Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PGr-clbC6PIhhOs4cdMpBeaIMz8.roa
File: PGr-clbC6PIhhOs4cdMpBeaIMz8.roa (raw, json)
Hash identifier: F+EcRSDBgm9c04iS5XidbPMRY68dcRiaFsWJHVZGedY=
Subject key identifier: 3C:6A:FE:72:56:C2:E8:F2:21:84:EB:38:71:D3:29:05:E6:88:33:3F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1574
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PGr-clbC6PIhhOs4cdMpBeaIMz8.roa
Signing time: Fri 21 Oct 2022 09:54:35 +0000
ROA not before: Fri 21 Oct 2022 09:54:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.159.176.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5492 (0x1574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 21 09:54:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3C6AFE7256C2E8F22184EB3871D32905E688333F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:79:d9:f3:7b:d0:55:46:1b:f0:98:25:2d:
71:a2:89:a3:4f:df:95:01:0d:86:c6:1f:5d:34:b0:
d9:3b:df:28:04:55:68:a3:c1:07:a6:64:25:8d:fd:
10:be:69:2c:ff:fd:f8:11:ea:ea:c9:79:4d:f8:32:
cb:70:d0:51:69:bc:4f:cf:6b:c7:2c:dd:aa:83:ce:
d3:50:0c:e7:3b:40:3a:e1:f9:f0:35:9e:69:7b:ab:
5d:e2:fd:76:ca:14:ae:fd:f8:eb:c7:9e:15:81:7e:
1b:15:bb:2e:7d:8e:9a:56:30:c8:07:63:7a:ee:ab:
43:2f:5d:de:c5:92:08:c6:30:c3:f9:a7:ae:a3:c1:
39:fa:11:92:87:9a:0f:8b:72:83:4b:7d:f4:7d:4e:
a8:0f:18:60:c1:8d:8b:f4:23:e0:c2:69:e7:8e:be:
9f:36:a9:d7:e6:83:e9:35:a7:e3:2f:70:0f:15:e7:
5d:70:2e:fc:80:ed:33:66:8d:5e:0f:f3:54:82:63:
5b:6b:b3:d8:69:c3:a3:78:5b:e2:e5:08:a7:d9:ed:
c8:63:d9:1a:de:c6:1f:f7:4c:5f:ad:dc:1c:2b:fd:
97:12:c9:06:ae:ce:ca:70:a3:4a:e1:4b:24:b4:80:
1c:6d:08:18:f1:43:84:84:b3:cf:36:5f:a0:8e:c6:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6A:FE:72:56:C2:E8:F2:21:84:EB:38:71:D3:29:05:E6:88:33:3F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PGr-clbC6PIhhOs4cdMpBeaIMz8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.176.0/20
Signature Algorithm: sha256WithRSAEncryption
27:93:f7:d4:fc:86:af:4e:63:ed:94:53:43:56:cd:14:5a:9c:
2d:cf:46:1b:17:e9:02:64:fb:45:17:16:11:33:0d:55:fd:70:
b0:3e:80:fa:c9:d0:ae:dd:ca:87:99:e6:2c:98:45:3a:eb:c8:
23:0b:a2:23:1a:01:87:15:46:63:68:f5:8f:97:da:77:b4:c7:
63:b7:a0:42:06:6f:a1:c0:49:e6:ed:e3:6a:ac:b4:51:9b:f5:
af:11:bb:1b:a7:2d:04:82:63:1c:30:1e:fa:eb:fa:63:b6:a6:
d7:4f:39:85:1b:2d:be:85:97:3d:23:bc:d8:3d:7b:f2:b2:80:
cf:6b:28:7d:fa:27:51:aa:c2:65:ec:20:25:84:0c:fa:06:43:
d3:74:a5:eb:6a:fa:bf:a1:8f:84:89:ef:c9:b7:23:99:62:05:
1a:e6:fc:62:ae:29:89:dc:09:ba:b7:6b:82:61:09:be:66:f0:
23:c4:a4:f3:c8:bb:61:59:ee:e0:62:d9:2f:f6:18:f5:92:34:
37:10:ae:54:e2:bb:68:13:af:10:18:a3:5b:64:fa:94:38:47:
61:53:a2:aa:3f:84:e2:1c:a8:9e:7d:1b:86:cb:ef:ef:82:60:
74:86:f6:94:8d:6a:0e:8f:16:2d:08:cf:8e:14:56:44:03:15:
b8:e8:e6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org