Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_l0LARsGnG8J0hIPtqd4N0UFhPA.roa
File: _l0LARsGnG8J0hIPtqd4N0UFhPA.roa (raw, json)
Hash identifier: wyj11uhD1laMGnlc1raOBK6J5tpFytNCO6ert5+KNrs=
Subject key identifier: FE:5D:0B:01:1B:06:9C:6F:09:D2:12:0F:B6:A7:78:37:45:05:84:F0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_l0LARsGnG8J0hIPtqd4N0UFhPA.roa
Signing time: Thu 15 Sep 2022 02:36:26 +0000
ROA not before: Thu 15 Sep 2022 02:36:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FE5D0B011B069C6F09D2120FB6A77837450584F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:44:a4:9a:2a:36:a5:14:b4:1b:a0:a7:d0:3d:
71:eb:f0:1b:3f:7b:00:ec:59:7e:94:ac:7b:a0:c9:
af:dc:fb:b7:0d:6d:b4:e3:df:f8:b9:2d:1c:b0:ea:
21:54:df:11:9d:54:a7:89:0b:ef:30:81:6d:bc:0c:
0a:94:fa:48:22:86:b6:22:04:a7:36:ed:ab:4d:8e:
aa:3a:fb:d7:67:c4:9a:8a:5f:81:8c:5a:31:e2:ec:
00:49:ef:0f:fe:3f:bb:74:43:8e:95:ae:ed:9a:d7:
42:58:dd:a3:3e:53:14:0c:bd:5a:bc:df:a6:1d:bc:
80:be:45:f4:51:7a:f5:3f:cb:26:b2:99:bb:f4:1a:
ca:5b:67:f0:e1:a8:5f:de:e8:ae:7f:ed:a6:ea:de:
92:f5:b0:aa:cc:5c:3f:d3:a9:03:ed:f9:07:f8:b5:
ef:03:2c:5c:eb:d4:5f:dd:5a:af:46:36:2b:07:c5:
85:3f:a8:55:11:44:4c:d4:4e:ca:d1:b4:41:c6:3b:
70:de:ca:ff:51:e9:c1:63:80:76:c8:d4:7c:78:08:
5d:a6:f4:82:d1:6a:70:71:23:3d:23:3d:3c:5e:bc:
35:1d:9e:2f:c5:f2:c6:8b:83:c1:bb:0b:7a:45:6f:
d4:a1:26:89:5f:10:4f:6d:a2:d3:50:75:df:fa:80:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5D:0B:01:1B:06:9C:6F:09:D2:12:0F:B6:A7:78:37:45:05:84:F0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_l0LARsGnG8J0hIPtqd4N0UFhPA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.124.0/22
Signature Algorithm: sha256WithRSAEncryption
40:bc:00:e6:31:dd:17:25:a0:98:0b:8e:47:f4:07:35:6a:de:
2e:e3:ff:d4:c0:32:0e:55:fd:37:22:5c:d3:fd:49:79:70:e7:
37:95:52:c5:37:a8:92:e8:be:5f:1d:f9:07:df:38:46:e9:3f:
33:ef:8f:41:a1:54:60:23:f4:09:0a:cd:d6:6e:35:46:01:d4:
15:79:75:8c:8e:a3:8d:40:71:30:ce:30:69:a6:19:95:f1:5f:
7d:d2:60:f9:0f:2e:29:b4:b8:57:4b:82:26:f4:cf:33:11:46:
1b:10:f8:9b:d9:59:ef:89:59:1b:46:0f:1c:ca:fa:88:39:25:
d1:08:4c:e1:5a:f5:4f:91:e6:12:a2:f9:e5:20:db:54:2f:fa:
94:8d:d7:81:4c:03:5a:8f:75:9b:b2:78:ec:a9:91:cf:ed:04:
d2:7e:41:4f:e5:09:ec:aa:e6:f5:f8:31:bb:3b:8b:40:41:f4:
86:88:33:0c:72:56:c7:ff:aa:55:8d:69:e1:c1:1d:a3:f1:94:
cc:28:7a:ac:4c:87:81:db:44:8d:a0:4c:a7:5d:c0:8b:3d:97:
f6:2b:7e:b7:a6:1f:76:2f:a0:44:7a:af:b6:4c:4b:5d:c6:23:
98:d3:9d:0f:e7:de:6c:0f:f0:fb:d6:0a:df:79:b7:7d:bf:c4:
d1:78:58:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org