Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D4scxuqwuLxuCWMlelawMX2_L8A.roa
File: D4scxuqwuLxuCWMlelawMX2_L8A.roa (raw, json)
Hash identifier: v8kruGL7aKNjq5Pkd1Ylz2lxWJe9MYvOz497WVLo19s=
Subject key identifier: 0F:8B:1C:C6:EA:B0:B8:BC:6E:09:63:25:7A:56:B0:31:7D:BF:2F:C0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 194A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D4scxuqwuLxuCWMlelawMX2_L8A.roa
Signing time: Sat 22 Oct 2022 06:06:20 +0000
ROA not before: Sat 22 Oct 2022 06:06:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.158.192.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6474 (0x194a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0F8B1CC6EAB0B8BC6E0963257A56B0317DBF2FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:64:b9:ca:d3:84:d2:8e:bb:ab:42:50:96:
07:23:e2:69:19:c8:58:2c:60:fd:da:48:f4:0a:b9:
cb:09:33:67:01:6a:0d:d5:9c:c9:61:1d:63:67:e5:
6f:bd:8f:3c:3a:0c:7f:c3:ea:e3:bc:b0:c3:07:f9:
a3:cf:35:92:0f:74:3f:53:fd:3e:d6:6e:81:60:53:
de:d0:30:66:17:a4:dc:da:04:ce:c4:66:7c:2f:a2:
51:d0:94:58:be:80:f8:de:b6:9b:a2:89:b0:53:ca:
8f:9f:01:96:ce:68:b9:4a:b9:5a:cb:32:6e:66:fa:
d6:40:e7:c9:9c:25:09:39:f5:73:4f:08:10:8f:5d:
a8:04:5e:89:fa:8b:93:8b:dd:86:12:4f:a7:8b:77:
2f:a3:96:39:80:4e:75:ba:7e:22:1a:88:fc:99:e3:
e2:af:2c:3a:d7:86:d9:58:db:07:3e:ba:87:27:75:
70:a3:64:56:86:e8:7e:a0:87:8c:f4:38:f8:51:63:
35:87:a4:43:18:fc:49:9e:23:ab:34:b5:be:d2:c7:
0e:32:9b:5a:df:f0:ff:b9:9c:5a:a0:bd:75:da:5f:
3f:02:7f:b3:06:98:76:5c:e2:65:8a:9a:24:87:0c:
11:d2:68:78:8b:c8:f7:9a:fb:6e:44:f1:50:56:ac:
e4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8B:1C:C6:EA:B0:B8:BC:6E:09:63:25:7A:56:B0:31:7D:BF:2F:C0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D4scxuqwuLxuCWMlelawMX2_L8A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.192.0/21
Signature Algorithm: sha256WithRSAEncryption
32:86:4a:d0:76:ee:b3:a2:21:be:4f:ad:24:88:f1:12:7c:f8:
86:b8:48:cd:75:c1:bc:3e:6e:81:73:db:10:2f:b9:74:d0:8e:
15:31:8a:4c:11:83:16:d2:a7:37:be:6b:f2:ca:5f:de:41:a6:
28:1a:e1:5e:44:e2:89:ce:3a:80:2f:bc:42:86:54:41:8d:85:
03:c3:57:03:88:a5:8e:0d:d2:db:c2:0d:90:cb:31:63:4e:b5:
b3:e2:c2:3a:d4:73:1e:2a:ea:d9:9a:25:b2:3b:d0:ce:e1:3b:
69:df:c9:d7:22:04:1d:2f:08:1b:fd:5d:6d:1e:ae:c7:1b:4e:
bc:f9:d8:97:bd:ba:8c:fe:99:e0:3a:32:a8:26:30:c2:47:10:
c7:28:5d:fe:ec:a6:7a:b6:7e:38:76:7a:18:b2:93:91:c4:dc:
ae:68:cb:d8:85:b1:40:d5:d8:a7:29:80:95:38:95:f0:7c:dc:
82:5f:d5:d3:7f:e6:25:c1:31:ae:0e:0c:03:0b:c4:ea:53:9d:
d9:30:6a:b4:84:d7:8b:a0:af:3f:17:d6:b3:2b:6f:66:66:71:
7e:3a:cc:82:17:68:4e:48:c8:9c:d0:db:4e:32:8f:4e:35:dc:
3b:fe:35:df:19:1e:ce:cc:58:87:a5:94:99:c0:2f:f1:85:75:
7e:3a:34:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org