Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mwQJMJUF-EI6yoK1joz8Z8XS1DA.roa
File: mwQJMJUF-EI6yoK1joz8Z8XS1DA.roa (raw, json)
Hash identifier: E4nkM//s5iEk+mEBh7rvR7DVxGl5Xl+KJYmNLXtbzpw=
Subject key identifier: 9B:04:09:30:95:05:F8:42:3A:CA:82:B5:8E:8C:FC:67:C5:D2:D4:30
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mwQJMJUF-EI6yoK1joz8Z8XS1DA.roa
Signing time: Thu 15 Sep 2022 02:36:22 +0000
ROA not before: Thu 15 Sep 2022 02:36:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.159.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9B0409309505F8423ACA82B58E8CFC67C5D2D430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:56:5b:4b:68:e7:1d:86:76:62:a4:2e:ee:e8:
ca:8f:18:b8:c9:87:08:1a:87:52:70:4f:ef:89:d6:
96:ae:5d:09:eb:b0:0a:a7:b0:fd:b4:34:b1:3c:39:
c5:06:14:23:5a:cf:9c:5d:94:d7:e1:6d:81:de:5a:
c2:85:47:cc:da:b4:95:0b:0f:54:56:4e:d0:1b:ac:
b2:6d:9d:b1:ae:80:51:e2:45:63:1e:3a:12:72:c7:
8d:8c:69:03:d6:78:9f:9b:79:3f:0f:a4:34:a0:33:
14:53:9a:c6:f1:07:f4:21:85:40:d8:c1:aa:b3:01:
eb:52:2e:c1:69:97:62:35:1b:b7:ec:f0:78:e4:f7:
c9:79:cf:e6:cb:ed:81:31:49:c9:55:ac:c3:96:2f:
ef:78:4a:87:99:62:f7:c4:ac:b3:73:91:d6:85:35:
49:0d:cb:23:ab:33:c0:2d:fb:b1:cc:d6:44:06:ae:
33:de:73:95:48:98:84:ab:fe:4b:02:27:78:14:a9:
2f:6c:f2:f5:08:a0:1e:6d:26:7c:f8:c7:02:ea:76:
25:04:4e:1b:e0:01:88:83:b6:77:47:a0:a8:ca:ad:
2e:a3:c5:34:c6:ea:b5:25:81:11:65:20:80:e0:0e:
67:56:77:99:67:13:1f:f0:6c:07:17:e8:3a:f0:7d:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:04:09:30:95:05:F8:42:3A:CA:82:B5:8E:8C:FC:67:C5:D2:D4:30
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mwQJMJUF-EI6yoK1joz8Z8XS1DA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.248.0/22
Signature Algorithm: sha256WithRSAEncryption
31:5f:3e:a6:ae:23:3a:f8:5e:1a:fa:19:23:9e:57:ac:5b:03:
f7:cf:9f:ff:3e:5c:9a:82:4b:06:c8:0d:89:9f:58:e7:7e:37:
91:9d:66:7f:5a:5e:87:59:68:f0:17:55:93:a6:99:b0:c3:e0:
fd:dc:31:73:5a:99:6e:63:e6:5b:5c:77:10:98:9d:1e:1c:db:
42:a4:c3:36:7a:79:f8:26:78:c7:b3:ef:5e:bb:e1:f6:24:b6:
62:ad:0c:89:22:f1:6f:fb:17:29:7d:05:b7:8c:51:3c:47:19:
2f:f8:86:f2:47:4f:16:66:4c:81:ff:31:87:59:22:4b:e8:fc:
b9:41:11:39:5b:14:4f:ca:7b:d2:99:aa:a4:96:bd:81:75:8f:
e3:ef:ed:16:d8:81:a7:c5:1b:4f:5c:36:2c:6a:44:c4:eb:f7:
08:4f:5b:4a:94:91:2a:a9:05:e4:b6:e1:d4:fb:d8:69:8d:98:
22:5b:b0:a6:54:61:b8:09:16:17:e7:d8:08:3b:ba:59:1d:5b:
48:48:d8:95:42:ea:5c:6f:a4:2f:13:cc:03:fe:4b:6a:ac:31:
ec:8e:e1:06:a5:31:98:47:ab:28:7f:a8:3f:9f:77:70:16:39:
16:79:79:53:12:ca:4c:d3:1d:e7:50:d7:d2:9b:9e:6c:02:1f:
13:66:5d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org