Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p3tegut6aKNPDLH3vVkrwQ5L3aI.roa
File: p3tegut6aKNPDLH3vVkrwQ5L3aI.roa (raw, json)
Hash identifier: fvANuS0z+2lduWWsKkGGZpiYuiKeyQX3xr+Syeu/sUo=
Subject key identifier: A7:7B:5E:82:EB:7A:68:A3:4F:0C:B1:F7:BD:59:2B:C1:0E:4B:DD:A2
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p3tegut6aKNPDLH3vVkrwQ5L3aI.roa
Signing time: Thu 15 Sep 2022 02:36:00 +0000
ROA not before: Thu 15 Sep 2022 02:36:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A77B5E82EB7A68A34F0CB1F7BD592BC10E4BDDA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:82:ce:bc:68:88:ff:c5:6c:cd:40:8c:8a:
be:e7:55:fb:66:31:6b:ec:05:d3:49:62:4f:37:d2:
97:f9:ad:b2:95:51:c6:4e:9d:df:1c:6d:eb:d0:06:
1d:d3:23:42:90:2d:59:a7:93:01:fe:db:b2:55:d3:
78:74:a0:49:bb:96:e2:a5:80:e3:04:42:4c:a2:8e:
db:29:55:3d:c3:6b:c6:6a:1a:b7:c9:3f:ce:49:73:
d5:16:df:1f:66:55:2a:dc:c6:88:39:b1:f3:4e:58:
eb:28:bd:96:be:df:8f:8e:7c:e1:e8:93:a0:5e:e9:
6a:7e:0a:af:91:07:90:09:24:28:b4:a7:4f:17:62:
c0:a6:6a:0a:15:e3:91:14:9f:48:69:c1:8a:94:c7:
95:00:33:12:bf:1b:00:b7:a9:80:d3:07:48:88:57:
64:67:64:ef:4c:3a:aa:93:0f:d1:f4:a0:15:d8:30:
99:d7:a3:d3:4e:d4:4f:1c:16:0a:43:22:8e:03:f6:
ea:e1:2b:3f:8a:95:d6:eb:de:54:3a:2e:8f:48:69:
ea:1d:4c:cd:75:6d:af:b8:46:77:9a:e2:cd:0d:fa:
24:90:81:5e:dc:07:4c:74:5d:87:aa:ab:00:98:7f:
38:35:be:8c:fb:db:c9:50:ea:25:7e:9c:36:67:a2:
7d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7B:5E:82:EB:7A:68:A3:4F:0C:B1:F7:BD:59:2B:C1:0E:4B:DD:A2
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/p3tegut6aKNPDLH3vVkrwQ5L3aI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/21
Signature Algorithm: sha256WithRSAEncryption
88:57:a7:60:89:15:cf:98:6d:ef:58:61:87:2e:fc:de:02:15:
75:90:7b:99:ec:15:f9:25:fa:47:ca:b6:eb:69:52:bd:1c:9c:
2b:ee:9b:79:8e:c5:91:c7:b3:5b:cf:53:17:a6:8f:41:5e:12:
de:97:d6:69:17:1e:fb:ee:07:6a:4b:52:49:73:d0:32:3a:dd:
a3:fe:3d:39:65:ec:46:b8:0d:09:9c:bf:ec:9e:d4:8a:89:78:
47:f7:5d:4e:1a:68:03:85:7e:d0:94:18:1c:ea:20:b7:13:c5:
97:39:2d:6a:f2:9b:90:3f:44:4d:f7:ad:23:1e:aa:53:7d:05:
7f:cf:f6:f5:35:6a:5e:21:ea:ad:1c:d0:1b:79:8b:8d:42:39:
36:85:21:3f:ff:95:c7:fd:ad:0a:a9:fb:91:cc:02:81:54:1b:
70:d1:87:0e:ee:49:59:75:b6:cf:ce:a5:a8:88:77:17:be:09:
f3:f7:15:4c:7b:3e:0a:93:0e:c3:c1:ae:0b:b7:ed:fc:f2:0e:
92:4d:73:17:cd:2b:6e:96:5c:12:1b:56:94:1a:01:45:bf:41:
8e:8e:b6:7c:df:f5:09:10:54:3f:8c:2f:f1:74:7f:ce:5d:9b:
0f:f6:fd:6b:bb:6c:55:3d:25:78:f3:6e:7a:1c:ff:27:ae:36:
33:a2:df:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org