Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OvExuRcnmPt0SIunVIKUPTtEwq8.roa
File: OvExuRcnmPt0SIunVIKUPTtEwq8.roa (raw, json)
Hash identifier: /3XXEuaG1jBlmPt7o5aNjsi6HYwhvfecJLnxLsNuHSs=
Subject key identifier: 3A:F1:31:B9:17:27:98:FB:74:48:8B:A7:54:82:94:3D:3B:44:C2:AF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1919
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OvExuRcnmPt0SIunVIKUPTtEwq8.roa
Signing time: Sat 22 Oct 2022 06:06:06 +0000
ROA not before: Sat 22 Oct 2022 06:06:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6425 (0x1919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3AF131B9172798FB74488BA75482943D3B44C2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:25:ee:4f:e7:2a:4d:33:c8:d1:9b:11:48:
90:4e:c4:54:30:6d:4a:3b:e0:e3:dc:0b:b4:8a:82:
22:fd:52:96:fd:19:16:ff:71:9c:5b:bd:ae:53:0e:
a0:5b:60:d5:e3:ac:1e:85:ce:d0:68:be:82:a0:dd:
52:17:5e:62:b6:fc:fa:8b:07:eb:8a:33:0f:b4:bc:
0a:e8:37:a9:e2:73:ce:da:9e:aa:9e:a5:fd:1e:c1:
af:b2:93:6f:48:5e:50:d3:1b:a4:3f:d8:80:ec:43:
b2:6f:c5:ed:5f:a6:c2:2a:9d:20:f0:3b:09:b5:f4:
8a:0b:70:68:0e:17:36:e8:7b:13:79:96:a1:c2:8d:
65:c0:bf:05:7f:a5:96:6d:a8:aa:ec:5b:fd:64:90:
2d:47:70:bc:c7:9b:41:cb:55:ef:a5:3a:4f:e1:a7:
b4:ce:b7:8f:f5:db:84:b4:1a:c5:8a:41:b2:64:90:
f9:23:92:5b:5d:dd:cb:82:15:50:6d:0f:19:e6:95:
07:bc:03:46:f0:08:9f:e0:5e:e2:c9:7d:e3:e1:bc:
91:ad:97:6a:69:a0:e1:2b:a8:6d:7e:39:43:a8:e6:
be:51:40:c6:01:77:ec:9b:ab:dd:8e:70:7c:57:a5:
f2:d2:af:fc:14:0c:30:fe:f6:d8:0f:bd:5d:36:e0:
4a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F1:31:B9:17:27:98:FB:74:48:8B:A7:54:82:94:3D:3B:44:C2:AF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OvExuRcnmPt0SIunVIKUPTtEwq8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.64.0/20
Signature Algorithm: sha256WithRSAEncryption
29:23:9e:8e:af:c9:06:60:9c:0f:f2:02:88:7e:b1:87:07:68:
2f:c9:04:ed:d6:f1:ad:4c:5c:91:64:bb:3f:0a:5b:79:c5:e5:
91:aa:33:4f:d5:e9:a2:49:48:91:28:41:02:b8:1f:cd:e4:2f:
de:54:71:b6:39:67:52:1f:ad:de:63:89:7f:7e:05:6d:d7:22:
c3:d0:9d:ae:c5:6f:04:67:8d:33:12:af:30:af:40:f0:df:bb:
ca:18:12:5b:04:44:60:4e:38:e4:1c:a3:3d:f4:e3:77:f1:c0:
1f:ac:97:dc:7b:65:d9:ce:89:6d:05:77:8e:76:a7:92:9e:3b:
d7:8e:5b:19:91:9b:fc:c3:53:ec:59:99:c9:39:5c:eb:c2:92:
bb:3e:fe:e3:95:b5:0f:fe:fd:07:b5:3c:a5:e4:ee:7e:1a:d8:
4b:fd:e9:dc:29:9c:b4:b6:90:99:22:ba:f2:0d:e1:a1:03:6a:
6f:3d:c9:86:2f:a5:33:a9:41:ed:c7:c0:f6:47:e3:14:52:7b:
b3:66:ac:a7:b3:d0:81:32:99:cf:44:db:83:d9:94:0d:fd:d3:
e7:46:f7:18:b1:5b:81:ef:f4:0c:d0:d7:c4:31:4b:90:8c:09:
89:f3:7f:0a:49:4a:90:16:9b:79:27:86:1b:79:0b:44:3b:e8:
e1:8d:2a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org