Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BWyfcqs0sZRx_FGdjBGPatdvWf4.roa
File: BWyfcqs0sZRx_FGdjBGPatdvWf4.roa (raw, json)
Hash identifier: xBuHfjd74YFibl066CSUEFP5N/zVizAX3wyakx/IBlE=
Subject key identifier: 05:6C:9F:72:AB:34:B1:94:71:FC:51:9D:8C:11:8F:6A:D7:6F:59:FE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FE9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BWyfcqs0sZRx_FGdjBGPatdvWf4.roa
Signing time: Sun 07 Feb 2021 12:36:37 +0000
ROA not before: Sun 07 Feb 2021 12:36:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4073 (0xfe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:36:37 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=056C9F72AB34B19471FC519D8C118F6AD76F59FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:29:6a:38:5d:1a:98:db:7a:e3:ee:f9:a4:
68:cc:8c:8b:0a:e9:39:6d:a3:c6:74:80:7f:ad:09:
ad:aa:7a:3e:9e:c1:ff:c3:15:1e:4f:74:23:b4:b5:
18:09:d3:27:d9:c7:55:38:82:64:e7:98:9b:a3:bc:
d7:6c:ee:d8:57:46:fd:24:eb:bc:60:d5:68:9c:df:
c6:5f:86:33:64:71:8e:42:b3:e0:1d:0b:77:e2:9e:
13:cc:88:43:8f:0c:33:d2:5e:ed:d6:0b:9f:52:cd:
80:d8:87:f1:62:3f:81:6c:a4:75:77:ca:9c:55:1f:
b8:fd:de:3b:65:80:db:9e:73:b9:45:ea:09:72:29:
6a:40:7f:61:c5:94:4a:51:e5:dd:f2:59:1f:90:d0:
c8:cd:38:c9:65:f5:06:b1:5f:42:6b:ef:bc:80:08:
85:1b:19:28:48:9e:6c:67:de:8a:6d:25:3a:21:3c:
46:2d:31:e6:e2:11:8b:72:88:46:87:a2:7c:73:13:
9e:10:71:7b:9a:36:38:e4:94:26:23:c4:6c:ee:21:
5a:9e:b1:77:a7:91:ee:5a:89:36:32:2d:5f:90:e8:
58:95:1d:df:36:36:7e:95:03:32:93:fc:24:fa:49:
86:2d:36:54:c2:8f:4b:e1:d7:43:94:73:63:ed:f6:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6C:9F:72:AB:34:B1:94:71:FC:51:9D:8C:11:8F:6A:D7:6F:59:FE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/BWyfcqs0sZRx_FGdjBGPatdvWf4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.152.0/21
Signature Algorithm: sha256WithRSAEncryption
67:06:5d:c2:37:89:8e:d3:a9:3f:d7:8b:cc:21:b7:71:0b:cf:
9b:c6:af:db:37:ca:e3:eb:e1:c4:8c:38:0f:d0:c4:58:27:d2:
de:71:87:64:08:e3:8b:ed:a7:52:2b:0e:84:c8:00:9b:67:65:
48:56:35:7a:8f:f1:95:dd:be:8f:e4:8f:4b:69:7c:6a:f0:c4:
cc:77:91:45:7d:01:e1:43:db:26:f2:68:b5:f1:fc:00:dd:95:
68:12:6e:15:55:a9:18:fc:cd:d6:fd:8b:5e:c2:b1:48:b7:6a:
c3:7e:41:c2:f7:b7:7e:36:43:83:a1:67:01:32:08:27:b1:9d:
bf:00:9f:11:98:2e:ca:8a:94:1d:1c:bd:63:81:86:92:7b:3b:
d9:cf:ea:97:6c:b0:a7:1f:2b:30:84:2d:20:79:b9:07:5a:f8:
85:16:7a:1b:cd:9b:44:75:a6:f8:b5:1f:2c:2c:48:45:19:ee:
db:2d:3a:d5:5c:f0:84:49:37:47:3b:87:15:74:d7:a9:8b:71:
86:b7:fe:21:b5:67:69:72:96:82:eb:b3:e7:a0:97:34:45:9c:
34:8f:2f:bd:83:74:75:0f:53:68:04:07:f6:b3:96:cd:d2:14:
d0:12:1d:f5:3e:4d:1f:50:ba:d2:2d:4a:ee:17:89:91:67:93:
5a:28:f7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org