Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G1JE9JntALyNcV4Nz5-jFtm33Xw.roa
File: G1JE9JntALyNcV4Nz5-jFtm33Xw.roa (raw, json)
Hash identifier: wbciUMRvsNlxeuEzMR8FYserjRGH/hPSBwLvj1r44BM=
Subject key identifier: 1B:52:44:F4:99:ED:00:BC:8D:71:5E:0D:CF:9F:A3:16:D9:B7:DD:7C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1299
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G1JE9JntALyNcV4Nz5-jFtm33Xw.roa
Signing time: Wed 29 Sep 2021 02:54:45 +0000
ROA not before: Wed 29 Sep 2021 02:54:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4761 (0x1299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1B5244F499ED00BC8D715E0DCF9FA316D9B7DD7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:69:8b:0f:36:8a:5a:65:53:f6:c8:e9:02:
49:4d:52:cd:83:26:cc:51:22:c4:57:be:76:ce:fe:
d7:f4:44:69:b1:85:bd:25:77:8b:28:a9:ee:2c:33:
54:bc:68:61:b0:f7:df:e5:2b:c4:19:cd:e1:7a:9a:
c0:24:5b:36:b4:3a:d0:0c:f9:82:25:2d:2a:ed:2f:
e8:37:12:ba:07:e3:5d:8f:37:51:cd:90:9f:af:5d:
0f:6b:e1:e3:dc:50:0f:8d:c4:a9:02:86:a8:fc:57:
f1:4b:34:6e:d7:82:0c:c2:19:c7:60:9a:08:d2:fb:
c4:01:28:27:a8:8b:aa:6b:8f:85:9e:79:52:55:6d:
04:84:c5:db:e0:c7:88:8f:1d:4b:4b:22:b9:60:a1:
b5:94:b5:4a:64:5d:58:d1:9a:11:d2:b9:36:aa:99:
0a:8c:13:83:de:52:ec:e6:58:7e:3b:28:4f:5d:ef:
30:39:d9:90:dd:54:83:42:b9:75:f0:1a:80:0c:a7:
30:43:09:9a:61:76:31:85:b3:7a:d7:2e:e8:57:78:
c9:32:bf:fb:50:c0:11:f3:b9:e4:43:b9:23:1b:ed:
87:c3:cc:a3:f4:83:79:1f:3b:d2:06:30:dd:19:62:
e4:7e:8b:80:e9:40:70:b7:f6:b5:d5:d3:d3:71:15:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:52:44:F4:99:ED:00:BC:8D:71:5E:0D:CF:9F:A3:16:D9:B7:DD:7C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G1JE9JntALyNcV4Nz5-jFtm33Xw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.160.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:aa:f9:eb:e8:a7:85:5f:c8:2e:36:9e:86:cf:ad:ab:61:9e:
fc:73:ab:70:70:e3:b6:23:7d:2a:ce:0c:e1:11:81:ae:b2:7d:
5a:aa:f0:c4:a9:7c:ac:2c:4a:00:ee:77:32:a1:9e:31:48:3b:
bc:dc:cb:7e:84:7b:10:b2:47:c1:80:1c:64:bf:51:64:ef:48:
28:e7:a5:d9:3c:35:a3:f1:e2:2a:01:d1:d4:79:a4:bb:65:47:
c2:6c:b1:59:a3:69:32:58:6e:85:68:48:ae:3b:86:6e:be:20:
06:43:d4:88:72:40:ac:63:00:51:19:3d:50:ca:eb:98:76:a0:
8a:75:ac:31:b5:c3:04:47:e9:d1:05:ca:26:c9:d5:ff:49:dd:
25:86:f9:72:85:c7:18:d0:a1:79:8f:c8:7f:af:ab:50:ec:3a:
38:8c:02:bd:cb:f3:a9:9d:68:d8:84:36:64:87:8b:85:47:6b:
4b:f2:b1:fc:2a:47:b3:2e:92:37:2c:e2:8f:73:cf:5f:87:71:
78:6b:8f:a0:9d:d7:96:49:a3:a1:65:5d:1b:81:47:73:a8:31:
68:f6:df:29:c3:68:74:b3:d8:d1:e9:25:44:58:f7:8d:16:74:
79:e3:62:cb:f5:e2:e7:56:3e:da:d2:61:43:4b:aa:83:61:99:
75:ed:0b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org