Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bWdcQFG49_AAoqJzZkMVmzZoGSc.roa
File: bWdcQFG49_AAoqJzZkMVmzZoGSc.roa (raw, json)
Hash identifier: /OT+CD8hyL5JY4GL2DrZHp+pCep6lrLFlaeU7aV52iE=
Subject key identifier: 6D:67:5C:40:51:B8:F7:F0:00:A2:A2:73:66:43:15:9B:36:68:19:27
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12C4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bWdcQFG49_AAoqJzZkMVmzZoGSc.roa
Signing time: Wed 29 Sep 2021 02:54:57 +0000
ROA not before: Wed 29 Sep 2021 02:54:57 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 49.159.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4804 (0x12c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:57 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6D675C4051B8F7F000A2A2736643159B36681927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:d3:71:47:39:b0:33:af:d8:74:ec:7a:c2:
7d:f6:44:7a:a2:4d:73:36:65:1d:0d:59:4e:b2:eb:
5b:94:3c:2b:7f:7e:67:c1:7b:e9:2d:bb:30:9d:43:
3b:7e:84:18:ce:27:5b:af:08:fc:00:6a:f8:3f:0c:
e7:c6:8a:19:79:b7:be:b0:3d:3c:f6:ae:9a:d2:c0:
d0:58:8a:25:6a:ed:52:6d:c8:04:f9:01:7f:9e:b6:
64:e0:27:f4:7e:83:6b:c6:1a:ce:f6:b0:7d:1b:e5:
c3:e8:13:69:05:4c:c3:df:35:dc:4d:9a:11:45:f4:
d4:e6:7a:59:17:ba:09:09:d9:de:88:18:a4:32:09:
63:fe:9c:34:a5:17:fc:2e:94:5d:e5:b5:88:d8:84:
9e:b4:ed:98:b9:8b:77:42:2c:47:66:78:f6:ce:f8:
ce:18:21:49:bf:cc:df:e2:1d:97:e8:74:de:25:8c:
fe:42:f7:d5:d3:e4:89:ad:be:06:17:09:8f:fd:e6:
ff:d6:b2:75:8b:85:72:77:5b:fd:ea:ae:bc:ca:fb:
1c:09:36:08:59:09:e2:7a:85:e2:92:a7:78:86:17:
ea:4c:0d:21:e3:14:f7:e7:24:e7:f7:61:6f:b3:3d:
66:8b:66:a5:db:39:a5:7e:3d:26:64:4b:d4:62:f5:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:67:5C:40:51:B8:F7:F0:00:A2:A2:73:66:43:15:9B:36:68:19:27
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bWdcQFG49_AAoqJzZkMVmzZoGSc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.76.0/22
Signature Algorithm: sha256WithRSAEncryption
09:2f:97:24:38:33:02:61:c3:7b:e9:5d:3d:a1:ab:71:b2:cc:
65:35:3d:21:c2:61:8d:c1:bf:43:17:b1:4f:29:42:86:88:70:
7d:f1:21:5b:7f:64:e1:48:05:81:2d:90:1f:af:0d:60:e6:a3:
ad:34:aa:8d:bc:83:8b:77:47:94:41:72:88:fc:eb:14:76:d3:
0e:5e:a9:c8:93:6c:1a:85:a0:f7:ff:47:14:32:d2:66:67:07:
e5:2c:52:6e:c2:28:d0:3a:d0:5a:71:00:46:eb:03:b5:eb:2d:
ac:8b:91:76:17:80:a9:60:01:fa:ef:7c:d2:78:62:91:f3:f5:
16:be:49:73:5a:1c:cb:ac:04:e9:a3:d0:d8:f1:97:af:ca:35:
bf:06:20:34:db:1e:43:fd:c1:5a:f2:50:44:d9:dd:2b:74:86:
c5:f9:9e:9a:5c:02:04:c1:5a:e3:af:af:99:65:5b:40:42:f0:
37:49:cb:38:f9:ab:e6:29:36:99:e4:d9:be:88:fa:f4:cd:4e:
65:e5:cc:5e:a5:34:59:3b:34:51:94:2e:8b:d3:6b:60:3b:2e:
bc:2e:bc:2e:c1:fc:76:c2:7b:ba:de:a1:d5:21:35:b9:ec:77:
4f:ce:5b:6a:60:aa:17:ee:24:3a:c1:ea:bb:eb:97:27:d0:ff:
95:30:ac:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org