Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EHJ7Zq321WhciQYSZFJsFFbxxnU.roa
File: EHJ7Zq321WhciQYSZFJsFFbxxnU.roa (raw, json)
Hash identifier: KR/N28nv7051I69FEA++1UWpFlzcRWQQHEYtob+6Ulg=
Subject key identifier: 10:72:7B:66:AD:F6:D5:68:5C:89:06:12:64:52:6C:14:56:F1:C6:75
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0ABC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EHJ7Zq321WhciQYSZFJsFFbxxnU.roa
Signing time: Tue 29 Sep 2020 10:07:34 +0000
ROA not before: Tue 29 Sep 2020 10:07:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2748 (0xabc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=10727B66ADF6D5685C89061264526C1456F1C675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:99:07:e6:82:c0:2c:c3:ec:7f:62:41:d8:
17:36:d7:9e:1a:3b:1e:5d:f6:62:f7:e7:65:80:fc:
ad:34:c5:16:2b:fa:be:ad:97:41:18:bf:0a:1d:45:
61:87:5e:30:1c:22:8c:04:fa:23:68:8d:5f:54:a3:
7d:bb:96:96:0b:36:ae:b8:53:06:53:e5:34:86:1e:
08:d2:9e:e3:e7:87:c1:4c:8b:2e:07:cd:9f:84:d5:
1c:99:82:9e:43:d9:a6:f9:2d:16:a8:93:77:45:a5:
1f:ed:b0:ec:e2:0f:62:7f:b0:26:3f:ee:e9:22:4b:
fd:20:c2:66:f3:7e:78:a0:c7:b2:37:59:4f:d7:70:
fa:53:33:2f:4c:29:6f:f6:6c:7e:aa:62:da:8f:20:
5a:d6:c5:bf:e0:d2:ae:bb:a8:c5:78:9f:5e:64:75:
86:2c:a1:61:3d:91:12:90:99:69:ac:0e:d5:eb:46:
a1:09:15:23:2a:be:c8:cc:6b:4a:43:70:d7:7e:13:
68:a4:65:e8:4c:d6:b7:7a:70:d8:22:ed:5e:6f:10:
ee:f9:c1:44:bc:3c:4c:ec:71:cf:85:da:fa:23:94:
f8:43:88:41:87:a6:fb:b7:80:21:76:87:cf:de:09:
d8:1e:43:6b:1f:a9:67:c4:1c:ca:a6:af:27:ee:b4:
2b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:72:7B:66:AD:F6:D5:68:5C:89:06:12:64:52:6C:14:56:F1:C6:75
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EHJ7Zq321WhciQYSZFJsFFbxxnU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.146.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e9:44:01:00:15:01:91:45:b5:fe:41:da:41:61:86:2b:fc:
11:03:2a:c7:57:a7:95:1d:5b:3d:d9:c2:bc:62:b8:14:a6:38:
e3:b3:0f:5d:82:74:e0:59:98:89:90:5a:0b:0a:58:8e:59:b2:
9f:37:1f:af:26:24:ca:bb:86:f5:20:c6:17:0a:fb:c3:bc:36:
b7:16:fd:4a:a2:0d:0d:d8:6a:ea:d2:54:8a:45:e2:bf:65:d8:
35:d0:06:7c:fa:cb:a2:b9:ea:fc:4c:f9:be:6c:6e:0a:08:8b:
11:d5:3d:33:c6:e9:3c:19:81:89:41:71:0a:03:5b:46:a3:e7:
0e:f8:e0:7a:24:94:f8:cd:6a:a0:0a:c2:97:c0:96:f9:0d:df:
79:c2:94:08:26:4d:d0:0f:3c:d7:e6:3b:5a:d0:6c:df:9c:6e:
6d:ee:26:84:c2:f4:5c:ee:19:cd:bf:2e:b2:e1:29:ea:4d:f4:
12:e3:b7:ee:ce:06:e9:a9:0a:98:59:be:36:63:74:9a:43:4b:
f0:10:80:19:13:87:b2:51:ff:ec:49:c7:1e:95:0a:8c:a8:91:
1d:22:d0:81:5d:b2:6a:48:6a:98:31:f4:e8:da:a8:f6:53:eb:
d3:b9:6a:66:35:94:ff:37:26:5c:aa:98:ef:65:fc:86:f6:5c:
cf:e3:27:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org