Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vibQlFZ--geM7ZE1KlnkPnGiHVA.roa
File: vibQlFZ--geM7ZE1KlnkPnGiHVA.roa (raw, json)
Hash identifier: GM/z92LqpUsp2bFUd/YlKgV2+b98rJrfq8EZrnQIU9Y=
Subject key identifier: BE:26:D0:94:56:7E:FA:07:8C:ED:91:35:2A:59:E4:3E:71:A2:1D:50
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18FC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vibQlFZ--geM7ZE1KlnkPnGiHVA.roa
Signing time: Sat 22 Oct 2022 06:05:57 +0000
ROA not before: Sat 22 Oct 2022 06:05:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6396 (0x18fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BE26D094567EFA078CED91352A59E43E71A21D50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:33:1e:6e:bf:4a:e2:01:d2:57:57:af:f7:
6e:bd:39:a4:08:b4:5b:cf:d0:78:79:f9:f5:c1:79:
06:4d:b9:ab:19:79:75:f4:eb:cd:ab:7e:af:bb:cb:
4a:dc:e7:14:27:48:9b:a0:a1:36:bb:a7:4d:42:5c:
7c:f1:5b:d5:2e:12:3e:c7:2e:68:47:a4:2c:70:e8:
79:75:11:03:51:a9:43:23:0b:ef:3a:82:6e:fb:d4:
03:74:b1:a4:37:86:67:3f:00:37:ad:3d:49:74:a6:
26:fc:0f:d6:2f:be:ac:9b:24:d8:50:4d:11:64:4a:
2a:16:33:40:a6:2b:d9:50:0f:87:f8:2c:fc:31:e9:
66:3c:d1:c8:c1:f8:41:89:1c:b7:0e:d5:ce:ba:96:
c5:7f:31:03:f5:65:18:48:50:c5:6d:68:8c:d1:71:
4e:08:21:e8:a3:70:45:9c:b8:07:66:e6:a2:09:73:
ea:82:30:f1:46:ce:57:1f:5e:ab:6d:e3:ed:f2:4d:
fd:fb:43:00:50:40:54:d7:4c:50:03:c5:7e:a4:3c:
ff:01:b8:14:68:42:78:b2:72:9e:b3:dc:05:7b:18:
12:0a:00:7d:75:df:e5:ee:d4:c6:28:be:e9:78:fa:
66:af:0c:19:17:a4:90:17:84:ba:d0:cc:8d:85:e4:
50:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:26:D0:94:56:7E:FA:07:8C:ED:91:35:2A:59:E4:3E:71:A2:1D:50
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vibQlFZ--geM7ZE1KlnkPnGiHVA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:4f:d9:0b:57:01:eb:0e:89:68:ff:b5:33:72:1a:9a:04:16:
dc:1b:b5:e6:83:7a:a8:67:a9:ee:26:15:6f:24:f3:59:ad:c5:
fa:97:d9:6c:9f:ca:32:24:ef:ba:cd:75:89:a5:a5:cc:4f:5b:
0a:bf:f2:99:c6:90:65:8b:83:02:ba:fb:d2:2e:1f:5d:a7:87:
1b:9d:26:d8:63:83:23:eb:a7:e7:cb:89:c5:94:b1:21:a7:97:
2f:0a:20:24:60:44:9e:c9:78:c9:70:b9:7b:04:7b:f3:e2:a7:
fb:2b:70:0b:5a:a0:98:ee:4d:35:a8:fc:2f:b2:75:8c:f3:e4:
15:c0:d8:89:35:64:d0:1b:88:d5:ed:a7:e1:3a:a1:17:46:f8:
38:f6:18:1a:e7:7c:1e:54:44:6b:a8:95:05:53:d8:00:04:81:
07:1a:b6:69:df:3f:db:3f:20:7a:d6:8e:e8:24:54:c5:bb:c1:
8d:bc:7d:22:1b:30:82:ae:d5:43:a1:fe:5c:1b:44:53:f2:e0:
e8:52:93:55:7e:76:bd:7a:f7:96:1a:81:e2:e2:31:fe:3e:b1:
22:74:33:63:20:01:c4:5e:86:7e:b2:9d:7c:38:fb:94:3a:07:
52:bb:09:0a:15:55:64:c6:c6:18:42:2e:11:ce:4b:c7:b0:4c:
d1:26:79:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org