Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/a6BZVDPIjGGqFSmrXA4uHrwLKOw.roa
File: a6BZVDPIjGGqFSmrXA4uHrwLKOw.roa (raw, json)
Hash identifier: RSyGgFnKr6cvf2hbhxqJGsDf3+OtAXoqPD2dCb2brRE=
Subject key identifier: 6B:A0:59:54:33:C8:8C:61:AA:15:29:AB:5C:0E:2E:1E:BC:0B:28:EC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1854
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/a6BZVDPIjGGqFSmrXA4uHrwLKOw.roa
Signing time: Sat 22 Oct 2022 05:55:55 +0000
ROA not before: Sat 22 Oct 2022 05:55:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6228 (0x1854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:55:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6BA0595433C88C61AA1529AB5C0E2E1EBC0B28EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:07:6d:2e:63:54:0b:85:5a:b3:ad:7e:58:fd:
c3:fa:d0:d6:35:64:7e:b7:aa:05:e1:23:1f:fe:d9:
60:49:a3:7d:5f:e1:4d:1d:5c:9d:2f:0c:c8:83:f5:
27:8d:f2:ea:54:b8:e0:ff:b3:9c:9b:71:22:76:2f:
b2:27:8a:55:50:29:de:f6:d4:42:c9:67:bf:0d:74:
18:5e:54:95:ba:68:b0:b3:7f:c4:91:d3:92:65:7e:
95:c4:0f:f6:9a:01:f5:be:a8:1d:89:aa:f7:b4:26:
9b:4c:14:7b:10:ef:e3:ef:fa:9b:d7:05:fb:54:58:
b5:a8:c0:93:d5:95:08:c2:35:c9:44:c2:e2:5d:5e:
12:5a:90:c5:7f:c3:0a:5a:5b:1a:b4:9d:02:85:fe:
fa:60:eb:59:20:46:4f:74:57:ca:12:85:62:91:30:
0e:83:e2:b6:43:82:36:54:c5:9b:58:d9:81:75:8c:
a2:30:56:c1:7f:e1:42:3a:f6:42:80:cc:76:dc:b5:
9a:97:68:a9:89:be:e7:8b:f2:82:69:38:ba:6a:97:
05:7b:21:fe:3a:29:0c:ba:db:cc:5e:47:d8:5a:f3:
06:b5:3c:29:2d:85:cd:b5:39:51:53:45:32:d3:8b:
6a:c3:53:dc:d0:bb:da:33:96:53:e9:5d:0c:0d:f6:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A0:59:54:33:C8:8C:61:AA:15:29:AB:5C:0E:2E:1E:BC:0B:28:EC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/a6BZVDPIjGGqFSmrXA4uHrwLKOw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.136.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:ba:66:d6:e1:bb:3a:1c:6b:19:59:08:36:c2:e5:5b:5b:fe:
d3:92:39:68:83:3c:07:4f:06:15:17:93:98:0f:78:f1:1e:b5:
c1:46:1b:7f:68:54:d0:42:fb:06:01:92:99:ef:78:86:3b:5e:
5a:e6:8c:e5:39:59:d1:78:29:30:a1:b8:82:64:72:5d:e7:2f:
cc:ab:c3:af:ae:d7:08:52:3d:52:f2:bc:83:e4:c0:47:54:07:
68:05:fd:e3:93:36:be:d0:7c:51:04:ea:a9:86:ab:76:d4:1b:
85:f1:2e:f4:54:ea:0b:61:f3:0c:b9:9a:b3:25:d7:89:66:9f:
4a:ec:1c:66:19:c3:f2:38:28:da:57:ac:79:35:f8:05:4f:08:
b8:d1:c8:85:4c:16:10:66:d3:4e:ed:1a:01:77:82:08:d0:fe:
c3:0f:75:00:e8:ea:f3:54:9d:f7:30:7a:96:d7:ed:0f:5b:f7:
01:7a:82:91:58:e4:02:76:32:94:39:93:3d:eb:58:12:eb:9f:
79:3a:91:83:68:61:82:b4:da:f7:7a:79:1a:8f:71:6b:1e:66:
a7:f5:b1:de:c5:a2:fa:7b:c3:12:0a:65:d7:b2:d1:22:67:5c:
a6:f9:e9:ff:83:7e:ba:81:30:da:1a:a7:83:0d:bf:cc:65:b8:
c3:b3:94:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org