Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MKEOgmDWwi_5uDgIHARRRlY-gaQ.roa
File: MKEOgmDWwi_5uDgIHARRRlY-gaQ.roa (raw, json)
Hash identifier: x0VgDv2IQo6hYArTOXGRwICgsoWl/y9Cc19L2tBZXls=
Subject key identifier: 30:A1:0E:82:60:D6:C2:2F:F9:B8:38:08:1C:04:51:46:56:3E:81:A4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MKEOgmDWwi_5uDgIHARRRlY-gaQ.roa
Signing time: Thu 15 Sep 2022 02:35:48 +0000
ROA not before: Thu 15 Sep 2022 02:35:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=30A10E8260D6C22FF9B838081C045146563E81A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:25:97:42:c8:fe:f7:5a:b6:49:80:5c:88:
37:e5:39:31:80:94:2f:ad:fa:b7:07:d1:8a:9a:d2:
e5:c2:6d:13:0d:e4:bc:19:fe:c3:9e:d3:bb:0e:eb:
b1:66:25:45:f6:e7:a5:84:79:f3:ef:11:3f:6f:e4:
7a:6a:62:85:84:d9:ad:13:da:87:3d:8c:0e:1e:1c:
9a:40:11:70:df:92:e5:31:06:d6:a6:14:0c:0b:27:
3a:05:d3:36:26:51:0b:16:09:43:63:10:6d:68:e0:
11:db:df:22:b4:13:8c:5f:d8:04:cb:dc:3d:ca:f0:
50:4e:7a:f5:19:b4:1d:51:19:64:85:74:59:e7:7e:
e1:f3:b3:0e:7e:df:28:da:bc:69:3a:3d:6e:be:8f:
61:56:32:05:c5:61:6f:0f:90:04:2e:8e:e2:15:49:
3d:4a:ed:46:9f:52:45:07:d0:ff:51:be:c9:3a:eb:
b1:d4:be:7c:f6:44:89:e1:4f:71:0f:37:cb:40:8b:
b9:92:29:c0:20:f1:34:49:0c:09:f0:c1:7b:9b:95:
ec:25:89:b0:f6:31:f0:4a:fc:bb:83:0d:8f:00:1d:
04:15:e0:ec:3b:57:32:01:19:9d:8c:da:4a:bb:bc:
f4:e3:a7:c9:bc:97:69:10:f8:b3:38:13:07:2c:d8:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A1:0E:82:60:D6:C2:2F:F9:B8:38:08:1C:04:51:46:56:3E:81:A4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MKEOgmDWwi_5uDgIHARRRlY-gaQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.96.0/21
Signature Algorithm: sha256WithRSAEncryption
37:70:49:d0:89:8b:0d:c2:69:d4:d4:da:e9:f8:88:61:68:2d:
51:aa:e8:b7:17:a1:26:1e:b0:d2:03:60:77:59:d9:64:60:b0:
6a:9f:e5:d0:cc:d8:4d:33:88:f1:ae:7e:2d:fd:ae:ed:4b:73:
db:21:5f:65:ad:ff:57:a2:d0:4c:8d:84:6e:91:e0:46:cf:7e:
4d:fb:7a:07:a2:e0:81:fc:97:e6:2e:fa:71:ea:93:d9:ee:9e:
f2:ab:25:ae:e9:c0:a6:62:36:75:23:c4:dd:d5:71:55:99:7e:
4c:07:a0:71:f2:84:bd:c4:8d:9d:d1:73:c7:32:f9:cd:67:dc:
82:f9:86:02:36:58:89:54:71:89:a3:33:f3:20:5c:51:f8:3e:
5b:ec:df:b0:95:5e:f2:4c:5d:74:48:46:7e:29:75:02:8f:d1:
d5:cd:46:8a:a3:a2:f8:9f:47:4b:8f:1b:ea:68:78:42:fa:36:
5c:b0:55:35:a5:6d:2f:86:e9:a2:b3:c3:ab:9a:b1:5d:ec:a5:
fe:90:44:26:18:49:bd:14:63:db:41:fb:a9:9a:fc:ca:31:25:
9e:46:55:cd:ff:b7:00:62:20:3c:f1:a2:3f:6d:fd:cd:f2:bd:
41:0f:26:f8:da:dd:bd:06:65:03:63:90:a7:e2:4f:fb:4f:3c:
31:fe:bf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org