Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mOH6SgoMZUeN3DbLS602RLs2pFo.roa
File: mOH6SgoMZUeN3DbLS602RLs2pFo.roa (raw, json)
Hash identifier: L7HsPKANOXkWsUEy0aB7ZmDYQA0Zc7HPLwH/K9ozb2c=
Subject key identifier: 98:E1:FA:4A:0A:0C:65:47:8D:DC:36:CB:4B:AD:36:44:BB:36:A4:5A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mOH6SgoMZUeN3DbLS602RLs2pFo.roa
Signing time: Thu 15 Sep 2022 02:36:06 +0000
ROA not before: Thu 15 Sep 2022 02:36:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.158.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=98E1FA4A0A0C65478DDC36CB4BAD3644BB36A45A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3e:33:7a:15:86:8c:8b:5a:85:ac:38:29:67:
bb:bb:95:b8:ad:14:4a:d8:c0:e1:4f:e1:cc:c4:04:
e1:bf:f3:9c:87:f8:1a:6a:15:61:b0:dd:4d:67:7b:
34:ee:a1:24:42:c3:66:5a:74:b3:79:8b:ed:2a:05:
31:1a:f2:60:05:cb:58:76:6c:3d:76:a2:41:3e:ef:
4f:25:ec:d9:5b:e2:f2:82:3d:f1:84:d8:f4:0e:a5:
2f:54:7b:f5:f9:ca:38:ff:6d:21:59:62:d6:7c:8a:
8b:48:f8:69:20:f6:3f:a8:48:70:90:c5:4a:b1:a3:
db:99:1d:68:4c:c2:d7:b9:93:05:45:78:9c:8d:7c:
15:c9:8d:c5:fd:08:f7:33:fd:e3:a5:54:35:24:af:
fc:70:e0:23:eb:82:81:4b:10:4b:43:3c:4b:20:9e:
21:bd:80:93:47:70:25:3b:5f:d0:1d:29:a0:28:85:
12:cf:e7:a9:ce:56:64:a9:22:10:3c:df:82:12:b6:
20:99:57:fb:13:58:2d:a0:46:34:09:60:fd:0a:06:
44:e3:36:35:e5:96:99:49:03:d4:69:a7:a8:37:2f:
e1:61:4d:f9:ce:df:db:8e:81:50:a6:9a:3d:e5:ee:
ed:f7:02:e0:3f:7c:75:bf:25:9a:58:c6:dd:9b:a0:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E1:FA:4A:0A:0C:65:47:8D:DC:36:CB:4B:AD:36:44:BB:36:A4:5A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mOH6SgoMZUeN3DbLS602RLs2pFo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.224.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:6b:f0:28:8f:bf:93:e5:ba:67:0d:dd:39:d2:98:5d:f8:4f:
ea:59:90:40:c7:4b:b0:3f:00:69:b1:69:a6:05:c2:b4:31:4d:
70:cb:2e:b0:4d:3b:09:70:fc:9f:21:f2:94:a2:a7:b6:ae:74:
73:c1:16:7e:61:07:26:79:f4:63:c2:b3:20:20:b6:62:be:40:
e5:24:d2:03:69:c1:5d:47:b8:80:2f:87:1e:ca:f5:ee:35:73:
e1:a9:ea:e9:1e:09:2d:dd:a6:24:f8:2b:03:3a:7d:dc:76:0b:
58:7a:b5:a3:03:c3:3f:f5:8f:39:80:de:93:9f:81:6c:57:0d:
6e:60:db:63:a7:bc:53:89:55:db:ad:29:e3:85:7d:33:05:85:
ca:09:0b:16:f5:ab:2e:83:5f:24:01:11:ba:a6:4a:a9:d5:f4:
f0:5f:7c:3a:cf:2b:a2:02:2a:28:ed:4c:70:9b:4a:96:a5:d7:
b3:55:ce:bf:21:a7:07:9d:13:be:bf:47:d3:02:bd:f2:99:19:
76:97:28:0e:d0:f3:7d:6c:8b:22:f4:c6:fa:70:6b:8f:d9:d2:
ef:79:22:6d:e3:18:76:c4:a5:2e:47:5b:28:6b:fc:86:d8:27:
91:3b:a2:27:42:a7:37:c3:d3:91:7d:06:7a:72:c6:af:1c:f4:
3e:2a:97:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org