Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ck6vTTKAT49pTHv0_Cshst8w8ss.roa
File: Ck6vTTKAT49pTHv0_Cshst8w8ss.roa (raw, json)
Hash identifier: yso5yOPPyxpWhforFYJGuBEhQ1ELZo3T+klI5hpDFgo=
Subject key identifier: 0A:4E:AF:4D:32:80:4F:8F:69:4C:7B:F4:FC:2B:21:B2:DF:30:F2:CB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1007
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ck6vTTKAT49pTHv0_Cshst8w8ss.roa
Signing time: Sun 07 Feb 2021 12:37:11 +0000
ROA not before: Sun 07 Feb 2021 12:37:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.159.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4103 (0x1007)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:37:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0A4EAF4D32804F8F694C7BF4FC2B21B2DF30F2CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f2:8e:8e:c4:73:eb:8b:25:cc:41:c1:38:96:
bc:e2:23:88:ff:95:ef:7b:45:e3:35:f7:57:3b:93:
0c:85:70:e6:4c:bb:bc:b2:2b:d0:98:e4:cd:c6:cf:
f5:07:59:84:23:a0:a6:d2:cb:07:c4:7e:2a:be:65:
2f:71:79:4c:03:d1:f5:50:8f:cd:de:35:ec:18:52:
e9:6b:84:82:6b:c3:4c:0e:f8:c4:22:fd:d2:30:18:
23:cb:60:34:c9:36:e8:8c:f4:2d:f3:f8:de:2b:06:
cf:89:77:11:61:3c:6b:31:da:d9:fb:c3:24:cb:2c:
20:81:40:0b:d6:1d:9f:3d:d3:5b:0f:44:5f:2b:fb:
24:14:34:24:bf:ec:1d:0d:e1:1b:f9:aa:00:58:0b:
a2:8d:ec:60:14:30:56:5b:58:b6:38:32:17:c6:64:
f9:fa:0a:b1:37:d7:b8:7f:99:40:b4:df:80:f1:a4:
17:3d:1b:b7:73:ea:b8:f8:62:34:b7:e0:9c:88:59:
f8:a8:a9:28:50:75:58:f5:fa:a6:43:46:a1:e7:5e:
b5:06:cd:ac:37:1c:e2:15:08:2a:1f:c5:84:e7:08:
13:97:9e:13:07:a7:98:50:30:a4:9d:64:79:14:c8:
27:d4:46:db:8e:36:14:1f:d1:c9:76:d2:c4:b3:32:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4E:AF:4D:32:80:4F:8F:69:4C:7B:F4:FC:2B:21:B2:DF:30:F2:CB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ck6vTTKAT49pTHv0_Cshst8w8ss.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.72.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:9f:00:73:86:0f:32:27:75:c5:fb:18:a1:fa:95:32:13:10:
57:e8:6e:e4:8d:69:d1:66:81:d2:59:31:3b:14:d0:a8:89:30:
48:d9:ff:25:44:b8:96:94:9f:64:52:c6:1e:a8:3f:eb:22:08:
af:d2:85:6a:0e:17:1b:eb:9c:2a:f3:1b:4a:e1:2c:21:92:2f:
7c:16:da:e7:a9:47:55:6c:4f:09:5d:98:82:45:0f:90:c3:84:
d1:59:d6:fe:5f:ff:a7:8e:c3:65:b1:f4:1d:3e:d1:0d:5d:82:
51:7c:bf:f4:92:aa:1e:00:2c:dd:df:e2:58:de:0a:3c:c9:88:
7c:17:b4:bd:49:bd:99:db:80:27:91:0e:e1:46:aa:47:1e:c1:
3a:43:ac:67:fa:a1:b0:2d:94:c3:c5:74:b3:52:5f:74:0a:2e:
85:46:08:85:48:36:90:66:63:06:52:2f:75:c5:9c:ba:b4:ba:
b7:46:31:51:0f:02:5c:0a:c6:28:7b:2b:97:e1:a3:88:f9:d9:
1a:6e:44:04:8f:e0:22:b1:48:fa:f2:1a:46:a5:5d:3a:dd:81:
38:b4:4b:f1:b9:8a:6b:55:d6:09:41:d4:93:b9:5f:2b:8c:4a:
6c:83:0d:0d:0b:1b:d6:d6:83:3c:04:36:46:89:c1:ba:6c:aa:
61:53:11:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org