Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/W54M9Exxqc9a48YVc9Y_Tpp1vQs.roa
File: W54M9Exxqc9a48YVc9Y_Tpp1vQs.roa (raw, json)
Hash identifier: EPqBxe5MiBFRya9Xvl1UJYDXUcfEsDAKDLslk54OTlc=
Subject key identifier: 5B:9E:0C:F4:4C:71:A9:CF:5A:E3:C6:15:73:D6:3F:4E:9A:75:BD:0B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/W54M9Exxqc9a48YVc9Y_Tpp1vQs.roa
Signing time: Thu 15 Sep 2022 02:35:49 +0000
ROA not before: Thu 15 Sep 2022 02:35:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5B9E0CF44C71A9CF5AE3C61573D63F4E9A75BD0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:36:18:87:67:3d:24:c3:78:39:df:1a:50:
2c:3a:51:78:85:f4:6f:d9:7a:35:98:49:83:f1:83:
4e:05:98:d6:a1:a8:66:bd:a3:cd:f1:5d:87:ea:b7:
4e:7d:52:78:45:ab:2a:5d:d4:8d:81:ac:ae:40:be:
b2:3e:69:ab:ea:f7:26:4a:27:50:8c:3d:35:1f:e1:
61:c3:58:b1:2a:ba:20:8a:b2:38:ca:c2:ad:81:fc:
b7:3f:96:7c:f5:cc:eb:88:c4:72:57:12:f2:c1:65:
0f:78:a9:61:b7:e3:41:b1:4a:3e:b4:92:a3:56:30:
37:91:71:58:35:12:b1:d7:4c:ba:71:8c:19:1f:30:
36:ef:85:b0:e8:20:ec:b0:e8:33:3e:9a:7d:f8:e7:
0a:36:68:c8:56:2e:4f:c7:14:d3:68:13:5a:a1:c0:
3e:12:d9:07:ee:c7:a0:1d:e2:b5:d7:9e:11:c0:74:
d2:07:33:7a:a9:35:15:af:e3:4e:33:d6:10:80:b4:
1c:91:90:91:96:8f:0f:02:b7:1f:15:d9:e4:12:a3:
8d:1c:7a:46:5c:26:29:61:7b:28:1f:d6:e7:d5:f8:
7a:64:eb:d6:2d:12:80:7d:3d:d3:10:ff:3d:bd:db:
45:80:90:97:a9:24:e5:8d:ca:ee:fa:27:f7:ff:8d:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9E:0C:F4:4C:71:A9:CF:5A:E3:C6:15:73:D6:3F:4E:9A:75:BD:0B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/W54M9Exxqc9a48YVc9Y_Tpp1vQs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.145.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d2:a6:05:b1:b8:9c:28:84:c0:8f:a4:4c:fa:f4:fa:56:5b:
b7:ca:ff:e3:b9:19:14:ad:04:7e:dc:4a:57:6c:b0:1e:14:f4:
1e:f6:69:07:b8:9a:4a:d3:0a:7d:47:78:41:08:a1:b1:86:ee:
18:c5:f7:1c:bb:db:8b:47:67:5f:58:6d:df:bc:ba:f0:c4:4d:
e7:4d:4d:ee:ef:44:3c:c2:ce:fa:f9:09:af:d7:bd:38:92:9a:
56:d2:0b:3b:87:81:27:eb:2b:c1:8e:d0:8a:19:a3:ad:d1:30:
87:0e:b9:9e:05:27:51:cb:49:2f:4f:be:3e:19:79:01:06:22:
50:cd:fe:c1:5c:3a:a9:29:87:3d:84:f3:1e:9c:04:c1:1c:fa:
1a:07:64:df:76:0f:96:32:70:dd:7f:49:d9:3d:22:c9:e1:a9:
7c:30:26:00:7d:e8:4e:7a:09:93:40:a0:95:d4:33:73:ce:16:
ae:97:12:b6:c3:56:9e:ed:80:12:b9:f4:c2:85:36:18:5c:c0:
26:c5:f2:4d:09:73:37:06:19:6d:19:da:c9:da:d6:49:b7:1e:
34:4d:eb:3b:7c:8c:96:95:f9:e3:e5:56:b7:d4:a5:7e:89:19:
d9:4f:0c:ca:34:35:57:c1:67:ec:23:a1:16:fb:c2:76:b2:33:
8f:fd:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org