Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NtO1-TJA3Y5vN0IgErEERoF9iFA.roa
File: NtO1-TJA3Y5vN0IgErEERoF9iFA.roa (raw, json)
Hash identifier: 7wvoResWtBREFRQpgVMZyLxXFxrXRJxfTzzNPdc5P5A=
Subject key identifier: 36:D3:B5:F9:32:40:DD:8E:6F:37:42:20:12:B1:04:46:81:7D:88:50
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1326
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NtO1-TJA3Y5vN0IgErEERoF9iFA.roa
Signing time: Wed 29 Sep 2021 02:55:25 +0000
ROA not before: Wed 29 Sep 2021 02:55:25 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.159.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4902 (0x1326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:25 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=36D3B5F93240DD8E6F37422012B10446817D8850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:fd:dc:c1:7c:e1:4e:f6:4d:74:0e:9b:64:
a6:88:66:3f:d3:d2:67:27:e2:2c:8a:76:c4:bc:f1:
70:9a:9c:b0:ef:5e:5e:99:8b:97:dc:52:2e:f0:45:
e5:2e:43:4c:2e:89:cc:fa:de:de:2e:03:79:26:e4:
74:0c:e2:e9:8d:cd:c4:a5:c4:4b:ab:90:5d:91:e4:
32:23:87:c2:c7:98:7b:7e:08:f3:fb:ab:3c:bf:e6:
e6:3c:e2:2f:25:48:ed:5e:ba:2a:ae:12:1d:2c:fd:
f5:c2:b6:04:52:ad:8e:f6:68:fc:66:60:3a:9a:fc:
e1:63:8e:c0:96:21:93:bc:db:e4:d6:f6:a5:c5:9b:
96:21:50:75:4d:58:a2:ec:c9:0d:4e:42:ac:5f:fb:
c7:32:eb:b8:0a:f9:c9:06:df:b0:17:6a:76:8f:b9:
5e:54:3a:17:71:2e:d2:81:39:bd:06:74:73:a7:ad:
15:fc:a8:b7:30:c9:79:f2:ee:a1:3e:26:97:bc:8d:
ca:d6:e5:99:bf:37:b4:94:66:87:c4:3a:b0:a4:d4:
41:0d:bc:c1:47:0c:db:36:b4:cb:8e:29:37:3e:cf:
5e:96:e0:95:25:99:25:7b:62:4d:05:b1:4f:91:6d:
ed:d3:31:f6:d5:22:52:6a:d0:01:07:df:28:62:86:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D3:B5:F9:32:40:DD:8E:6F:37:42:20:12:B1:04:46:81:7D:88:50
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/NtO1-TJA3Y5vN0IgErEERoF9iFA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3b:54:15:1f:d4:fe:ca:60:be:c3:59:55:7e:bf:8b:bc:41:4d:
df:da:3e:65:15:66:d7:4a:da:94:e6:06:7d:16:be:55:97:09:
88:a8:52:8b:c7:30:60:32:1a:21:16:8d:d9:c7:3f:9f:15:c2:
f3:57:c0:a3:9a:7c:48:1e:b7:68:23:ec:8f:a4:67:9f:04:e2:
a2:80:a2:3f:37:8c:7f:c9:7a:c4:44:e8:a4:3e:81:cd:e6:e3:
f6:37:c4:1f:f7:d4:26:f7:55:cc:6f:26:f7:ce:7b:90:0c:ff:
9b:1a:6f:de:5f:9e:66:25:00:18:9a:9d:e5:00:ab:b8:09:6e:
71:5f:e8:0d:51:45:61:c4:25:21:da:32:40:6a:95:12:f0:46:
d1:a5:1e:a6:4b:a6:36:9c:b1:28:e4:06:29:84:61:f6:09:cd:
08:2c:35:b6:1e:2d:7d:87:b1:69:fa:bb:b7:f4:a8:77:04:8e:
d8:b3:b6:a6:05:33:e1:2a:cb:0e:1d:a0:d7:25:ab:53:43:b7:
bf:e6:3b:ef:75:5e:40:e4:e3:95:fa:7d:1f:41:6c:63:c0:63:
bd:8c:73:6d:fe:51:a7:21:e4:b1:14:cb:b1:ea:be:32:73:57:
bb:c0:19:d0:4c:46:c7:47:95:fe:b4:ce:a0:21:b8:db:e6:eb:
b4:c7:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org