Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8Zt4t1iiTgng2lM8Zno6K1uP91o.roa
File: 8Zt4t1iiTgng2lM8Zno6K1uP91o.roa (raw, json)
Hash identifier: 0/8zIN9+RjEOzUI7K7uiPZaCNtLFqheEvgvq55tt4bE=
Subject key identifier: F1:9B:78:B7:58:A2:4E:09:E0:DA:53:3C:66:7A:3A:2B:5B:8F:F7:5A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 109D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8Zt4t1iiTgng2lM8Zno6K1uP91o.roa
Signing time: Sun 07 Feb 2021 12:46:30 +0000
ROA not before: Sun 07 Feb 2021 12:46:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4253 (0x109d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:46:30 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F19B78B758A24E09E0DA533C667A3A2B5B8FF75A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:c1:dc:ec:5d:6b:44:13:3b:a5:89:b0:b8:
5d:70:9f:71:aa:3d:53:5a:7c:fe:7d:10:2e:d5:ab:
74:5f:d5:1a:5c:27:99:3a:12:ed:4c:ef:16:e7:5e:
35:c5:4e:bc:f9:fd:ad:04:b0:ba:4f:c7:5b:c2:8e:
fb:02:60:fe:65:cb:35:bd:5b:d6:9c:77:10:27:a9:
2a:22:09:f4:70:bc:11:fa:4d:d6:a9:2b:bf:94:e0:
6a:d6:68:59:93:9b:b6:2a:46:9d:62:38:74:84:46:
e8:30:52:58:75:1d:2e:d1:a0:b0:25:99:b7:ce:a1:
cc:34:c4:9a:9c:dc:0f:43:f2:53:14:d0:29:9f:e5:
5d:3a:32:73:47:aa:cb:e8:85:81:4c:5e:9b:ec:5b:
51:44:44:4b:35:cc:1c:94:e8:13:3b:91:19:f4:92:
6d:8f:27:1a:19:95:47:02:d0:a0:36:2d:21:be:0e:
fb:61:a5:59:4e:39:da:5a:d1:d7:29:37:c2:b9:58:
f4:be:72:1e:df:0a:dc:6b:10:ba:4c:aa:bb:84:2c:
26:77:2d:c3:0f:86:b8:4e:85:8e:d4:17:b3:ab:fd:
5d:33:3b:b9:8b:c1:63:0c:ee:e0:93:61:77:8d:3f:
9b:72:8d:57:75:11:25:ad:ab:54:f2:a1:57:85:33:
3b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9B:78:B7:58:A2:4E:09:E0:DA:53:3C:66:7A:3A:2B:5B:8F:F7:5A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8Zt4t1iiTgng2lM8Zno6K1uP91o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.136.0/24
Signature Algorithm: sha256WithRSAEncryption
20:5f:b8:18:b3:e6:21:b7:0b:54:07:22:2a:f6:ba:0a:b0:65:
29:2a:2c:9c:ec:5f:ed:c2:2b:74:0c:e7:e8:49:ab:bb:ec:05:
87:ca:a8:a2:80:41:5d:b2:3d:e3:de:ef:6d:ac:c8:37:6a:fc:
79:d1:1b:ec:09:b9:43:e4:51:72:c1:f6:78:7e:0e:12:a9:54:
ff:25:ab:18:54:a2:8e:36:3f:12:aa:7d:af:41:25:f8:05:ba:
99:d3:30:fd:49:e5:7f:5c:ff:5c:f5:ea:6c:01:87:28:35:42:
66:cd:dd:47:d7:7e:b1:3f:f1:08:49:8b:8d:08:dc:5b:63:63:
8d:85:89:7a:e2:1c:02:8a:6e:08:51:10:b4:16:2d:79:b5:44:
ea:13:cc:fe:9a:65:83:0f:97:53:c6:46:21:62:db:1c:51:46:
cd:a1:fe:3a:dc:5f:c9:2a:3a:12:03:b6:37:a5:3a:2f:9d:47:
53:e6:d8:7b:1e:2f:2b:79:e7:47:cf:99:15:35:a9:1c:c9:53:
f5:0f:0e:91:80:72:ad:d7:af:b7:3f:d2:22:7e:78:9a:03:f5:
68:ff:22:b0:d1:ef:91:aa:11:c9:fe:ef:f6:4a:ff:cd:24:30:
a1:af:10:71:8c:f9:d3:04:9c:eb:ec:48:16:6a:81:11:a7:33:
3f:60:82:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org