Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aON_xOB1-BOqb4K8fruFd-2Zn3Q.roa
File: aON_xOB1-BOqb4K8fruFd-2Zn3Q.roa (raw, json)
Hash identifier: 4474d+npNHpdFyhx+hK3/RbTAsVjBCX4t35dbVfjjDk=
Subject key identifier: 68:E3:7F:C4:E0:75:F8:13:AA:6F:82:BC:7E:BB:85:77:ED:99:9F:74
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aON_xOB1-BOqb4K8fruFd-2Zn3Q.roa
Signing time: Thu 15 Sep 2022 02:35:24 +0000
ROA not before: Thu 15 Sep 2022 02:35:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=68E37FC4E075F813AA6F82BC7EBB8577ED999F74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:e4:52:f6:c6:de:53:f8:1e:d7:4c:c4:88:
34:97:8c:2d:a9:e3:43:b5:60:06:2d:2b:d3:84:e7:
64:db:30:8a:11:93:91:78:30:44:c4:1b:03:c5:a4:
4c:3d:68:d2:8f:44:e1:62:f0:c3:29:2c:81:c8:44:
8b:a5:d6:53:9a:8b:cb:63:92:82:de:d2:03:95:7e:
64:81:70:ff:b5:bd:44:e6:22:54:59:cc:d1:9b:71:
2b:07:15:ae:80:fa:24:78:f9:89:2e:96:21:2e:33:
18:91:34:3d:fc:9e:12:61:85:29:57:6c:ae:a8:da:
77:af:84:e7:93:e5:ee:18:b7:68:a7:75:aa:6c:79:
80:d5:fc:2c:57:8d:ad:a0:f8:1b:f3:95:a1:c5:3c:
1c:bb:2e:fa:b4:5f:0f:da:7a:06:1f:d6:7a:e5:07:
ac:71:81:50:9b:42:b1:56:cc:ed:5c:38:ab:2d:41:
f3:40:8a:3d:16:37:de:32:4a:87:cd:88:fd:5a:f0:
bc:9f:6c:4f:8d:35:c1:a9:88:93:8a:05:71:3c:81:
25:c4:fa:4b:b0:53:37:6d:bf:98:19:38:e5:f6:7d:
5f:4f:1b:25:73:fc:4e:9c:31:96:6a:4f:4f:17:88:
fd:fc:68:b8:e1:82:c9:21:7e:68:b9:ea:79:c5:be:
8b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E3:7F:C4:E0:75:F8:13:AA:6F:82:BC:7E:BB:85:77:ED:99:9F:74
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aON_xOB1-BOqb4K8fruFd-2Zn3Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.136.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:42:48:d2:a3:e0:ab:c4:75:4f:da:ef:02:f7:d2:4b:a0:1e:
ad:45:37:6c:e3:ce:19:41:47:ae:5e:ff:ac:e0:00:0b:6b:c9:
07:e4:9e:c5:ff:76:70:fa:88:cb:0c:5f:4a:04:45:98:44:ba:
fc:42:7b:be:f8:d0:6b:55:83:ba:47:5b:d9:01:73:f9:2a:cd:
c8:4e:8e:b1:86:5a:ab:d5:a5:a2:0d:37:28:05:ab:92:14:db:
b2:a1:76:3a:36:15:d5:8e:5e:60:3a:ce:cd:f3:76:0e:bb:ef:
9d:f7:8c:91:e0:c1:b3:ab:23:57:fc:54:c7:fb:aa:2e:1c:4b:
e7:f2:ff:45:1a:1c:52:4d:49:b4:26:86:46:60:dc:6f:bd:e6:
67:a4:d3:36:df:7f:ce:16:1a:ce:c6:62:b2:57:95:b9:6d:62:
d9:3f:30:39:82:38:a5:75:de:49:24:83:f8:fe:c1:cb:7b:d2:
7c:e6:48:f3:4f:16:e1:dc:17:bf:1b:06:e6:b6:ab:c9:d4:80:
5b:e3:56:34:9b:2f:bd:05:e4:19:da:ff:8d:f8:b1:b6:d0:f6:
35:7a:fa:9e:cb:21:b2:25:7a:d1:ba:09:ce:a7:86:fa:06:88:
66:2d:9a:b1:b9:76:7d:b0:fe:4e:bd:22:f0:7f:ad:b3:92:29:
63:16:00:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org