Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d6_xZkrI3rOMeS13auBVqXSKPho.roa
File: d6_xZkrI3rOMeS13auBVqXSKPho.roa (raw, json)
Hash identifier: pVytsnnOobIzGLoQOyoNfpXtzP25l8x3nJXSg3iR2Rk=
Subject key identifier: 77:AF:F1:66:4A:C8:DE:B3:8C:79:2D:77:6A:E0:55:A9:74:8A:3E:1A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d6_xZkrI3rOMeS13auBVqXSKPho.roa
Signing time: Thu 15 Sep 2022 02:36:40 +0000
ROA not before: Thu 15 Sep 2022 02:36:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=77AFF1664AC8DEB38C792D776AE055A9748A3E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:50:31:41:43:aa:6a:56:f7:19:e1:e8:ca:
6f:48:e4:82:24:a9:87:90:d3:18:29:68:2a:03:c2:
22:75:7a:2c:8d:4e:e8:4a:b5:2a:11:9d:9f:d3:e7:
0a:3a:05:10:17:0d:8c:7b:32:89:16:22:b4:b3:7b:
72:4a:bf:1e:f1:0f:07:47:de:ba:3d:94:a9:28:f1:
b3:9e:e9:fa:f5:2b:75:4e:74:3c:d8:da:99:f1:e8:
db:44:c2:63:a5:52:c2:72:6d:7a:cb:7c:06:27:1e:
fb:7a:72:2a:13:6a:98:73:f1:5f:b6:6b:9b:fc:0e:
82:08:a7:1b:40:fb:71:5a:99:ef:bd:70:3c:00:0e:
ac:95:6f:26:f7:9c:37:b2:a5:1d:d2:4c:87:2b:b2:
57:a4:4c:b3:d1:1c:02:1b:a2:27:4e:26:0e:25:b9:
1c:e0:cf:ed:89:c1:89:d1:01:a7:1c:bc:a1:43:40:
8a:30:0b:ef:9a:4b:9f:1f:d2:42:db:50:c1:c3:c5:
0e:f2:c5:7c:1f:30:6a:cc:7d:db:ce:a2:29:e8:12:
92:f3:24:46:e4:ff:14:1e:e6:f3:a5:e5:ac:dd:7f:
fa:21:e1:b0:d5:3c:7e:d1:ac:8b:05:60:c5:96:62:
56:7a:d1:b9:1d:7d:95:80:ff:40:4a:2d:b6:35:5f:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AF:F1:66:4A:C8:DE:B3:8C:79:2D:77:6A:E0:55:A9:74:8A:3E:1A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d6_xZkrI3rOMeS13auBVqXSKPho.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.160.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:33:44:92:65:50:29:12:f2:f5:90:36:03:3d:9c:79:2e:20:
77:08:b3:b0:f3:6d:18:20:59:5c:8c:00:7c:73:ae:22:77:d2:
83:c0:99:28:c8:65:00:20:68:bf:bd:d5:cc:08:9b:a2:68:eb:
65:50:10:e2:99:a4:bf:aa:8a:bd:9c:d6:ce:e6:84:fa:8a:e2:
af:29:a5:37:ad:ad:1a:f1:ff:6b:d5:0a:85:74:2c:b1:9d:a8:
45:71:5b:30:90:91:e8:26:67:72:2a:5d:9a:34:b8:37:18:57:
56:2d:6c:32:cf:36:31:3f:38:36:1d:3e:5d:fb:f9:41:75:b6:
2b:a8:f0:ad:49:b7:bf:cf:a0:12:11:0b:80:43:65:ed:35:4d:
ec:a4:7d:5f:e8:b9:07:97:47:35:6d:f4:85:ae:38:33:35:5a:
f2:86:01:d8:c0:46:28:b3:8e:63:03:3b:05:3b:f8:72:ce:93:
d0:62:a7:87:6b:01:38:22:cc:dd:1e:5e:1e:c1:e4:1f:07:a5:
0a:68:22:c7:8c:6d:91:77:b4:eb:1c:3a:ac:88:25:3e:44:fa:
d0:23:59:ff:9b:5f:ea:67:11:07:4a:fd:a9:97:2b:de:3f:e7:
af:8a:17:34:1a:8e:d1:cf:f1:2f:aa:d4:b4:ff:c6:bb:79:7c:
4e:d9:ba:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org