Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZB0rRUDgNwQKxKdUZ4pe2CBvKlc.roa
File: ZB0rRUDgNwQKxKdUZ4pe2CBvKlc.roa (raw, json)
Hash identifier: r6hI+iXwWk+0Kt1zQbap+GMo27UWiwBD56m3k7E260Q=
Subject key identifier: 64:1D:2B:45:40:E0:37:04:0A:C4:A7:54:67:8A:5E:D8:20:6F:2A:57
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZB0rRUDgNwQKxKdUZ4pe2CBvKlc.roa
Signing time: Thu 15 Sep 2022 02:36:41 +0000
ROA not before: Thu 15 Sep 2022 02:36:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.158.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=641D2B4540E037040AC4A754678A5ED8206F2A57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:5d:35:ac:76:c0:d7:a8:fa:17:a9:8d:9a:
bc:a9:40:49:6e:3b:8f:5c:53:62:10:ff:87:f0:36:
e6:81:2f:b4:25:a7:b5:51:0b:c3:d2:8b:88:8a:01:
d5:6a:42:bb:1a:ef:ba:b7:21:ac:14:81:2f:b6:b6:
22:4b:99:80:49:22:3a:13:4f:d9:e0:9a:20:9b:2c:
21:ee:d1:8f:57:6c:0b:2d:5e:0f:79:4b:e2:93:d2:
b0:4c:85:34:67:51:e8:cd:a1:82:7a:39:95:66:a5:
d0:0d:0b:17:0c:0d:ff:98:d4:f7:22:b5:4d:e7:44:
f8:18:17:ff:2e:92:a2:27:01:25:e9:94:23:ac:c6:
f3:ef:0e:37:05:37:6c:c1:54:f7:3b:39:fb:c3:ef:
65:ac:26:f4:7e:ad:c6:fa:2f:a0:d7:21:c7:85:b9:
79:f1:d3:c7:95:dc:22:fc:45:f0:75:0b:77:7b:bd:
04:55:e2:47:d3:3e:29:a7:2d:ac:4c:62:d0:6d:ef:
9c:61:64:08:7d:d2:ad:45:86:11:c7:2b:78:20:a8:
8a:05:04:68:9c:6c:9b:4c:ad:60:ec:17:e6:ee:c9:
5e:d8:39:0b:67:c4:2e:da:13:82:83:a3:27:89:09:
f7:43:02:6d:7e:f3:c8:ce:09:06:d5:df:9c:82:3e:
ab:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1D:2B:45:40:E0:37:04:0A:C4:A7:54:67:8A:5E:D8:20:6F:2A:57
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZB0rRUDgNwQKxKdUZ4pe2CBvKlc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.140.0/22
Signature Algorithm: sha256WithRSAEncryption
46:3d:22:e6:f5:2e:a0:00:11:df:72:3e:02:19:a6:9a:08:9e:
8e:73:7a:71:f2:00:59:20:eb:b6:e3:5a:d4:a1:fc:e1:01:e4:
72:d2:fc:d1:f0:f0:8b:00:53:fd:8f:bb:8c:fb:9e:44:f5:4d:
54:90:41:8c:bd:5e:87:a0:be:9e:f8:11:26:eb:58:92:e6:b3:
18:dd:58:53:6d:ff:1d:0b:e9:27:bd:20:a1:3b:ca:3d:17:ab:
a2:14:1e:98:9b:94:07:ac:aa:0b:d7:e7:ad:57:ad:81:ba:c7:
47:f9:03:ab:84:70:9d:3c:31:37:56:a4:38:b1:3b:1b:32:cb:
d5:f1:cd:ec:e4:5c:97:59:55:91:7e:07:ca:35:8c:fb:f5:86:
9a:4e:66:85:8a:1c:3c:cd:51:42:58:43:93:7b:41:61:02:4f:
ab:6b:30:85:47:bf:68:45:59:fc:12:ba:72:6d:cb:2b:4f:32:
27:b8:72:cf:be:ff:25:40:3f:06:aa:51:d4:a7:b1:5e:d7:ab:
67:72:11:80:0e:0b:d9:35:13:ab:d9:d9:06:fb:17:06:a2:71:
b7:a3:5b:cf:95:b8:da:ff:09:31:54:e3:3a:18:a1:01:97:c4:
d2:13:8d:e9:cf:0f:3f:2b:8c:9e:3e:6e:10:5d:a1:e0:fa:05:
68:04:81:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org