Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TBclw91MgfocVtRzkK9cM0Y1JE8.roa
File: TBclw91MgfocVtRzkK9cM0Y1JE8.roa (raw, json)
Hash identifier: s7WElLydy7RDhjkMcBAwHm99Xp6qvlkvj8BlCk+JylE=
Subject key identifier: 4C:17:25:C3:DD:4C:81:FA:1C:56:D4:73:90:AF:5C:33:46:35:24:4F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 196C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TBclw91MgfocVtRzkK9cM0Y1JE8.roa
Signing time: Sat 22 Oct 2022 06:06:30 +0000
ROA not before: Sat 22 Oct 2022 06:06:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6508 (0x196c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4C1725C3DD4C81FA1C56D47390AF5C334635244F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:57:77:3f:91:ef:a5:7a:03:b1:ef:10:fe:
ac:44:2b:a9:43:58:b1:28:4d:24:a3:0e:06:14:1c:
79:02:2b:40:a0:d5:bd:37:f6:c0:b1:1d:ae:f0:3f:
0b:ad:98:e3:71:a7:cf:ce:f0:c9:e9:fc:49:8a:ef:
8b:7b:c5:d0:15:1b:e1:09:e6:f6:ee:31:9f:fb:0f:
0f:e8:a1:29:f1:2a:e1:7b:4f:26:b0:e0:4c:69:c0:
e4:e9:4a:11:ad:67:aa:b5:fe:83:4b:d7:e7:16:b9:
f3:5a:50:16:f6:e4:25:6d:22:be:1d:4f:98:d2:f6:
da:13:e5:ee:76:e8:2c:e9:23:a4:47:3c:85:94:28:
d4:ab:6d:67:44:4b:85:39:6b:06:e1:f7:99:4a:3e:
6f:a6:c2:74:f2:05:5d:6f:32:89:07:48:a0:c0:bf:
9f:bd:18:13:80:10:75:b6:c8:78:7c:d7:64:db:ad:
df:1c:42:c8:df:2b:df:e3:c9:fa:aa:4f:36:18:dd:
19:26:90:0f:0c:b1:c9:8d:80:5b:82:7a:2d:4c:7c:
45:2d:c8:f7:12:9b:7d:da:17:3c:d7:53:95:04:f4:
5b:2e:d9:6b:23:e6:d7:23:00:62:7b:70:89:6f:91:
5c:b5:ca:b8:3a:d2:d5:44:c2:7a:30:c6:68:51:ec:
7a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:17:25:C3:DD:4C:81:FA:1C:56:D4:73:90:AF:5C:33:46:35:24:4F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TBclw91MgfocVtRzkK9cM0Y1JE8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.96.0/22
Signature Algorithm: sha256WithRSAEncryption
04:62:fa:11:fc:5c:08:e0:bb:f0:2d:2f:a1:2d:8e:94:77:fc:
9f:b8:1e:b3:69:3f:f5:04:2d:02:09:4c:ea:2f:b2:30:f7:09:
47:35:27:08:0c:4e:11:5e:8b:04:01:d2:6a:70:3a:0a:de:6f:
56:ff:c0:dd:f7:63:c4:b2:9a:aa:c9:df:d1:ab:8b:ce:5e:e3:
6b:09:9e:5c:36:0c:e7:12:c8:34:af:99:b6:50:9d:ce:e9:63:
b7:f4:21:e5:65:c6:d8:fd:77:57:3e:c4:73:bc:89:f5:1b:07:
11:e3:8c:b9:1c:87:fc:e2:c1:3c:0b:58:8c:3e:d8:59:63:64:
ee:0e:5b:e1:7f:6f:75:49:2a:c2:f5:22:39:e7:b2:a3:ad:36:
c2:6c:b7:fc:b5:85:78:ca:c1:57:19:ca:c0:34:85:7d:67:9b:
4a:f4:b6:7f:79:b4:17:bb:d4:d2:12:d9:2e:a1:d7:3d:00:e6:
b7:16:1b:73:82:33:d4:64:fd:89:67:fb:ad:1f:ea:bb:a2:e8:
6a:b1:4b:79:47:7c:58:fb:9d:d8:9d:ca:c0:49:af:2c:d6:45:
fc:cc:5e:d9:bf:69:a7:ce:1c:11:da:d5:37:d5:bf:92:aa:bb:
c9:14:87:d1:73:ce:38:6e:e8:d0:bb:e0:ec:b3:e9:07:84:95:
83:6f:ae:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org