Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JxL_s8F2Lro-eet_Znx2RwwXOww.roa
File: JxL_s8F2Lro-eet_Znx2RwwXOww.roa (raw, json)
Hash identifier: JjiaGsN9J/1nGhZ7iSI8NAvV2ew4CSBu7xLCrEw1Ct8=
Subject key identifier: 27:12:FF:B3:C1:76:2E:BA:3E:79:EB:7F:66:7C:76:47:0C:17:3B:0C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 140B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JxL_s8F2Lro-eet_Znx2RwwXOww.roa
Signing time: Fri 29 Apr 2022 10:18:36 +0000
ROA not before: Fri 29 Apr 2022 10:18:36 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5131 (0x140b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Apr 29 10:18:36 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2712FFB3C1762EBA3E79EB7F667C76470C173B0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:23:37:69:e4:51:13:0b:b8:df:7b:8e:4e:
af:80:c2:38:70:8b:fd:70:eb:93:c1:22:84:ee:99:
a9:8c:d9:b6:6b:eb:69:a0:b2:ac:5a:32:9c:1c:1e:
2a:8c:cb:15:c4:c0:15:d2:81:9c:3e:0c:16:0d:41:
a7:3c:c2:ea:9b:0d:37:00:b7:6c:4e:33:4a:2f:09:
21:56:c4:ac:db:7d:af:40:8a:43:21:82:65:68:2a:
89:c4:a7:7e:d0:22:25:98:79:aa:35:ae:bf:70:b6:
44:28:57:fd:e7:21:76:b9:8b:3d:07:7f:47:d4:9a:
ba:02:5c:32:65:a0:ff:b2:cc:f0:8e:5e:54:a6:13:
dd:14:bf:c3:93:67:8d:9e:f8:73:f7:b4:78:9a:86:
a0:09:27:ee:dd:1c:4a:38:09:27:cf:96:de:f5:88:
9d:43:6c:5a:73:9c:56:72:a8:7e:30:1b:f0:6c:a7:
79:06:cb:ed:7c:a5:f2:9e:bc:f4:3f:0f:bc:c9:9e:
aa:aa:bb:d1:16:a3:1c:cd:4f:b9:64:56:79:02:ed:
1f:f8:82:b4:d3:aa:7e:10:0c:25:42:60:02:5a:2d:
d4:84:66:b9:ef:52:1b:a8:e1:ed:85:6f:dd:b3:b0:
61:6b:a0:67:ec:23:80:6c:31:71:27:7d:f5:3b:e2:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:12:FF:B3:C1:76:2E:BA:3E:79:EB:7F:66:7C:76:47:0C:17:3B:0C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JxL_s8F2Lro-eet_Znx2RwwXOww.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.8.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:1a:21:31:dc:a1:dd:bf:70:36:57:87:4e:fa:92:9c:cb:f7:
73:0e:6f:45:99:5b:3a:06:e9:39:93:04:b1:cc:12:b2:3c:e5:
3e:ef:8f:0e:9b:27:b9:87:fb:43:b9:66:e0:81:66:e9:80:18:
72:0c:ba:4e:58:70:4b:d1:0e:84:01:8e:de:2a:2d:5c:cd:e9:
79:20:9c:de:2a:34:30:cd:8c:68:a0:d2:72:db:cd:ce:bc:01:
26:ed:b4:4e:55:85:a3:94:d6:c9:52:e4:6e:88:37:db:85:10:
1b:b9:ce:95:86:80:46:a8:26:72:a9:fe:12:21:d6:c6:97:a0:
6b:0e:1a:bc:b3:1b:6c:98:9b:45:ed:db:5e:c1:9c:95:bd:ce:
2e:b5:0b:93:7d:04:c0:be:aa:e1:e5:45:0a:1d:2e:b9:ff:60:
80:ac:b5:43:ee:f2:92:06:80:1e:71:ae:5c:81:49:f2:35:92:
aa:09:bc:41:c1:54:34:35:bf:c3:63:f2:2a:7c:73:cd:9c:de:
00:23:b1:8a:16:1f:45:58:04:7b:24:9a:ae:00:64:59:ac:7d:
1e:3c:54:71:3f:0f:76:e2:ef:a4:1c:e8:f1:1c:11:89:b0:04:
8f:9e:c5:9e:f5:e1:13:cf:fa:d4:5d:d2:1a:33:30:81:ca:e1:
e3:94:18:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org