e:f6:bc:f8:20:21:0a:d9:d5:4a:45:67:ec:75:
04:b5:6b:bd:e9:b4:64:32:8a:2a:47:6e:74:56:79:4f:6a:e2:
27:65:41:17:3a:07:0e:7d:a3:cb:1d:ad:d2:a8:fd:c8:62:c1:
87:58:a5:1d:f6:ea:13:b4:1f:46:0a:97:e7:b3:79:a1:3c:70:
76:87:24:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org