Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EdRcW8q2NPq6IJaxb_9wfg01XZo.roa
File: EdRcW8q2NPq6IJaxb_9wfg01XZo.roa (raw, json)
Hash identifier: EVA1kKEcRVniHB7ymDmzvUUhaH2vGfjSfvu8zsAmkDc=
Subject key identifier: 11:D4:5C:5B:CA:B6:34:FA:BA:20:96:B1:6F:FF:70:7E:0D:35:5D:9A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FD7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EdRcW8q2NPq6IJaxb_9wfg01XZo.roa
Signing time: Sun 07 Feb 2021 12:36:18 +0000
ROA not before: Sun 07 Feb 2021 12:36:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4055 (0xfd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:36:18 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=11D45C5BCAB634FABA2096B16FFF707E0D355D9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:94:25:44:30:32:69:6b:27:cb:d8:53:42:
52:3a:8a:99:32:96:48:f8:76:f6:bc:de:5c:cc:75:
a1:ec:0f:aa:42:90:78:20:f3:c2:5c:1a:09:25:08:
ae:2b:0a:21:70:83:70:7d:11:4b:e1:10:2e:ab:22:
14:9f:8f:53:a7:af:28:eb:d4:94:bf:f1:b1:c5:13:
a2:7d:d8:f5:92:c6:75:2e:ef:e0:a5:40:96:48:89:
c7:12:92:62:f4:31:85:f9:7b:e9:c2:a8:7e:5a:5a:
b0:88:31:1d:ce:ae:a1:87:dd:62:9a:54:73:2d:01:
71:bb:3c:fb:9c:87:8f:8d:30:ac:93:e7:f4:79:e1:
ec:48:05:77:f9:93:ad:44:f2:1a:9a:7a:bd:2e:a0:
10:f3:79:a0:fe:fc:f2:87:9b:97:df:75:5a:a3:95:
53:49:38:cf:1f:f0:74:6c:62:dd:bb:ff:ab:46:52:
8d:87:b9:93:fc:61:6c:cc:a1:93:80:2c:d3:9c:de:
bc:3d:7e:b9:55:16:b2:f6:94:39:77:f1:8c:d4:1d:
2c:18:10:1e:4e:d8:a5:01:6e:12:82:41:26:25:93:
19:2a:f4:c8:80:d1:0c:05:fc:7a:15:10:97:a0:28:
7e:ad:7c:33:c4:af:da:ce:52:1f:30:f7:3c:6e:63:
71:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D4:5C:5B:CA:B6:34:FA:BA:20:96:B1:6F:FF:70:7E:0D:35:5D:9A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EdRcW8q2NPq6IJaxb_9wfg01XZo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.248.0/21
Signature Algorithm: sha256WithRSAEncryption
39:69:9c:aa:5d:b7:e5:f6:52:b8:38:11:c6:92:b2:61:d6:c1:
6f:01:0e:6c:fe:b7:93:b1:e3:da:e8:c9:7c:b5:97:f5:ef:a7:
f7:94:4d:50:80:f3:c2:ce:ce:01:42:4d:fb:48:ab:c0:ce:d4:
e3:98:70:f2:c3:f9:94:23:53:a9:2c:17:b5:d5:88:bc:94:dd:
c5:7d:46:55:ef:15:d4:c0:28:f3:49:f4:41:6d:9e:b9:2a:57:
d7:1e:6c:11:1f:1a:cc:e5:64:6d:1d:6b:4f:33:19:08:8c:c5:
c0:07:27:fc:fa:14:14:6a:4b:d8:d6:a7:a8:96:60:75:af:bd:
ec:1a:82:3f:49:77:05:67:b5:09:fd:20:72:5f:71:c5:cd:58:
f8:d5:20:2e:57:2c:d5:c1:0c:10:b8:03:5e:b1:a8:7a:58:45:
54:ab:41:14:02:90:ba:09:f4:76:95:35:a7:e4:ea:f8:64:40:
04:4e:c3:99:ce:a9:d3:c3:8f:c4:27:36:38:c8:14:24:4c:1a:
a9:6f:03:f1:fc:6b:7d:57:9f:22:e8:f1:8a:70:9f:65:34:ee:
ff:2d:0c:14:15:07:3f:c4:1f:1b:4b:a6:29:22:9f:80:68:bb:
f8:8e:19:00:0f:74:f5:bf:c1:d5:0e:83:c5:65:da:fd:a6:a5:
47:e0:f2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org