Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YYE9fbdnlzq36gHB4UoAbNJcGEw.roa
File: YYE9fbdnlzq36gHB4UoAbNJcGEw.roa (raw, json)
Hash identifier: +jLJ0kwRic/H24u8zZmGo4ActAiwtgQ7kzvQxbHT3Ew=
Subject key identifier: 61:81:3D:7D:B7:67:97:3A:B7:EA:01:C1:E1:4A:00:6C:D2:5C:18:4C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18CF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YYE9fbdnlzq36gHB4UoAbNJcGEw.roa
Signing time: Sat 22 Oct 2022 06:05:46 +0000
ROA not before: Sat 22 Oct 2022 06:05:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6351 (0x18cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=61813D7DB767973AB7EA01C1E14A006CD25C184C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:99:e2:62:24:1e:58:88:b8:55:6c:f9:82:
50:d8:6d:d8:c3:0f:78:7a:9a:2a:5b:d8:6b:92:a9:
bc:79:9c:f5:24:09:12:6d:84:af:95:6c:7b:e0:c6:
ae:f6:a3:54:0a:14:96:00:7a:43:aa:9b:52:69:10:
a3:2e:bf:f5:61:94:4e:21:23:b5:17:36:7b:35:98:
d4:e8:89:6b:99:2a:b7:34:5a:12:0e:26:23:29:c1:
48:e3:83:35:f0:4b:d4:de:04:d8:76:51:a0:14:45:
1e:cb:60:63:0d:f2:c6:10:58:b1:ab:3c:66:76:75:
36:df:ae:9f:08:e6:4d:80:47:e9:d8:c2:c2:17:50:
97:a1:f7:8c:a1:17:50:ef:ef:a2:e6:9b:aa:6f:ef:
44:52:5e:2f:cb:e8:98:39:28:3e:85:26:62:1e:3f:
a1:62:04:e2:4f:5b:db:08:6d:42:0d:75:3a:36:22:
cb:ed:3b:e4:b7:26:91:e2:8c:13:18:ca:34:2e:21:
28:09:3b:16:ce:e9:46:61:43:9c:cc:9a:6b:18:f9:
37:d6:29:bd:2f:ca:31:c3:39:65:5a:9a:63:b0:2a:
8b:c5:1f:d3:b3:46:b1:03:11:77:8d:4a:23:49:7d:
50:dd:55:8c:f6:a1:68:af:27:86:ed:a4:6b:be:8b:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:81:3D:7D:B7:67:97:3A:B7:EA:01:C1:E1:4A:00:6C:D2:5C:18:4C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YYE9fbdnlzq36gHB4UoAbNJcGEw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.48.0/21
Signature Algorithm: sha256WithRSAEncryption
46:10:5f:b8:17:23:b4:7f:c4:52:6a:35:79:1c:9e:77:19:6b:
04:78:4e:4a:eb:b4:12:c3:ca:7c:ef:41:6f:e1:37:94:92:a0:
3f:09:15:25:ae:75:a1:ff:59:d8:ae:88:08:e5:1a:a5:e2:25:
5a:e8:8b:51:89:42:8b:b2:7e:d4:14:e6:72:7d:a0:63:84:60:
c3:69:23:35:43:a8:12:e7:af:e7:48:fa:a8:f4:fc:f2:04:f8:
74:37:a0:1a:d4:b9:85:8a:8a:8a:5f:27:84:9b:4d:f2:d7:04:
af:18:c7:da:c9:32:c2:1a:a2:cc:de:80:aa:8d:ae:44:58:b3:
48:92:79:75:ae:17:29:27:24:04:c5:06:63:3f:2a:c3:b8:8d:
63:e0:04:ef:55:06:8e:9c:0b:01:b9:ee:ef:70:3d:5c:50:9f:
5f:de:86:d6:be:c6:5c:5a:8f:b1:70:0f:64:9b:4f:64:76:28:
98:63:00:95:ba:4e:06:d4:58:02:75:91:9f:8c:d0:ea:f2:32:
f5:32:1d:0f:af:2c:ba:f2:db:36:f1:2b:21:af:df:ed:64:ec:
7b:00:23:db:65:19:ff:ac:01:f0:0b:8a:87:47:70:2c:18:83:
a9:f1:a1:22:af:2e:9a:25:f6:5d:38:28:b1:49:4f:a8:2c:3f:
6b:a0:7e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org