Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cja_UvCmmtIA-AD3K_NMth1dyG0.roa
File: cja_UvCmmtIA-AD3K_NMth1dyG0.roa (raw, json)
Hash identifier: kXD2H0efPKQwXCuyyNBjyImWhRlVezaTPRRi2gtdxNA=
Subject key identifier: 72:36:BF:52:F0:A6:9A:D2:00:F8:00:F7:2B:F3:4C:B6:1D:5D:C8:6D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 120A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cja_UvCmmtIA-AD3K_NMth1dyG0.roa
Signing time: Wed 29 Sep 2021 02:54:07 +0000
ROA not before: Wed 29 Sep 2021 02:54:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 49.158.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4618 (0x120a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7236BF52F0A69AD200F800F72BF34CB61D5DC86D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:d9:88:0f:ca:74:65:7b:11:2f:48:8a:62:
f3:a8:65:e1:a7:6a:ab:a6:71:6b:53:bf:70:9e:da:
03:7c:03:31:78:cf:37:dd:b0:18:7f:43:04:6c:bc:
c0:b0:3e:22:8b:b1:c7:87:c5:0b:56:55:56:25:82:
e5:62:27:7d:da:c8:6a:10:89:04:a4:05:9a:75:6c:
d2:75:27:9b:60:4f:69:df:f5:75:e9:5c:80:6d:eb:
b8:27:4c:f6:0f:d6:86:be:22:2a:02:4e:6e:15:0a:
8e:8a:69:b4:8b:29:2a:48:9b:db:7b:93:4a:ff:89:
59:68:fa:2b:92:aa:ec:03:90:96:78:e8:5d:09:26:
40:cd:17:94:1b:9a:14:8c:2e:65:93:95:1e:d7:77:
c9:ae:42:55:39:a9:4d:e6:72:a0:10:d9:15:0c:ea:
05:a2:26:d1:e0:18:8b:1d:36:cd:f0:17:4e:18:81:
5f:f1:08:e0:10:95:16:6a:cb:0f:1f:54:04:68:11:
64:72:c7:f1:35:47:9f:6b:bd:12:91:c2:51:7c:90:
d6:68:52:e3:9a:89:02:b8:6e:66:a7:be:a5:cc:af:
d8:73:a9:13:7e:8e:7f:f1:b2:bf:df:91:af:eb:9a:
f6:33:91:98:ba:a1:bd:b2:3b:8e:a8:bb:48:35:6e:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:36:BF:52:F0:A6:9A:D2:00:F8:00:F7:2B:F3:4C:B6:1D:5D:C8:6D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cja_UvCmmtIA-AD3K_NMth1dyG0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.216.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:ac:44:f4:f7:44:f5:67:d2:c6:52:79:98:cd:f4:9f:19:a9:
ce:8f:c3:ec:06:30:fd:3c:86:fd:ea:7a:b1:c5:47:1b:09:3a:
8e:84:bc:37:54:21:0f:72:8d:d0:01:0d:74:aa:58:1b:01:8b:
2a:51:ae:24:63:a4:39:98:b7:c4:91:58:c8:9b:ac:6f:e0:0b:
29:fb:63:58:ae:31:01:97:61:36:39:e0:19:51:82:f0:b8:e6:
9f:ea:5b:e0:ff:94:a7:7c:7f:bc:f2:23:ab:13:40:32:fb:12:
68:ed:7b:f2:22:6e:62:fa:e1:4a:c6:2e:67:ad:80:ef:14:d8:
4b:35:c5:4c:03:b6:10:2d:0a:1a:66:7e:10:d3:67:63:41:6e:
34:04:5e:62:2e:dd:24:7d:b2:ab:53:86:f4:1a:23:74:a2:4a:
69:8a:d5:cf:52:d4:3d:60:5f:37:cb:f2:a2:c8:de:7b:6c:28:
0e:39:9d:60:fc:e3:fb:ad:1a:eb:3a:48:4f:5c:69:df:52:99:
57:6e:ac:44:0a:9d:da:22:09:ee:4f:83:69:95:f4:20:e5:df:
f2:92:f9:d5:58:0b:cc:fd:3f:0a:31:6e:23:fb:ea:8a:cb:1b:
c0:c0:14:51:87:27:34:29:6e:02:0e:da:1a:46:1f:7a:07:89:
e2:87:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org