Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3Vi4AbZ7yDeP99ASHxKOjamP_Kw.roa
File: 3Vi4AbZ7yDeP99ASHxKOjamP_Kw.roa (raw, json)
Hash identifier: H5WOYdXkGU8GAFQ8cngmSNkF61uo/yztofNNUAlTrsg=
Subject key identifier: DD:58:B8:01:B6:7B:C8:37:8F:F7:D0:12:1F:12:8E:8D:A9:8F:FC:AC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3Vi4AbZ7yDeP99ASHxKOjamP_Kw.roa
Signing time: Thu 15 Sep 2022 02:35:22 +0000
ROA not before: Thu 15 Sep 2022 02:35:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DD58B801B67BC8378FF7D0121F128E8DA98FFCAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:e8:0e:91:f2:b2:45:64:13:63:24:b1:f5:
e6:ed:fd:24:2c:21:16:d4:4c:00:65:e4:d7:ae:1d:
c6:41:11:55:41:ec:3f:e8:5f:6d:e4:6a:af:d4:07:
55:6f:cc:b6:b6:59:a6:c9:e2:5b:72:25:16:04:91:
c0:06:ff:e3:30:d9:14:f4:61:7f:51:74:23:4f:97:
a4:47:01:d1:52:48:a1:34:a9:32:fa:a2:0a:63:6c:
77:c3:cc:35:94:ba:ac:9f:92:fc:a8:cf:5b:0e:99:
90:35:8f:1f:b0:85:65:fa:50:0e:1d:9f:3a:dd:e3:
47:f6:7b:1e:45:74:c1:57:3e:27:e4:11:be:74:c9:
77:cd:a4:71:2a:d2:8e:21:e3:52:32:6b:ce:b5:78:
f0:00:ef:62:a1:c2:8d:04:97:34:36:8e:73:cb:57:
26:b5:ac:02:e1:2a:de:51:fc:fe:d4:82:db:cc:af:
f1:b8:41:70:a3:c5:26:fb:ce:40:9c:51:26:5f:bd:
8a:ff:a9:48:d9:d9:89:ad:ae:e4:5d:97:35:7d:c2:
ee:be:2b:bf:8c:62:04:1e:c5:c9:57:fd:a2:de:58:
72:87:c2:a2:e9:28:66:e7:0e:88:35:a4:0b:46:95:
00:5a:34:0e:90:d2:56:e3:3a:85:89:57:59:4d:39:
05:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:58:B8:01:B6:7B:C8:37:8F:F7:D0:12:1F:12:8E:8D:A9:8F:FC:AC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/3Vi4AbZ7yDeP99ASHxKOjamP_Kw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.104.0/21
Signature Algorithm: sha256WithRSAEncryption
91:d9:97:95:2d:59:35:37:96:20:59:27:cd:7e:a3:eb:2c:4b:
66:02:38:9f:56:3a:3b:8e:17:82:fc:93:b3:72:94:11:09:f3:
fe:c1:6f:af:a0:c1:33:cc:2c:2b:9c:58:01:34:c9:ba:12:69:
a9:bd:c0:0e:99:aa:f8:ef:19:7b:6c:5e:98:b5:32:c9:6f:03:
25:09:b4:9d:ad:48:c9:39:b2:09:60:44:64:93:9b:00:b0:0d:
9a:17:5f:03:7e:8b:b8:57:0c:f2:44:e4:89:f4:0c:5f:38:1e:
cb:03:4f:a9:9a:74:e9:32:fd:e4:ea:5f:bf:ed:65:3a:56:0e:
88:ec:da:b3:d0:53:b4:58:f8:85:23:e9:62:8b:02:10:22:85:
b2:02:16:55:09:17:d1:73:5d:68:af:0d:3e:e1:84:39:ee:f6:
13:55:82:7a:17:83:cd:84:75:7a:3f:37:96:fe:ba:98:61:de:
3b:c5:cb:03:ad:ca:36:fd:86:aa:42:4c:c3:cc:19:87:ee:80:
b6:73:e6:1c:d5:88:4f:c4:a6:85:20:2d:c9:db:f8:56:54:e0:
95:b9:9f:e9:d2:2b:38:68:d3:98:6f:71:17:92:89:c3:cc:d3:
68:e7:0c:83:6e:b8:32:36:6b:63:29:d2:dd:91:f4:41:3d:9b:
d3:68:6f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org