Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qO3TOu2yqA5OyAoDVSRTrZm14TM.roa
File: qO3TOu2yqA5OyAoDVSRTrZm14TM.roa (raw, json)
Hash identifier: qab8ib5xGmjPNBBA2ULaTkCrvYUtiHjgdrMkLI7tUDs=
Subject key identifier: A8:ED:D3:3A:ED:B2:A8:0E:4E:C8:0A:03:55:24:53:AD:99:B5:E1:33
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qO3TOu2yqA5OyAoDVSRTrZm14TM.roa
Signing time: Thu 15 Sep 2022 02:36:48 +0000
ROA not before: Thu 15 Sep 2022 02:36:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.80.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A8EDD33AEDB2A80E4EC80A03552453AD99B5E133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:48:a5:8f:49:7a:96:aa:1d:00:90:01:31:
8c:24:89:01:5b:c9:a1:e0:45:ea:43:40:71:af:f6:
be:45:3d:ac:d8:27:9e:6a:4d:6f:cb:da:5e:18:f3:
dc:19:b3:71:fb:50:4f:86:25:15:a0:00:ff:b8:2f:
19:c1:5e:d9:bc:31:57:e0:2e:7f:cc:68:04:32:ac:
58:45:c3:0f:53:81:3c:ba:a5:48:52:88:77:6d:0f:
b0:40:5e:3c:65:f6:8b:9f:ba:7f:0a:02:37:2b:94:
b1:f3:5e:94:cb:63:c8:e5:38:fb:a9:3d:ed:1f:ec:
02:a6:fd:f5:ad:b1:6f:63:6e:d3:1d:90:1b:f4:c2:
08:a1:f5:2b:4c:44:4d:3e:f0:10:71:15:3a:ae:29:
77:d7:7e:e3:62:b9:0b:ee:33:dd:67:b4:1e:3f:d8:
ef:51:4a:ed:af:06:b7:90:f2:c3:be:75:96:30:e6:
ab:76:41:a5:5d:29:ff:ae:36:64:98:1b:c1:3c:8e:
e4:04:a1:c7:cf:5a:5a:a5:fb:93:44:52:38:3c:81:
68:dc:13:e9:d4:83:55:31:c7:3a:4a:53:33:54:5d:
3d:73:34:15:1a:d1:b1:01:46:2c:c1:ff:8c:12:89:
d5:ec:0a:0f:ae:9d:dc:97:16:4b:6e:70:45:7d:81:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:ED:D3:3A:ED:B2:A8:0E:4E:C8:0A:03:55:24:53:AD:99:B5:E1:33
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qO3TOu2yqA5OyAoDVSRTrZm14TM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.80.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:84:9f:d6:d1:2d:46:e6:b1:bb:f8:e8:4e:9f:0c:81:0b:72:
ca:e1:9b:6b:1f:03:19:5e:90:ac:68:5b:4c:20:1e:21:fb:23:
52:93:84:bc:6f:db:0e:5a:dd:73:ef:38:2c:db:e9:7c:8e:58:
80:ff:ac:e9:d4:05:15:62:b1:85:8e:1c:7c:3a:de:d0:9c:3c:
9c:aa:f1:c6:83:f3:93:2d:3a:51:b3:af:bf:02:d7:6b:7a:26:
5f:17:89:b6:02:de:78:7d:2e:79:88:f4:da:66:8c:b1:db:ce:
f1:88:d3:24:4d:9b:69:02:a5:14:00:34:42:f1:ad:88:4c:ce:
fa:45:ec:20:69:17:41:d0:4a:c2:f5:b1:1c:6f:4e:bb:c9:00:
8e:e0:7b:ff:c1:53:4d:20:61:8d:0b:b4:c6:48:4d:16:38:d2:
d9:82:ba:56:60:b7:e2:75:21:0e:18:1d:57:a0:f2:a1:43:54:
66:34:7e:57:73:2c:61:cf:95:f1:d3:db:48:a6:e8:bb:cb:ad:
26:8f:2f:b8:84:d8:77:ce:ee:ee:c5:54:bd:b7:b8:bc:87:21:
b5:49:af:94:3e:c1:ea:05:15:55:1b:44:3c:11:f9:3f:f1:62:
54:ad:07:41:e5:61:25:b9:31:ba:e1:4f:18:bd:b3:e4:6d:be:
01:81:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org