Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mnF-z3a65erhCWoyoWiJCWKaUUg.roa
File: mnF-z3a65erhCWoyoWiJCWKaUUg.roa (raw, json)
Hash identifier: fakvfcVGPgDi2HY8ZYYvTm6pkRZscsm4QzqfYBgxMOk=
Subject key identifier: 9A:71:7E:CF:76:BA:E5:EA:E1:09:6A:32:A1:68:89:09:62:9A:51:48
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19BC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mnF-z3a65erhCWoyoWiJCWKaUUg.roa
Signing time: Sat 22 Oct 2022 06:08:38 +0000
ROA not before: Sat 22 Oct 2022 06:08:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6588 (0x19bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:08:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9A717ECF76BAE5EAE1096A32A1688909629A5148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:f3:b0:bd:dc:62:b9:d4:93:17:2e:7e:c8:
70:de:9d:92:54:c4:97:75:f2:12:f1:9b:1a:be:52:
81:3d:d6:3b:c0:de:a9:db:8b:06:1e:89:5d:6f:06:
23:14:af:6e:7e:70:e8:5d:25:4f:46:79:14:80:d6:
af:87:49:c4:22:55:b9:30:20:c7:14:d6:52:c5:ea:
be:44:b1:ac:c9:40:33:8b:d7:3d:54:d3:0f:61:51:
6f:e6:0e:3e:46:71:91:d8:17:1d:0a:af:cb:03:6b:
a8:f0:50:a2:bc:3a:f3:90:82:55:66:df:e0:ca:78:
4a:1c:e2:88:e4:6e:88:7c:4a:7e:65:16:af:14:ea:
57:f9:fd:0b:ca:77:76:8d:cd:57:bf:bb:e1:34:d1:
c3:3c:36:56:c4:42:62:8b:fe:e2:af:45:01:ad:ad:
62:4f:85:4d:87:a5:3b:fb:82:ef:11:09:b7:76:60:
76:5b:67:6c:c7:58:be:24:22:36:bc:a8:7d:ae:8b:
50:4c:da:d3:73:22:bb:ad:6c:53:8a:2f:31:11:3d:
4e:d4:f4:2e:0e:e6:94:79:f1:a4:a5:8d:b3:46:7b:
0e:d3:7f:3b:ac:a5:6c:13:27:7a:24:06:f9:67:1a:
8a:d9:6f:81:64:fb:b5:02:a1:fc:c6:ee:69:25:df:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:71:7E:CF:76:BA:E5:EA:E1:09:6A:32:A1:68:89:09:62:9A:51:48
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mnF-z3a65erhCWoyoWiJCWKaUUg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.232.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:a4:bb:ae:c1:e0:23:59:81:fa:7e:f5:e8:73:5f:d1:76:2e:
f9:ea:b9:5e:b3:ca:4f:76:83:67:8e:f3:e4:e3:b4:ef:a3:d8:
62:5e:02:3e:18:55:2b:a1:6b:5a:50:44:4c:7c:56:4a:2e:0d:
9b:7e:e4:ff:86:97:28:b1:78:bb:65:17:61:ac:09:93:5c:50:
3b:bd:89:d3:3f:45:cc:4c:e9:79:5a:f7:69:5b:3c:be:d7:02:
3c:d9:89:c2:a6:96:c7:0d:fe:2a:af:62:d7:30:82:1c:0b:52:
0c:3d:5b:f4:e7:7a:62:07:db:f6:35:41:b6:6e:62:61:62:67:
d7:13:25:ad:eb:c4:01:84:dc:58:14:6b:8e:94:6a:70:90:71:
0c:0f:5c:48:6c:c8:2a:e5:85:02:b8:cd:ce:54:58:6f:57:30:
b4:c8:17:a9:7a:54:56:f5:2e:4e:7f:30:65:ac:8c:55:79:43:
06:a0:2e:7c:0e:7c:93:6e:92:e6:a2:ff:a5:2e:ff:a5:92:41:
fb:9a:d7:3e:52:b6:0c:81:e7:95:a3:49:24:81:2b:48:aa:7f:
f3:a0:c2:82:0a:27:15:5b:b8:f7:c4:f1:12:1b:08:2f:7b:54:
fb:9b:d0:f8:36:81:49:49:df:05:6e:6a:a8:34:46:89:9b:28:
e6:cc:5f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org