Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bvBBj4WGQ8p7XFA32jMe18ys9Sk.roa
File: bvBBj4WGQ8p7XFA32jMe18ys9Sk.roa (raw, json)
Hash identifier: sSas9jnrzVu17m59dBep0Wt/KOFeCV9220lp/vWyCT8=
Subject key identifier: 6E:F0:41:8F:85:86:43:CA:7B:5C:50:37:DA:33:1E:D7:CC:AC:F5:29
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AD6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bvBBj4WGQ8p7XFA32jMe18ys9Sk.roa
Signing time: Tue 29 Sep 2020 10:07:41 +0000
ROA not before: Tue 29 Sep 2020 10:07:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2774 (0xad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6EF0418F858643CA7B5C5037DA331ED7CCACF529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:d4:61:6e:b4:b5:be:79:87:ca:b0:73:26:
a4:7e:60:c2:93:e1:e6:1d:1d:91:78:60:37:84:86:
24:95:f7:6b:44:49:3a:53:0d:a9:16:84:99:43:d2:
74:cc:68:ef:42:31:ad:09:9f:ff:3b:cd:0d:60:f6:
ab:92:3f:5b:f2:7d:d0:56:1b:1c:ed:d3:47:a8:13:
9d:86:1c:77:d0:f3:17:2a:ef:0b:85:95:b9:2b:4e:
a4:1e:55:e9:ca:f3:bf:1e:5d:d3:89:61:45:a0:ce:
93:33:c0:ee:e4:e8:6d:ff:4d:08:62:9d:f4:4d:c7:
94:a0:7e:b2:6f:f0:0a:ad:02:83:7c:08:9c:3a:74:
41:f3:58:96:c2:26:64:78:95:05:3e:d8:f6:a3:94:
a7:1d:0e:fc:5f:2b:d0:4c:aa:df:d9:cf:41:a9:bc:
90:b4:0b:5f:15:06:aa:53:f0:f9:b5:0a:03:a5:41:
59:b1:d1:ec:b3:e9:f7:5c:d1:88:76:8c:0c:40:bc:
bd:d5:f9:60:0e:bc:e8:97:9b:86:f9:b7:05:72:1e:
08:8e:46:1b:bf:e7:57:e6:b9:6e:22:30:9e:62:75:
e2:82:14:11:8f:f9:b7:4e:7b:6a:28:7d:0c:c9:50:
a9:34:f8:19:0d:ac:ee:44:b0:57:54:98:6d:54:66:
70:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F0:41:8F:85:86:43:CA:7B:5C:50:37:DA:33:1E:D7:CC:AC:F5:29
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bvBBj4WGQ8p7XFA32jMe18ys9Sk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
51:fc:8f:d2:37:93:44:be:0d:c1:a3:57:58:06:d4:24:8b:93:
db:ac:0e:1d:aa:d3:41:4b:f0:9b:cd:30:5c:3f:f5:9a:c3:fd:
6b:5e:8c:4d:d2:83:c0:23:3f:e6:4f:36:25:bb:cb:5d:78:57:
89:8d:ed:d3:d0:a6:56:ac:62:db:af:a4:13:db:4f:30:2c:a4:
d9:51:86:dd:f0:30:89:a4:18:d7:52:ed:f6:27:bf:44:c8:20:
f8:9c:9d:0b:4d:e8:2a:e9:a4:53:d5:7a:ef:3b:61:76:9f:5d:
74:88:e8:86:c3:fe:89:ff:f3:fb:32:7d:7a:a6:70:58:4d:8d:
9d:20:13:7e:46:d0:80:50:51:1b:dd:86:b0:4e:46:9e:ff:cc:
a0:fa:a9:aa:aa:b5:6f:c2:55:75:01:4f:9d:9b:59:fb:d1:3b:
e2:df:f8:6b:6f:b7:ca:c3:b2:08:4f:ba:08:15:18:c0:d5:b0:
23:fd:56:b1:74:bd:97:5b:68:c0:cf:60:48:f6:19:6c:3e:8c:
d1:dd:d3:51:00:a5:1e:f5:9f:a6:16:0b:c1:e0:c6:ee:43:8f:
38:8a:b2:58:e1:6a:f2:2e:4a:1a:30:cd:12:47:11:c4:0c:9a:
78:04:a5:0d:57:a9:99:4c:bd:fe:7d:19:8a:96:d3:3a:2b:14:
b9:52:46:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org