Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pcRtbP_wssr5ZOeF5SRX4ONBTL4.roa
File: pcRtbP_wssr5ZOeF5SRX4ONBTL4.roa (raw, json)
Hash identifier: PuUC1hARgGSe4bO5x/nQwTbxkHiaE76BMuIq7xrk2go=
Subject key identifier: A5:C4:6D:6C:FF:F0:B2:CA:F9:64:E7:85:E5:24:57:E0:E3:41:4C:BE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1967
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pcRtbP_wssr5ZOeF5SRX4ONBTL4.roa
Signing time: Sat 22 Oct 2022 06:06:29 +0000
ROA not before: Sat 22 Oct 2022 06:06:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.158.152.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6503 (0x1967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A5C46D6CFFF0B2CAF964E785E52457E0E3414CBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:4d:39:ac:d2:46:7a:9a:12:96:1b:bc:d4:
f3:67:89:27:68:41:bf:8a:5b:59:3f:a3:df:92:62:
52:1f:0f:69:25:ed:93:80:14:a7:a2:01:98:b5:62:
69:74:07:3a:64:fe:d0:6a:35:ed:2e:82:46:db:9b:
72:39:ff:3d:d6:42:ea:df:4e:4c:60:d3:2d:dd:78:
5d:04:e7:7f:a9:8c:4a:78:ec:60:a9:03:08:df:aa:
2d:82:91:10:d7:85:1f:fb:fb:60:98:5a:a7:c7:99:
17:ed:45:7a:41:df:93:8a:02:e0:1f:ae:80:a7:f2:
e4:e7:b2:06:85:1b:36:4b:55:6b:e6:06:72:ba:94:
e9:f6:2a:ba:6f:11:df:ec:22:c4:7e:7c:b0:98:e3:
6f:63:bf:c1:90:9b:da:a9:ee:ce:a1:f8:69:38:ee:
1f:30:43:18:ab:31:15:bc:30:a5:a1:5a:4c:9c:dc:
58:e1:17:47:35:cb:74:21:c2:50:bf:41:98:dc:0a:
93:9f:4c:77:11:d7:32:b9:e5:04:0f:f6:49:4d:1a:
8e:ad:5e:16:48:ff:b5:45:43:50:c1:6c:8e:56:e4:
3d:77:eb:06:74:ea:69:5c:2a:98:d9:ac:33:26:34:
79:7a:2b:e8:f0:69:1c:fb:8e:33:6d:2f:77:5f:5b:
77:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C4:6D:6C:FF:F0:B2:CA:F9:64:E7:85:E5:24:57:E0:E3:41:4C:BE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/pcRtbP_wssr5ZOeF5SRX4ONBTL4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.152.0/21
Signature Algorithm: sha256WithRSAEncryption
16:40:3a:38:50:89:30:cd:bf:e3:8a:38:2d:d2:05:3e:6f:3c:
55:70:da:b0:62:8f:b3:58:11:ba:22:e1:6b:aa:5c:c1:80:e9:
d5:fa:08:1c:24:23:25:7c:32:42:7b:d7:e0:c8:7c:6c:cb:d3:
60:fa:4b:e2:90:ce:e9:74:0a:c5:4c:4f:f1:3d:97:f8:0b:93:
0b:74:ac:de:ac:e6:d9:9c:d5:45:5e:76:16:38:16:35:b0:3a:
b7:46:0d:9c:e6:0c:84:35:a2:e6:dc:98:06:ee:91:ed:3c:7d:
a1:5f:e9:a5:51:a2:f8:35:2e:4a:17:67:01:bd:49:5e:80:7c:
f7:72:4f:80:44:fc:00:56:eb:2a:b3:c2:a3:9f:3c:97:d6:ac:
d9:0d:6a:0c:83:08:66:ce:56:e2:73:fb:b3:c6:48:d6:07:f7:
1a:0c:53:9e:5d:14:31:8b:15:1f:f0:10:3e:09:05:6f:84:2e:
b1:e5:a1:d6:b8:76:f2:fe:5b:53:0d:69:d6:d5:e6:3f:59:68:
ec:7c:ba:06:8c:ee:03:4b:69:92:00:56:df:7c:d0:ee:11:50:
85:85:14:90:1c:e4:87:0e:2e:ba:69:ce:1c:f8:75:e8:0a:37:
80:f8:1e:4e:bb:e4:b5:e2:83:4c:11:cf:34:c2:b4:30:f5:25:
1d:a2:a2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org