Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YpvmpNOKFlCNTZ7Y__U5OPUYA58.roa
File: YpvmpNOKFlCNTZ7Y__U5OPUYA58.roa (raw, json)
Hash identifier: jc7/4dOZa3ouMlEn991voqOpi/G8u8vkEKkuMmc2Npk=
Subject key identifier: 62:9B:E6:A4:D3:8A:16:50:8D:4D:9E:D8:FF:F5:39:38:F5:18:03:9F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B30
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YpvmpNOKFlCNTZ7Y__U5OPUYA58.roa
Signing time: Tue 29 Sep 2020 10:08:07 +0000
ROA not before: Tue 29 Sep 2020 10:08:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2864 (0xb30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:07 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=629BE6A4D38A16508D4D9ED8FFF53938F518039F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:07:00:d5:98:8c:70:a8:56:6a:6c:0f:67:
27:8f:3c:cc:41:44:a2:70:5d:32:e4:f9:f5:a8:d5:
e6:fd:77:d7:5e:be:0e:40:0a:b3:c8:c9:bd:6a:dd:
dd:57:30:ea:c0:a6:de:a4:ac:d5:af:02:70:57:9d:
46:c2:cc:e8:b4:f2:cc:65:24:dd:9c:72:d6:7e:e2:
57:d6:ec:80:69:93:46:71:72:ba:24:9d:99:43:77:
40:d8:e3:00:04:3f:2f:68:a4:2e:1c:3e:c4:a5:36:
0e:d5:7a:c2:8a:85:4c:4c:b9:64:41:17:bf:84:38:
83:3f:d8:ab:71:7a:51:f0:cd:8e:ca:fa:63:50:32:
8e:3f:4e:71:51:32:5d:e7:a6:a2:09:a0:37:36:97:
08:5d:1f:33:93:9d:78:99:1d:5b:cc:10:3c:55:e0:
f4:db:23:a9:d3:0e:cb:8a:1c:f8:60:5b:75:c8:d4:
83:6d:d2:1c:cd:f0:ad:a1:7c:27:17:ef:df:5f:4b:
08:f0:99:d9:9f:91:47:85:b2:68:a5:59:e8:b5:e6:
4a:ba:74:a2:20:2e:b6:25:66:73:27:22:f0:fa:8c:
39:49:9f:5d:a8:47:49:d6:96:6c:14:1a:85:93:1c:
4f:b3:e7:9e:e6:a7:84:f9:ed:b4:a3:65:81:c1:dc:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9B:E6:A4:D3:8A:16:50:8D:4D:9E:D8:FF:F5:39:38:F5:18:03:9F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/YpvmpNOKFlCNTZ7Y__U5OPUYA58.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.81.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ff:5f:32:fc:7b:93:fc:4e:ae:db:be:3e:4b:37:23:7d:9e:
92:2f:0a:4a:d2:02:1f:cd:47:bd:4a:b7:c9:5c:4c:1a:2f:e0:
d0:ef:a5:e0:8d:66:0d:ee:84:72:77:14:0d:c3:1e:ea:cc:7b:
0b:6d:c1:7e:5c:de:c4:52:00:a5:b0:ae:62:3c:c9:00:b3:cd:
ba:c5:93:ca:42:23:6c:15:42:97:47:25:23:c0:f7:eb:47:2e:
f0:c9:e4:34:4d:ba:01:3c:68:8a:72:ae:31:9a:ef:01:7a:64:
a0:03:6c:45:f9:7e:18:e7:8a:56:ca:98:29:15:27:8d:57:4e:
3f:f9:15:6a:4c:76:8d:29:da:82:7a:c6:f6:73:b6:69:6c:61:
36:55:63:fa:b7:62:44:e7:c9:43:23:9e:18:35:ad:58:80:82:
1b:4f:36:c3:0e:e3:7c:db:59:5f:f7:a9:52:8a:be:c9:a0:49:
0e:dc:90:96:89:a0:74:a0:90:f9:1f:fc:54:3c:eb:69:51:a2:
c8:7c:ff:2a:94:80:c5:31:41:f0:f0:03:8e:76:76:67:f7:e4:
ab:bb:f6:c4:ed:52:86:0d:d9:8e:6f:18:8f:83:9b:2f:45:79:
b7:fd:ea:35:80:06:9e:4c:68:22:db:b4:ea:16:1a:37:29:de:
16:44:3c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org