Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UMypCqLYlvrqwRiojP2q1l1YjQg.roa
File: UMypCqLYlvrqwRiojP2q1l1YjQg.roa (raw, json)
Hash identifier: QyoIokRFcJCrmi7xFjFkapMmyJZ/ji5BUSIRIrrOgHw=
Subject key identifier: 50:CC:A9:0A:A2:D8:96:FA:EA:C1:18:A8:8C:FD:AA:D6:5D:58:8D:08
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AB9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UMypCqLYlvrqwRiojP2q1l1YjQg.roa
Signing time: Tue 29 Sep 2020 10:07:32 +0000
ROA not before: Tue 29 Sep 2020 10:07:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2745 (0xab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=50CCA90AA2D896FAEAC118A88CFDAAD65D588D08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:76:0d:5e:fb:99:da:b0:90:0c:e0:1a:00:
94:9e:01:5e:cc:a2:d4:bc:53:01:1f:2b:c5:91:f3:
17:a6:af:e9:5e:56:f2:2c:31:07:8c:d7:95:35:77:
2e:7e:fe:ff:52:64:34:9e:15:a2:34:7e:ad:b5:f8:
d8:2d:15:e4:eb:f2:29:d7:cf:f4:58:94:3d:77:eb:
80:c5:e7:bf:98:56:e0:bc:09:ec:f1:d6:0a:d6:29:
8b:63:ea:7b:ee:e2:a4:82:a5:fb:a5:4d:0b:4a:71:
84:d3:9e:83:d1:73:18:21:c4:b9:c8:ea:a8:cf:66:
57:be:a5:b7:46:5a:85:ba:3b:a4:16:c6:6e:2d:64:
19:e6:f8:2f:73:78:ab:c9:f8:a9:40:4d:a1:b8:1f:
72:ce:41:60:15:a0:c7:4f:09:b7:2f:af:e3:97:ee:
28:48:35:05:4d:bf:a2:28:ab:cc:04:fa:97:02:04:
6a:90:ea:38:36:f8:45:b7:0c:83:c9:8c:1d:18:04:
be:19:45:9b:48:ef:20:91:4b:c5:a5:d0:67:fc:46:
76:c5:39:31:4c:79:e9:85:96:da:92:87:3b:a5:01:
c6:a9:91:3f:be:6f:3b:b9:36:9d:fb:1d:09:02:c7:
29:59:06:ea:3e:e9:38:cb:39:6c:e3:42:b3:77:1c:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CC:A9:0A:A2:D8:96:FA:EA:C1:18:A8:8C:FD:AA:D6:5D:58:8D:08
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UMypCqLYlvrqwRiojP2q1l1YjQg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.136.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:ff:c0:17:05:47:58:f4:fb:7e:f7:58:34:07:91:26:7f:a1:
0f:6b:23:c0:77:d2:31:51:30:ee:95:ee:0b:80:4f:aa:64:9c:
09:52:57:6a:39:07:ea:d9:4e:fb:e9:77:32:bc:01:e4:6c:fe:
33:d6:4c:e8:f6:fa:d2:25:0f:af:2d:3c:41:ee:8d:59:8f:f7:
92:ec:60:9d:7c:da:1f:64:c0:29:08:eb:91:27:de:fb:af:63:
02:0b:2d:bb:69:09:5c:84:9f:14:89:1e:df:9a:6a:6d:04:d1:
1b:e1:5f:31:75:33:c1:95:a5:71:3e:f8:ae:49:d4:11:01:aa:
5d:41:b7:21:37:54:b1:68:f3:34:a4:31:dd:2e:08:7e:e5:ec:
60:0e:ab:91:5d:5d:04:95:4c:52:d3:94:1c:a7:e8:ad:0a:90:
36:9d:ff:85:ff:6d:b0:ea:1c:fb:b4:41:99:fe:8c:fc:36:9f:
0e:ff:4e:7a:36:d4:0b:90:2d:ef:cc:f3:99:98:ac:db:2b:3a:
99:3f:29:7b:87:f4:0c:9f:3c:2c:d5:9d:e7:c8:05:3d:25:f4:
f1:ee:ec:cb:7a:da:f1:58:9e:6a:14:d2:c5:26:55:8e:a7:63:
f5:a9:45:c7:3c:c7:3e:25:6e:62:6b:05:7c:14:38:20:33:49:
f5:1b:b1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org