Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LlRF59HAsJLGvcA2Fqyl2Vm0BGw.roa
File: LlRF59HAsJLGvcA2Fqyl2Vm0BGw.roa (raw, json)
Hash identifier: aZUaa14fDt8+PZ7oocqRf4ozugCmCWYcM/pSQtbc5uM=
Subject key identifier: 2E:54:45:E7:D1:C0:B0:92:C6:BD:C0:36:16:AC:A5:D9:59:B4:04:6C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LlRF59HAsJLGvcA2Fqyl2Vm0BGw.roa
Signing time: Thu 15 Sep 2022 02:36:37 +0000
ROA not before: Thu 15 Sep 2022 02:36:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2E5445E7D1C0B092C6BDC03616ACA5D959B4046C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:55:09:38:5d:b2:f1:47:c6:0a:10:a7:8a:
47:b9:5c:57:b8:b7:63:84:67:1d:f2:7d:ac:b8:13:
b5:b8:7e:bc:33:f6:3d:58:65:b4:f6:63:21:8a:52:
14:15:96:e3:d4:ab:01:31:1d:b2:75:15:29:d4:5b:
b7:9c:c4:49:01:dd:d0:35:e1:24:5e:a9:0a:d9:eb:
5f:ae:95:43:bf:6d:c9:72:32:97:52:57:5e:8d:d3:
06:57:54:be:e7:46:63:71:6c:1b:7e:99:ee:2e:04:
30:04:d9:3a:88:c5:1f:2d:ff:64:d4:45:b0:68:24:
c5:84:f2:a8:e3:05:35:95:ff:e3:39:33:28:0f:1b:
39:a6:c2:df:64:da:ce:d8:3d:45:0c:39:a6:8d:bb:
3b:aa:71:01:b7:92:de:70:7b:ce:6f:02:e6:b2:e6:
1f:63:57:a4:ca:1a:f0:64:a7:32:4e:29:c1:fa:d9:
ed:7e:23:1f:7c:fb:49:aa:30:4d:68:f8:f5:af:8b:
de:b9:c5:60:db:06:68:52:32:e5:0a:d1:ae:7a:7f:
80:63:3b:f4:61:37:67:19:49:15:55:68:b5:cd:c6:
b8:9f:45:5f:e8:de:7f:d4:d3:ad:89:eb:1b:35:44:
07:14:52:31:af:cd:7c:8b:ee:22:0a:6d:2f:80:0e:
18:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:54:45:E7:D1:C0:B0:92:C6:BD:C0:36:16:AC:A5:D9:59:B4:04:6C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LlRF59HAsJLGvcA2Fqyl2Vm0BGw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.232.0/21
Signature Algorithm: sha256WithRSAEncryption
71:c8:82:1b:40:5f:b3:1b:9d:03:e2:9f:33:ef:70:48:3a:47:
65:5b:36:41:73:99:57:de:a9:c0:e5:e7:5e:f0:4e:e7:41:e0:
b9:35:ef:f1:00:26:57:18:14:9d:56:c7:c2:1e:94:b9:53:03:
77:73:38:52:65:43:ca:91:95:9e:89:38:64:02:dd:97:91:d4:
aa:da:97:69:fe:f8:c6:d1:18:50:f5:63:c0:0f:a6:0e:12:f3:
32:08:23:57:ff:1f:a7:20:8f:67:fa:62:b1:61:5d:f5:4c:7e:
60:f7:21:81:66:8d:69:0f:ba:ca:b7:8e:61:a2:94:09:7c:d1:
b0:15:e6:20:5c:25:02:9e:85:fc:67:9a:04:bf:61:d4:57:8a:
34:49:49:b3:4c:ba:e0:27:b7:e8:40:a4:c1:bb:5d:92:5e:64:
53:31:97:ed:54:d6:cb:fa:32:cf:4e:9e:2c:af:28:62:59:d9:
d1:5a:31:44:89:73:70:20:bf:36:99:1e:e6:8e:1f:d3:6b:b0:
6f:8e:80:a4:78:4b:dd:f4:31:3e:27:b1:dd:94:64:5e:dc:ef:
89:0c:10:51:51:59:c1:af:54:c6:3a:e6:41:fd:c4:e7:6a:03:
e9:1e:3a:cd:b4:88:97:77:20:52:c4:37:d1:fe:74:82:3b:8f:
7d:49:2b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org