Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F784iI5KDRZ7fvw4OMIt_UJofLw.roa
File: F784iI5KDRZ7fvw4OMIt_UJofLw.roa (raw, json)
Hash identifier: enjq3xDz1r2rJz0TmjsjKQhCs0shVP0HeeTid/8f2zc=
Subject key identifier: 17:BF:38:88:8E:4A:0D:16:7B:7E:FC:38:38:C2:2D:FD:42:68:7C:BC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FBD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F784iI5KDRZ7fvw4OMIt_UJofLw.roa
Signing time: Sun 07 Feb 2021 12:35:49 +0000
ROA not before: Sun 07 Feb 2021 12:35:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4029 (0xfbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:35:49 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=17BF38888E4A0D167B7EFC3838C22DFD42687CBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:38:6a:3d:48:fa:5d:10:85:d7:36:6c:50:
5d:35:6a:e3:68:e7:1b:e8:a4:bb:9e:31:59:15:4c:
bb:c5:49:02:bf:08:01:d6:4b:c2:08:3b:9f:ac:c7:
8f:75:50:1e:59:cb:ab:40:91:a2:df:70:d2:6f:82:
88:d3:07:f7:11:91:de:a3:62:09:f9:4e:6d:77:cf:
75:f6:dc:d6:6b:dc:0a:e7:dd:f2:ed:1c:a8:d0:a0:
7c:d9:48:70:3b:b4:07:a8:bf:b9:f4:28:b4:4a:8e:
53:26:7a:5e:a5:cd:1c:38:34:54:01:50:05:e0:50:
30:63:f8:67:d6:e3:bc:fc:7a:16:de:3b:00:b2:46:
c0:ce:46:ba:93:f3:31:ad:9f:33:8f:2f:d3:ec:b5:
86:57:76:be:2a:01:fe:28:84:ec:96:2e:5e:39:dd:
7f:61:3c:cf:de:75:b0:22:93:c1:3e:ec:b8:85:ab:
86:22:f3:ec:e6:1d:1d:fe:fa:e8:0d:4e:a8:df:7d:
74:b1:f8:ee:ee:06:f1:ef:54:27:c1:2f:4e:e9:8c:
29:2c:83:c8:33:2c:71:e2:8e:20:29:6e:49:f1:25:
50:57:e8:20:c4:32:17:b2:20:28:07:ef:36:97:c4:
23:0b:3e:65:ad:61:98:f4:81:b4:8c:ca:01:3a:b0:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BF:38:88:8E:4A:0D:16:7B:7E:FC:38:38:C2:2D:FD:42:68:7C:BC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/F784iI5KDRZ7fvw4OMIt_UJofLw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.168.0/21
Signature Algorithm: sha256WithRSAEncryption
32:14:e0:7a:79:1a:1f:47:10:0c:bc:16:41:5c:0b:67:1d:9a:
d1:8b:5a:4d:0c:b6:94:2b:0f:02:00:68:ae:53:ff:2a:be:58:
c8:12:64:18:de:c8:f6:5b:f0:51:64:70:fe:0a:b0:61:8b:19:
6a:3a:11:da:07:bb:2e:25:c8:0a:18:72:0c:09:82:54:40:e5:
4d:f7:5d:c9:0f:75:89:f9:68:52:45:c4:4f:21:43:ce:d0:47:
92:bd:fa:96:0a:03:eb:0c:7d:78:37:7a:8c:52:4e:30:d1:2f:
0a:aa:3d:d9:b0:de:cd:31:dc:02:60:00:92:41:b7:73:f5:f7:
1f:92:9f:1e:91:2f:94:26:1e:46:e2:9d:03:0a:dc:3c:61:ca:
a6:fd:73:2e:6b:15:cd:a9:f4:9b:2d:99:bc:bc:af:f5:a0:d3:
bd:1c:06:06:a3:aa:1d:57:68:75:a3:9a:bd:02:4b:44:28:6f:
cf:c2:95:6e:0c:f8:bd:53:cb:b6:6f:02:77:12:be:b8:24:03:
23:42:a1:76:47:d4:87:90:e8:59:1a:c1:4e:94:03:65:e1:db:
ff:cc:06:db:f1:3c:39:bc:d2:22:ad:e6:99:67:b0:ae:86:79:
91:28:27:67:80:c3:88:9e:42:71:80:62:5f:2c:e1:07:09:fa:
58:dd:ec:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org