Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WGfaIc_LsFSeYe4Y3iA0vhZFVe4.roa
File: WGfaIc_LsFSeYe4Y3iA0vhZFVe4.roa (raw, json)
Hash identifier: lSea2FNjqyFbGhX6dN7bFRnSDSiskzyAxhI5s3nn5l4=
Subject key identifier: 58:67:DA:21:CF:CB:B0:54:9E:61:EE:18:DE:20:34:BE:16:45:55:EE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WGfaIc_LsFSeYe4Y3iA0vhZFVe4.roa
Signing time: Thu 15 Sep 2022 02:36:27 +0000
ROA not before: Thu 15 Sep 2022 02:36:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5867DA21CFCBB0549E61EE18DE2034BE164555EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:d7:58:0f:45:b4:19:66:8a:9a:1c:a2:cf:
a4:5f:a2:65:da:89:44:5e:ba:47:1d:11:c0:24:fb:
b4:9f:f1:b3:b2:02:49:60:43:d8:99:87:5a:20:51:
4f:5c:44:a3:3a:e3:dd:97:c7:67:a8:24:86:09:91:
18:41:ca:5f:0b:fa:d6:87:13:42:e8:14:81:06:06:
22:ec:cd:a8:62:da:64:51:9d:87:8a:c6:82:ad:80:
97:f3:82:f2:2d:64:47:12:cd:e1:fe:fb:8a:60:3b:
d5:0e:f2:d9:e5:59:0e:a7:0c:38:90:b9:88:6a:ed:
f5:c7:52:b7:4f:ad:6e:9f:11:d8:82:3c:81:83:42:
93:66:84:0e:e9:08:0c:e5:b3:bc:01:93:c6:b2:ff:
99:44:6d:33:2e:71:d0:ce:f8:50:fd:aa:ed:31:9a:
09:ad:dd:9c:5d:ed:24:84:15:25:eb:6a:d5:6d:e9:
a0:b7:c8:dc:49:c5:1d:84:6c:2e:0a:01:1e:0e:64:
63:44:45:27:36:14:3a:76:41:12:af:91:05:8e:66:
0f:1b:69:fb:16:1f:9d:cf:42:40:4e:c6:a7:b8:0d:
c3:01:ea:78:ca:8c:05:a2:30:7f:aa:3b:cd:23:cb:
a6:af:e8:b6:44:a7:51:d0:ab:d2:32:d7:a4:5e:0b:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:67:DA:21:CF:CB:B0:54:9E:61:EE:18:DE:20:34:BE:16:45:55:EE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WGfaIc_LsFSeYe4Y3iA0vhZFVe4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.32.0/21
Signature Algorithm: sha256WithRSAEncryption
43:5c:9b:46:23:30:19:ef:6b:62:a9:b1:7d:34:a7:03:04:4c:
36:42:c3:f2:53:9e:4a:63:2f:d1:43:26:16:a4:7a:d6:c6:57:
84:8c:52:b5:3b:c5:07:b0:b3:83:a6:ed:e8:6f:bd:46:5e:a8:
81:0d:f8:7f:ae:8e:0e:8f:8e:e6:c7:3e:cc:98:93:19:09:92:
cf:33:4c:00:ff:e7:00:59:d3:28:ff:d2:42:56:8a:4a:43:17:
7b:6d:dc:e9:38:69:62:0d:53:da:7c:a9:96:52:b4:42:d3:fe:
a1:7d:92:11:0e:e5:f4:d7:77:94:c7:d9:11:be:b1:64:ea:bc:
fb:87:38:5c:0e:07:0c:6f:17:53:91:19:d5:ec:4a:78:5f:60:
ca:73:94:9e:2d:49:ce:ea:b8:4b:73:34:6b:98:7b:3b:b9:d2:
dc:cb:ca:80:a8:4e:f4:19:9e:dc:5a:46:2c:ce:63:57:cb:23:
c0:f0:55:0e:77:46:11:31:be:25:1c:46:b0:35:9d:a8:54:f4:
92:c9:08:98:9a:0a:a2:c3:25:0b:7d:50:22:58:a0:c1:d2:cb:
0e:19:0c:2b:88:d7:83:ce:09:8a:43:46:4e:80:cb:f9:5b:0b:
0b:0d:d0:9c:c8:dd:24:26:bb:41:84:ae:90:54:4e:91:ce:d8:
f2:02:1e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org