Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aRXaBscFT-f-XjpaQJPPj3bN-eg.roa
File: aRXaBscFT-f-XjpaQJPPj3bN-eg.roa (raw, json)
Hash identifier: v/8OGWXF9F8PiL4rCrxI1oS1s8eaQycgDpIzjbnC5YM=
Subject key identifier: 69:15:DA:06:C7:05:4F:E7:FE:5E:3A:5A:40:93:CF:8F:76:CD:F9:E8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aRXaBscFT-f-XjpaQJPPj3bN-eg.roa
Signing time: Thu 15 Sep 2022 02:35:39 +0000
ROA not before: Thu 15 Sep 2022 02:35:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6915DA06C7054FE7FE5E3A5A4093CF8F76CDF9E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:57:15:3e:ab:6a:91:b7:9b:4c:58:6d:e7:
ca:2d:30:46:6d:97:99:56:25:c1:31:ad:94:ae:1b:
3d:06:06:ca:b8:57:b0:2e:82:0f:cc:7f:33:44:93:
e7:76:08:e3:a0:da:46:ab:ec:1d:17:96:3e:53:c7:
70:16:e3:23:e9:e9:1f:88:ee:ca:bb:9b:21:47:47:
54:e2:8e:9a:81:85:50:3c:f2:1d:f3:4a:a9:a8:01:
61:71:b7:58:a9:52:38:6a:75:e2:a2:3c:ca:ab:89:
d2:05:47:df:fa:3c:93:68:74:59:eb:16:66:da:7a:
2c:65:cc:a3:a0:3c:22:ac:e2:e8:e4:8a:6e:06:f0:
be:da:d4:6a:67:c9:ed:7e:8c:da:2b:bf:9e:0a:7a:
9f:bb:bd:00:92:18:d7:7d:fe:d4:9d:9c:69:81:04:
6a:ae:e8:d7:e5:81:c2:aa:7f:42:a1:d7:12:71:7e:
ee:f9:5c:29:40:f3:43:1a:2b:d6:cc:09:8f:53:5f:
a3:5b:dd:e6:7f:3e:ba:91:ed:f3:a4:97:9f:c0:b0:
3c:1c:f0:f2:b3:19:0d:19:eb:4d:d9:9f:a9:08:bf:
48:b5:13:7a:d3:b9:94:36:ce:ca:f1:f6:7e:4b:a7:
fa:7e:2c:2d:ba:3f:e6:40:d4:dc:89:ef:7f:dd:15:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:15:DA:06:C7:05:4F:E7:FE:5E:3A:5A:40:93:CF:8F:76:CD:F9:E8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/aRXaBscFT-f-XjpaQJPPj3bN-eg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.48.0/20
Signature Algorithm: sha256WithRSAEncryption
94:f9:0f:f6:57:f5:d8:15:3a:3a:21:0a:1d:06:18:e6:c0:31:
5a:6d:a2:26:c8:94:c9:66:ed:18:e4:67:aa:97:a8:06:2a:11:
8f:20:b6:18:e2:32:7a:e9:a0:d4:e1:f7:d4:84:12:ca:45:e6:
3e:4e:8f:c9:ad:f1:69:d3:81:8e:a6:00:ad:3b:26:c3:fd:bd:
db:15:4c:e0:ff:31:22:1d:1d:b9:f2:96:fa:2f:5b:42:4a:be:
93:3c:e8:19:6c:05:bc:86:57:7c:eb:06:c9:cb:45:46:1b:50:
f3:89:d1:6e:f0:c0:90:67:bc:02:17:01:4c:6f:e4:71:c1:03:
f1:7b:3d:54:a1:b7:2e:b5:05:89:0a:4a:59:52:24:eb:9e:3f:
9a:37:55:af:9a:a1:4d:7f:6f:e3:35:86:4c:50:1d:1a:33:80:
03:fe:87:c2:83:a6:40:be:36:95:3e:79:66:92:da:71:47:c1:
d7:47:5b:7b:8c:16:10:a7:bb:a7:36:f9:ca:e6:bd:83:b8:59:
18:81:84:05:07:35:5d:b4:4c:dc:25:f0:76:c0:11:3c:e0:af:
0b:e3:d9:5f:8e:41:4c:3d:84:d8:9f:da:dc:35:69:f4:81:66:
57:23:6f:44:78:67:a3:dd:02:ce:8e:3c:4b:aa:76:71:1c:b3:
1f:40:6e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org