Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9nuSKbDoC1_cLgAec_ih7GBwmyI.roa
File: 9nuSKbDoC1_cLgAec_ih7GBwmyI.roa (raw, json)
Hash identifier: xU1aYaPVLgnjq3+KfsLKL4QQsDmENTvvQvrKH9vhi9A=
Subject key identifier: F6:7B:92:29:B0:E8:0B:5F:DC:2E:00:1E:73:F8:A1:EC:60:70:9B:22
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 122D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9nuSKbDoC1_cLgAec_ih7GBwmyI.roa
Signing time: Wed 29 Sep 2021 02:54:16 +0000
ROA not before: Wed 29 Sep 2021 02:54:16 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4653 (0x122d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:16 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F67B9229B0E80B5FDC2E001E73F8A1EC60709B22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:64:7d:58:07:e8:44:8c:05:45:97:33:a8:7a:
95:d1:4d:6f:02:3c:e8:93:53:c2:fd:82:2c:d3:83:
0d:3e:5c:d2:22:fe:93:22:fc:0a:35:2d:83:51:8d:
0b:8a:98:76:c9:e6:f3:7c:e9:b5:bf:25:bb:b8:d6:
b3:bd:76:85:f7:42:c9:b7:d5:e6:ec:01:4e:65:0b:
3c:13:21:54:ca:8a:3a:4c:9d:28:b5:45:a4:3e:93:
77:8b:bb:35:e2:7e:27:ea:e7:25:fd:f2:f4:48:cd:
db:c4:48:81:ca:84:5b:27:8b:4c:44:56:6a:52:bc:
57:19:4c:a0:46:cf:5f:5e:4d:ba:93:d8:43:6f:ee:
a0:85:c9:87:47:78:cf:d2:82:15:87:77:e9:64:a2:
98:88:9f:e9:89:c8:04:55:71:d5:7e:5e:73:35:79:
38:d2:2c:ad:84:77:78:85:6a:16:57:5e:bd:47:0a:
c1:dd:fb:85:7d:38:9c:f8:fd:50:08:b2:96:c0:5f:
77:58:9d:fd:08:b8:0c:ea:de:be:9c:0c:e0:50:a3:
65:67:2a:bc:83:9f:00:31:cf:b8:07:4c:55:b1:80:
03:d9:09:cc:14:48:b4:af:79:58:b6:8c:51:c1:4e:
90:3b:9a:c0:c4:54:9b:9d:71:2a:2e:47:4b:dc:7b:
3b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7B:92:29:B0:E8:0B:5F:DC:2E:00:1E:73:F8:A1:EC:60:70:9B:22
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9nuSKbDoC1_cLgAec_ih7GBwmyI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.48.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:58:1f:a3:4d:43:e1:c6:76:c6:21:a2:99:d5:25:95:bf:c2:
3f:5a:99:24:92:09:25:e1:fe:ce:37:76:6d:99:2f:0e:1a:45:
08:a9:67:ee:e2:53:80:fa:a1:72:87:33:da:97:33:f2:5a:cc:
ed:e7:2d:f9:ca:88:b5:74:02:55:54:e9:52:7e:03:bf:8f:dc:
71:14:25:4a:ce:40:01:02:28:0a:fe:7c:6a:94:56:4f:e6:51:
a4:e5:92:cb:18:fc:fb:7a:70:ef:be:86:6e:7a:90:65:53:71:
04:ac:4e:6b:8e:06:fe:35:06:d2:18:4b:01:9e:69:a2:fc:8f:
ce:1e:20:8e:83:50:4c:36:d9:9c:e5:ce:a5:d0:98:21:4c:14:
ba:1e:3b:8c:01:dc:3c:7d:bb:7d:b3:d2:43:03:bf:85:5c:b3:
fb:3a:cd:b0:ea:2f:6b:c4:ec:41:3d:45:24:7b:cd:9d:da:26:
0b:4e:3e:53:15:5f:4a:ef:1c:33:c4:da:d7:4b:aa:41:5c:4e:
d1:1b:4c:81:41:5e:32:18:f7:e5:69:87:bf:13:5d:35:df:1f:
57:69:2c:90:9c:02:92:bc:af:a4:28:71:d0:94:14:88:ef:52:
74:1d:46:91:e7:c5:96:98:d9:32:ef:2e:71:5e:61:6a:50:c8:
1e:c4:32:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org