Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/i-Fc1L9Q4OA_goxjMfJ9jQp6Uio.roa
File: i-Fc1L9Q4OA_goxjMfJ9jQp6Uio.roa (raw, json)
Hash identifier: JoxyTMViL+xl5Sd7wM80Qz3558HEe04EqMVBs2ZezHs=
Subject key identifier: 8B:E1:5C:D4:BF:50:E0:E0:3F:82:8C:63:31:F2:7D:8D:0A:7A:52:2A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AEF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/i-Fc1L9Q4OA_goxjMfJ9jQp6Uio.roa
Signing time: Tue 29 Sep 2020 10:07:48 +0000
ROA not before: Tue 29 Sep 2020 10:07:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2799 (0xaef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8BE15CD4BF50E0E03F828C6331F27D8D0A7A522A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:a3:f0:7a:a9:29:fc:5f:cb:5a:8c:b0:fd:
7f:60:3f:39:8a:d5:da:1c:93:b6:c8:15:d4:45:39:
13:1e:e6:bf:13:20:7e:ca:27:4c:26:b1:9a:7e:f4:
d5:85:d7:1e:17:10:7b:43:28:95:f5:f0:9a:ca:73:
91:2a:34:91:6f:c7:bd:2a:89:c3:75:ac:7c:59:32:
76:17:74:e5:f2:a6:d2:7f:08:ba:6d:b3:86:66:75:
57:f6:0b:2d:0a:38:cb:4d:3d:be:ba:13:03:fd:8f:
57:df:bd:7c:88:7b:bd:06:8d:ef:b1:c4:af:a2:f3:
a0:2b:49:ea:bb:a7:3f:7b:c0:ff:8a:6d:30:9b:6a:
bf:bc:21:ae:a3:02:d5:24:ec:43:07:c8:ca:a1:35:
de:49:40:62:72:f4:f6:75:cf:94:5f:99:c2:19:57:
d1:76:3c:88:63:77:b3:23:76:b1:15:09:d1:e8:2c:
5b:1f:ad:a9:39:1f:bd:a8:9e:8a:eb:33:f8:21:06:
bd:51:63:be:2c:11:12:63:42:ca:bc:ce:b3:c9:14:
8c:47:7a:25:13:f8:f1:46:34:f5:11:fb:74:e4:7c:
ce:64:ef:f9:b0:50:41:a4:8c:55:2e:ed:a3:2c:2d:
4d:e1:07:f5:51:97:07:97:5e:85:45:e6:3e:70:50:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E1:5C:D4:BF:50:E0:E0:3F:82:8C:63:31:F2:7D:8D:0A:7A:52:2A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/i-Fc1L9Q4OA_goxjMfJ9jQp6Uio.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.8.0/21
Signature Algorithm: sha256WithRSAEncryption
61:5b:db:52:f3:fb:96:02:95:71:84:dc:fb:be:3f:27:c9:3f:
de:97:b8:f8:2d:ef:68:05:90:af:bb:11:a6:ed:a9:97:7d:94:
29:4a:40:77:59:8f:81:ef:81:7f:c1:83:3a:5d:39:60:1d:42:
16:03:2e:67:4e:ee:e7:70:39:92:a2:47:55:af:02:b7:35:9e:
96:69:0e:0e:e3:ec:26:0c:73:be:8d:b1:ed:ff:ee:f0:bb:ea:
f6:d4:26:15:58:75:39:75:7b:88:e5:9d:48:a4:60:d7:43:b5:
09:ff:0c:12:0f:2c:e1:74:66:d0:b6:c1:d9:9a:18:b4:5f:71:
01:1a:ee:e6:b8:bd:3e:93:46:36:15:9d:dd:83:10:ed:bc:24:
b1:d6:2a:65:60:87:68:44:ab:f1:ce:a2:2d:6f:97:1b:7e:01:
0d:9d:ac:4a:5b:e7:75:5e:62:fd:ed:4a:52:00:f6:4c:b6:f8:
79:8c:e2:3a:17:02:e1:7a:7a:ae:03:16:66:a4:2f:29:f4:15:
a3:80:00:54:ba:20:6b:7e:4c:15:6e:03:2f:bb:3e:cf:68:2f:
60:04:e6:1e:e5:3a:7c:b1:eb:e4:65:91:81:a4:b4:ec:a5:e5:
20:fa:ab:06:cf:94:82:d3:30:67:e5:dc:99:da:c3:ba:55:fc:
9c:02:b0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org