Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eUBzD0VPCbMWLfR8fYiCGneP8tY.roa
File: eUBzD0VPCbMWLfR8fYiCGneP8tY.roa (raw, json)
Hash identifier: x5G2LmCPjSmli2OpcZ2XTuM8UvwxY6tcLHTl/R2wVLk=
Subject key identifier: 79:40:73:0F:45:4F:09:B3:16:2D:F4:7C:7D:88:82:1A:77:8F:F2:D6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1003
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eUBzD0VPCbMWLfR8fYiCGneP8tY.roa
Signing time: Sun 07 Feb 2021 12:37:06 +0000
ROA not before: Sun 07 Feb 2021 12:37:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.159.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4099 (0x1003)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:37:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7940730F454F09B3162DF47C7D88821A778FF2D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:f9:0f:da:28:7b:cc:20:51:ae:6c:31:a4:30:
51:5d:60:24:cd:38:84:0d:db:23:a7:d4:f1:a0:e1:
cd:89:b3:08:4d:20:11:16:b4:c7:5b:e3:01:09:d2:
dd:2b:88:7e:43:23:78:d0:ce:4e:4c:06:76:e0:c2:
3a:a9:81:49:ef:51:23:cd:07:bd:96:78:0f:d7:e7:
cf:d2:e0:7c:32:8f:a7:10:73:a5:8c:67:9c:e6:57:
62:b9:14:0d:6a:39:0c:f6:7b:0b:22:d9:48:9d:92:
14:b1:fe:a0:8c:4d:7b:43:e7:6a:52:d8:49:1a:bb:
71:6d:89:89:e2:9b:94:45:53:5a:ca:f3:e7:8f:60:
1b:6d:a5:62:20:57:74:11:54:19:6c:9d:ac:b6:aa:
7c:fb:b3:2a:04:dc:92:35:dc:18:59:cd:a4:3a:51:
ab:28:9a:73:58:07:30:6a:07:5a:68:64:ff:96:cc:
85:43:dd:d5:75:2e:8a:db:4d:91:2f:8c:97:0c:a5:
d9:0b:e9:f6:64:23:84:35:29:2c:32:6c:ca:ce:ef:
97:7d:db:c5:0f:70:14:e1:b3:33:fb:55:d1:18:82:
07:7e:00:5c:5d:bb:dc:00:1c:f5:38:f0:b1:03:dd:
65:66:93:02:d1:19:b0:0f:06:8a:19:b5:c6:aa:cb:
f6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:40:73:0F:45:4F:09:B3:16:2D:F4:7C:7D:88:82:1A:77:8F:F2:D6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eUBzD0VPCbMWLfR8fYiCGneP8tY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.248.0/22
Signature Algorithm: sha256WithRSAEncryption
59:65:b3:b4:9c:9d:fd:92:9e:11:fb:ad:b0:9b:5b:ec:c4:d7:
51:e4:5a:00:e8:a0:e7:7a:af:66:dd:66:41:fa:90:2e:7a:b1:
fd:0e:49:6b:3c:d0:f6:ef:07:b5:62:77:30:af:72:ce:06:7d:
3e:a8:26:99:04:2a:5e:62:54:36:22:c9:c6:30:fe:26:2c:17:
7b:a2:6b:fb:16:5e:8d:b9:e5:47:0f:0b:87:2d:8d:99:6f:e3:
49:ef:25:78:81:10:5a:41:39:96:1d:e2:81:4d:81:ae:ed:10:
85:e2:a7:b3:87:85:7d:db:fe:5d:5b:d4:01:af:45:ff:92:47:
09:29:3e:99:7c:e2:4f:15:66:69:99:5c:9c:31:14:98:fd:f3:
53:73:c8:40:4e:47:5f:ef:97:9f:91:56:8f:50:8d:40:2b:7e:
f5:d2:2c:8a:72:f1:83:8a:f9:cf:59:14:ce:2b:cd:2a:5d:b8:
dc:32:8e:18:e6:9c:09:95:ee:38:97:e7:8f:0c:ec:53:9f:3c:
48:8f:03:c4:14:bc:a8:28:65:98:fd:9b:f1:b0:e6:19:08:e0:
8a:83:b4:a3:26:71:3a:43:cd:da:2a:e7:d0:5a:cb:f1:10:dc:
bf:a2:7f:12:21:80:0b:fd:7d:8d:d3:34:40:37:90:d8:90:43:
ed:84:44:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org