Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vQmzc3KlmaxnnPmlg8bftx7a8lM.roa
File: vQmzc3KlmaxnnPmlg8bftx7a8lM.roa (raw, json)
Hash identifier: Zzz+rUiq+htRKS0SRAn2Esp3vAQkKia9y6TBUfeeqqY=
Subject key identifier: BD:09:B3:73:72:A5:99:AC:67:9C:F9:A5:83:C6:DF:B7:1E:DA:F2:53
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B4D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vQmzc3KlmaxnnPmlg8bftx7a8lM.roa
Signing time: Tue 29 Sep 2020 10:08:15 +0000
ROA not before: Tue 29 Sep 2020 10:08:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 49.159.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2893 (0xb4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:15 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BD09B37372A599AC679CF9A583C6DFB71EDAF253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:f3:a5:21:8c:7d:32:9f:7e:71:20:da:95:
69:35:7f:f1:73:7c:f6:af:01:73:6e:e1:11:08:6b:
88:9d:17:b2:f3:50:cc:b1:48:cd:0e:c8:0b:30:d6:
1c:d2:6d:c9:da:56:c5:d7:03:ca:2c:7b:b0:16:11:
09:a7:dc:40:fe:47:27:23:51:da:51:6d:4e:4b:09:
37:65:02:1b:12:03:c5:88:02:cc:b9:60:06:66:21:
a8:af:ae:b9:7d:eb:35:ef:0a:67:4b:81:96:bf:db:
17:c3:7d:d9:ca:f8:03:fc:a3:89:cf:34:c5:8c:ed:
e4:63:e9:21:cb:77:7c:00:3b:14:22:4d:f8:83:3e:
b6:61:97:30:97:4d:e3:7b:b0:38:3e:a5:06:c9:3d:
d8:fe:2a:82:05:1c:4b:13:9a:11:4c:27:34:92:ee:
de:86:fe:5f:82:d7:1a:60:24:ec:20:f3:df:41:ea:
b4:bd:80:5b:2c:90:72:ed:fc:1d:8f:d8:78:27:9f:
f1:ee:9f:05:a5:30:88:80:21:1a:9f:be:54:0c:fb:
e0:21:a5:5b:bf:2e:ea:73:76:db:64:7b:18:91:d0:
0e:d3:5a:76:38:7b:8c:40:df:07:36:05:17:04:dc:
d0:12:8b:65:50:5c:21:91:e2:ee:21:7f:42:90:3e:
70:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:09:B3:73:72:A5:99:AC:67:9C:F9:A5:83:C6:DF:B7:1E:DA:F2:53
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vQmzc3KlmaxnnPmlg8bftx7a8lM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.192.0/20
Signature Algorithm: sha256WithRSAEncryption
78:27:31:c0:1d:8c:03:fb:64:b5:44:66:57:f1:48:cb:93:a4:
db:e5:33:4f:e9:ba:12:cf:1a:a3:57:c5:fc:87:7d:48:b4:49:
e7:a7:71:00:d9:c2:a8:56:b9:24:87:af:f7:b8:b5:77:15:60:
54:b8:35:9c:0a:f9:4c:63:7c:68:e9:74:9e:2f:a4:a1:11:09:
97:eb:3d:bf:66:dd:1e:00:27:e2:49:b0:11:d6:1f:25:47:2b:
01:46:c6:fb:d1:36:b3:a6:be:21:bc:90:12:dc:2a:ea:27:68:
c7:e2:f3:5c:f8:7a:51:8c:06:35:d4:eb:80:8e:2f:01:22:c6:
f8:39:00:d1:c4:85:b1:24:3a:e8:95:f2:17:c0:be:a4:c0:7b:
71:14:72:f7:f5:04:a0:cd:16:f8:68:50:db:43:8e:55:ab:b9:
b6:9d:bb:d1:59:25:b5:f3:b2:dd:d0:b3:63:ca:7f:dd:62:37:
95:93:ca:7a:62:c1:20:ce:1e:40:1a:c6:7f:86:2c:80:78:fe:
49:83:da:82:a0:66:77:27:d4:5f:47:f5:eb:ee:b4:2b:8e:66:
e3:2f:e3:fa:cb:fa:ce:b3:b3:94:e9:a5:27:63:d3:8e:36:81:
63:1d:fa:6f:e7:a5:3a:3b:74:13:01:ec:18:40:ad:40:02:a2:
b0:97:63:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org