Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/n1ZiBFNavDSgXeWDQanqPCGKSTY.roa
File: n1ZiBFNavDSgXeWDQanqPCGKSTY.roa (raw, json)
Hash identifier: iJ5dg/KnV0ojGQIsJLfl3twYvbBb4JHoWajJ0JG44lU=
Subject key identifier: 9F:56:62:04:53:5A:BC:34:A0:5D:E5:83:41:A9:EA:3C:21:8A:49:36
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B82
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/n1ZiBFNavDSgXeWDQanqPCGKSTY.roa
Signing time: Tue 29 Sep 2020 10:08:30 +0000
ROA not before: Tue 29 Sep 2020 10:08:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 49.158.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2946 (0xb82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:30 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9F566204535ABC34A05DE58341A9EA3C218A4936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c6:76:1b:52:cc:2d:b3:2f:7c:91:ec:81:48:
fd:60:5b:24:14:1e:6f:69:4e:75:45:ca:c3:3a:bb:
86:d4:d7:e4:f8:0d:4f:69:28:75:f5:3b:7b:33:33:
8d:05:7f:18:80:da:74:fb:d0:53:df:71:dc:0b:9f:
74:49:68:f7:11:1a:ea:ed:16:05:7a:72:5c:cb:6f:
65:44:a0:fa:f3:9f:25:03:fe:b2:40:c9:a6:04:16:
e1:5e:e3:b4:e5:93:30:b0:00:69:d3:20:3b:2a:4f:
5d:2a:3d:c2:f6:9c:e0:03:2c:9b:de:b5:97:e8:88:
b4:1c:8e:8c:6a:3a:9c:0c:9b:b2:e2:74:ac:a8:f0:
ca:06:a1:07:b3:65:bc:ef:1a:9d:50:97:17:f7:d3:
a4:f6:95:37:f8:b1:a5:40:66:42:db:9d:df:80:c7:
24:a1:84:70:4b:57:c8:36:ad:48:53:7a:6b:21:81:
fc:69:41:83:a9:42:52:c7:60:64:0d:ab:1f:88:56:
c8:07:99:b0:46:4a:6c:07:f8:71:09:d8:d5:8c:30:
21:18:f0:b4:32:18:84:51:c1:28:09:9e:1e:a6:c5:
30:21:e1:86:f6:86:86:2c:0d:41:0d:8d:f3:99:3b:
6a:d1:c4:54:77:a7:91:24:da:50:9e:60:59:5b:7e:
20:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:56:62:04:53:5A:BC:34:A0:5D:E5:83:41:A9:EA:3C:21:8A:49:36
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/n1ZiBFNavDSgXeWDQanqPCGKSTY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.192.0/22
Signature Algorithm: sha256WithRSAEncryption
78:58:11:78:6d:4a:6e:08:4f:f8:c2:e7:99:35:96:47:01:f7:
8a:19:11:c4:3d:19:fa:c9:33:88:99:0c:01:a7:94:75:71:2c:
62:24:8c:4d:c0:57:e1:57:ff:f7:97:fd:bd:34:ba:a1:59:a1:
d4:74:31:74:25:e4:20:d6:90:e1:a6:7d:b0:17:3e:57:d2:14:
00:99:90:a9:49:fc:6a:94:11:a5:df:0f:bb:9b:c2:21:77:4a:
3c:78:3b:29:e7:2d:76:12:3f:17:3e:9d:5f:23:fd:a8:3f:a5:
44:81:44:b9:90:71:06:15:90:fb:5b:f1:ec:19:c2:26:a4:31:
94:1e:45:f5:21:7f:a4:eb:2c:2f:04:a1:84:8f:a1:bd:c9:ad:
41:57:16:46:8c:a8:bb:3d:81:e5:66:df:6b:26:53:5c:e4:41:
18:76:d0:76:69:d9:92:39:a1:38:9f:62:82:81:c8:d3:53:d3:
22:7b:f0:76:c5:b4:3e:c6:85:84:c8:62:64:db:59:84:bb:70:
ab:de:bd:fe:9e:84:7b:ae:eb:cc:6e:d3:7e:76:e8:e3:bd:d1:
b7:0a:b4:ad:aa:fb:5a:91:1d:99:71:c4:a3:9f:23:f0:49:b6:
63:96:59:7a:95:7a:f9:76:9a:d9:92:29:e2:f5:c0:5d:75:3c:
74:17:4b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org