Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DiQ4NC7b3Y9Wy8sMVkJhTOV7kVE.roa
File: DiQ4NC7b3Y9Wy8sMVkJhTOV7kVE.roa (raw, json)
Hash identifier: PjlX2lW68gLt+y35hZWJZ0Ps05jJwra1+BBfV6fyL4M=
Subject key identifier: 0E:24:38:34:2E:DB:DD:8F:56:CB:CB:0C:56:42:61:4C:E5:7B:91:51
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1292
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DiQ4NC7b3Y9Wy8sMVkJhTOV7kVE.roa
Signing time: Wed 29 Sep 2021 02:54:44 +0000
ROA not before: Wed 29 Sep 2021 02:54:44 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4754 (0x1292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:44 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0E2438342EDBDD8F56CBCB0C5642614CE57B9151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:65:bd:33:53:8c:0c:c1:f0:07:c3:fd:fe:d1:
60:6c:15:cb:db:bb:be:e2:b6:15:82:d7:cb:68:0c:
bf:bd:22:a4:7c:85:53:b7:48:75:70:5c:f9:83:e0:
8b:90:5a:77:aa:c2:03:bb:cb:79:99:e2:9a:50:09:
d2:cf:b2:7c:ad:99:45:72:15:dc:cc:d8:0b:65:19:
69:13:72:99:58:b2:cf:b5:7a:b7:69:7e:47:69:88:
2b:ee:0b:49:2a:12:b0:fd:09:4b:78:59:e4:7e:6f:
6e:e1:8b:cd:8a:53:f1:f9:3b:c2:7a:e3:89:e6:e1:
90:e4:74:93:e8:b8:86:52:15:13:4f:79:b2:42:2b:
9b:5b:17:b4:f9:d2:76:10:55:1c:9f:5e:0e:e6:b9:
ee:20:34:6d:59:02:55:c9:bf:12:ff:cd:9f:1e:0e:
a9:53:87:05:80:de:72:e4:14:21:11:58:29:dd:67:
4f:7b:c3:30:d7:c2:c2:dc:6b:6d:70:7f:31:c9:85:
39:dc:7a:05:d4:77:5e:5e:ce:27:25:29:e7:17:24:
d8:e9:59:f4:89:d4:71:58:a6:f0:23:9a:9c:d4:c8:
97:c6:b5:c7:e3:29:31:38:be:66:05:22:3c:b7:84:
1b:66:c9:39:21:ea:57:72:4c:69:00:12:c9:7f:e4:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:24:38:34:2E:DB:DD:8F:56:CB:CB:0C:56:42:61:4C:E5:7B:91:51
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DiQ4NC7b3Y9Wy8sMVkJhTOV7kVE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.146.0/24
Signature Algorithm: sha256WithRSAEncryption
77:06:61:64:6e:14:c3:68:97:fe:70:15:d3:0b:c3:b2:5f:06:
d5:05:44:1c:00:07:37:ed:af:c5:b5:1f:9f:d7:dd:d8:f0:ed:
55:c7:45:72:a3:4a:ed:4b:94:66:fb:14:8d:b1:3a:0a:51:93:
ba:c6:6e:01:76:a2:df:93:8d:e6:c1:7e:a1:c9:39:62:4d:5f:
2e:2d:aa:7d:35:8b:84:1b:59:41:25:1e:82:a2:c3:fc:f5:7e:
3d:95:69:42:c8:d5:2d:ff:c5:75:a1:90:e3:41:3d:81:5f:94:
83:b5:de:94:da:11:b0:a9:06:53:3e:52:91:dc:38:fd:d8:b9:
a7:2d:07:26:b9:a6:d4:7f:4b:79:a0:6d:1a:b1:8f:8b:65:36:
fd:96:40:64:e2:31:25:1c:fd:bd:23:ec:c7:fa:6f:86:13:ef:
8e:2a:22:72:65:ec:de:a0:91:88:4b:83:5d:75:f6:2c:70:65:
7e:cf:c4:36:b5:41:ee:b4:6f:e4:de:90:8f:e6:c0:18:b4:6d:
7a:a7:55:a1:14:d5:76:b2:a9:65:9b:44:80:20:33:07:35:af:
12:b3:0c:83:25:dd:45:47:e5:fc:c1:51:b5:3b:44:86:71:9d:
97:91:f0:ed:c3:d0:7a:3a:3f:6d:d3:5a:4d:70:97:3b:74:62:
9b:86:e8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org