Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F51mEmMmvxk0Hw6XBD1fFrPGW74.roa
File: F51mEmMmvxk0Hw6XBD1fFrPGW74.roa (raw, json)
Hash identifier: 9N1FTdi6EO+aM414wBLPyfdk2NaoxY+KNCm3ESatBlU=
Subject key identifier: 17:9D:66:12:63:26:BF:19:34:1F:0E:97:04:3D:5F:16:B3:C6:5B:BE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F51mEmMmvxk0Hw6XBD1fFrPGW74.roa
Signing time: Thu 15 Sep 2022 02:35:53 +0000
ROA not before: Thu 15 Sep 2022 02:35:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.159.80.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=179D66126326BF19341F0E97043D5F16B3C65BBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:c9:97:f4:83:13:63:eb:61:1d:5e:35:a3:
97:43:03:30:25:70:9b:10:79:3d:e9:20:15:32:7a:
ea:f5:89:57:94:21:82:a6:aa:d0:08:cf:43:ab:f4:
19:ed:df:6d:6a:97:63:23:9d:c5:eb:5d:19:8b:6e:
1c:88:70:cf:3a:db:8c:26:a4:75:84:e3:11:2d:a0:
18:10:7c:9f:89:64:d4:ad:e8:f8:04:d8:c8:1e:4f:
cf:c2:e8:2f:3b:ac:58:4e:fc:3e:24:8b:e2:38:4b:
16:c4:9c:de:37:b3:fa:12:8f:58:54:24:82:0e:bc:
e4:75:75:3e:d8:29:72:59:dd:d0:29:c8:e5:6c:37:
e7:8d:c2:81:26:be:1e:5c:fa:51:d4:10:8f:7d:74:
8e:f2:2e:f0:b6:99:da:0e:37:82:4f:b4:bf:27:5c:
2a:87:cf:41:32:f4:93:7e:fd:3f:d3:de:f8:85:9f:
3b:d7:5a:60:1d:0d:04:e1:e0:a5:0a:37:d7:54:d9:
70:ab:18:6b:67:8b:6f:e1:d2:db:f6:d1:65:a8:23:
0b:75:ef:ea:ca:34:2c:6e:e5:b8:1a:0d:4f:05:a2:
03:8c:22:ed:ff:64:0e:7a:7a:dd:8c:b4:11:d6:ae:
1b:71:70:57:bc:79:76:a1:27:73:93:67:d1:42:8f:
0d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9D:66:12:63:26:BF:19:34:1F:0E:97:04:3D:5F:16:B3:C6:5B:BE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F51mEmMmvxk0Hw6XBD1fFrPGW74.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.80.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:52:13:b7:bd:4f:b8:77:7d:c7:8e:55:e7:6d:dc:5e:15:6d:
c4:b3:2f:60:9b:2d:08:12:5d:41:1a:f5:3f:8f:bd:c5:57:09:
ce:c1:cb:39:a7:60:a8:77:e9:4a:71:9d:f4:0d:a9:e4:51:70:
f2:5e:84:bf:8a:a5:cd:fb:6f:07:3a:e7:c8:34:4a:95:02:2d:
4e:f7:2a:b7:f7:79:88:c9:8f:00:57:68:2e:58:79:41:96:66:
6b:94:b8:29:a6:b3:e8:06:66:e4:35:0b:7e:a3:ca:0a:f4:5f:
f7:d4:f4:26:c9:0d:62:00:09:69:e6:a7:63:17:f0:e3:47:c5:
c8:90:76:7d:74:4b:b2:27:f0:ea:05:dd:af:dc:e1:21:bd:5f:
55:72:b6:d6:ca:cb:ab:8a:7f:77:e9:0b:b7:09:1e:5e:36:11:
53:c2:b9:ce:f5:6e:3c:f3:b7:5d:c3:79:89:9e:8c:95:c3:56:
fe:1d:82:70:ef:e5:41:81:64:13:5d:25:b2:46:7d:1e:e5:3b:
57:6c:2d:d0:6c:31:6f:03:ea:ed:7d:82:fd:41:ee:f4:67:d0:
ca:35:1a:87:65:bb:1e:5d:15:a7:bb:a4:1d:ec:0d:bc:1d:0f:
fb:f2:be:93:ef:b2:95:42:b7:22:27:9d:41:9b:d2:c8:f8:50:
c3:0f:ee:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org