Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XHtNqoq55NK_6F0UPibc_R0yqDc.roa
File: XHtNqoq55NK_6F0UPibc_R0yqDc.roa (raw, json)
Hash identifier: q4HHOKiNPATRTAEh7B4chd4l18Mp9xp6CgmP3gOjkRQ=
Subject key identifier: 5C:7B:4D:AA:8A:B9:E4:D2:BF:E8:5D:14:3E:26:DC:FD:1D:32:A8:37
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19E2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XHtNqoq55NK_6F0UPibc_R0yqDc.roa
Signing time: Sat 22 Oct 2022 06:12:25 +0000
ROA not before: Sat 22 Oct 2022 06:12:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.159.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6626 (0x19e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:12:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5C7B4DAA8AB9E4D2BFE85D143E26DCFD1D32A837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6b:0f:ae:d1:3b:64:4e:f4:2d:95:46:57:93:
83:3d:f3:ac:de:0d:b8:95:13:a8:87:39:d4:84:38:
e6:a6:b8:45:49:b2:04:3d:e4:3c:25:0e:04:cf:94:
c4:71:1e:ff:a2:f0:74:18:c4:5b:83:75:a7:14:4d:
c2:90:45:0b:a7:0b:3f:7d:a0:06:fb:b2:a0:40:fd:
c9:3e:2f:e5:c1:a9:f6:f1:c4:2a:72:58:0f:6b:ce:
fc:7c:7d:e9:14:8e:de:23:90:34:59:cf:6e:24:a4:
e5:97:1a:e2:22:92:e7:ef:a4:f2:ac:c5:1f:26:80:
51:63:9a:0b:bd:7f:7e:d4:11:0d:7e:18:6b:9d:5e:
78:73:8b:23:df:e9:d3:88:27:a2:85:72:37:ef:a3:
cc:db:b6:56:ca:3b:02:09:eb:db:32:3c:c9:f4:b5:
7b:83:fa:c8:65:11:f9:a6:3e:38:31:bd:2a:39:a4:
3b:50:c2:79:f3:a4:aa:ad:a0:15:ad:73:23:57:b9:
20:9a:71:0b:9b:34:f8:65:00:24:3a:70:0d:e7:6d:
02:6d:47:f6:76:33:06:08:54:ea:4e:32:6f:e9:d4:
d2:65:b2:0d:8e:48:cc:22:10:24:41:75:10:40:e2:
22:bf:b8:0f:23:83:e6:19:98:a3:16:a8:df:39:b2:
ec:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7B:4D:AA:8A:B9:E4:D2:BF:E8:5D:14:3E:26:DC:FD:1D:32:A8:37
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XHtNqoq55NK_6F0UPibc_R0yqDc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.92.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:3e:a1:5a:64:81:76:86:7b:f3:fb:68:4c:d4:87:c5:7b:de:
65:7c:45:c5:cb:82:8c:e2:82:ed:87:a2:3f:3f:13:07:f1:5d:
fc:67:af:8f:11:8b:22:7d:de:3b:ae:bb:60:1a:21:1e:32:d9:
4b:a8:58:1e:9f:49:93:9e:c2:03:b8:49:19:c5:8c:6b:c4:50:
80:03:2a:b8:48:56:18:ab:50:13:cc:06:25:c0:ef:2d:69:e6:
21:d1:7d:51:7a:e9:65:3a:20:51:b3:e4:a1:9b:04:0c:de:b2:
f7:f8:de:74:36:e8:86:f6:50:77:af:c9:bc:98:37:69:44:65:
89:1f:ef:0a:92:47:2b:0e:b5:dc:c7:b1:4d:9f:10:9b:bf:67:
86:af:80:49:fa:07:58:14:7e:36:6f:0d:15:5c:f1:0f:a7:51:
46:26:f4:a4:17:07:15:ed:74:50:8c:e8:d4:65:09:37:9f:51:
c8:2e:67:75:49:2b:44:5e:bf:16:de:b7:27:04:f6:28:0d:a3:
fc:ca:b4:0a:60:b1:aa:a9:94:d8:4e:5c:26:cc:c1:23:0f:94:
04:c3:8a:bf:65:18:14:43:a9:fe:ec:1f:43:b2:99:49:75:d0:
00:82:48:47:5a:16:ae:ed:6c:9b:e1:37:a1:b8:f7:5d:ee:ec:
6e:47:26:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org