Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vnTTtvSeBWf0B-1YEyaCRbX0VFY.roa
File: vnTTtvSeBWf0B-1YEyaCRbX0VFY.roa (raw, json)
Hash identifier: Fhf9cAAYDv4wSfP21emnj3PCQkjHXv28s3bpEMFbt9Y=
Subject key identifier: BE:74:D3:B6:F4:9E:05:67:F4:07:ED:58:13:26:82:45:B5:F4:54:56
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FF3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vnTTtvSeBWf0B-1YEyaCRbX0VFY.roa
Signing time: Sun 07 Feb 2021 12:36:48 +0000
ROA not before: Sun 07 Feb 2021 12:36:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.159.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4083 (0xff3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:36:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BE74D3B6F49E0567F407ED5813268245B5F45456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:db:ab:b1:50:ce:e0:a2:0c:39:11:11:b4:
2c:8f:cc:68:9e:61:f3:1b:44:0f:bb:5c:70:dd:c8:
04:b4:6d:3c:75:b4:09:b8:88:f2:1e:c5:bc:ce:a2:
bf:61:4b:53:87:25:d2:0f:1a:cf:73:35:ef:4f:cd:
a9:50:82:52:6b:b7:42:b0:93:f9:4a:36:02:33:d9:
8e:6e:8a:6f:74:20:fb:94:ec:19:81:5d:8d:ea:f4:
01:d7:ff:b0:fb:eb:88:ef:9c:51:9a:0e:43:8b:d3:
87:d5:ec:58:d2:de:74:74:c6:03:85:db:9a:66:b6:
76:78:a9:0d:e3:d2:0d:51:1f:d3:21:e4:9c:dd:6a:
01:92:d3:55:85:8e:68:a3:f0:72:db:f9:3f:6b:c2:
8b:c8:11:ed:74:b2:4f:39:ba:4e:a5:71:52:93:ef:
dd:33:8f:7e:96:bb:9d:84:a2:f0:4b:db:5f:a6:24:
30:a9:19:d4:2a:b8:02:89:fe:e9:aa:69:5c:60:3b:
c7:bb:f7:da:42:4e:fc:c2:45:e2:08:41:03:f0:d1:
dc:f6:3a:0d:a6:b5:26:68:4c:ee:f2:23:b3:cd:2b:
18:cc:27:50:38:bc:a3:14:34:11:cc:4b:4c:90:a3:
ec:aa:43:f0:b9:f3:de:43:b6:2e:73:33:b5:de:66:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:74:D3:B6:F4:9E:05:67:F4:07:ED:58:13:26:82:45:B5:F4:54:56
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vnTTtvSeBWf0B-1YEyaCRbX0VFY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.208.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:5c:61:68:68:93:a2:62:d9:b5:f3:be:8d:e0:f9:9c:72:d9:
98:8a:34:3b:ba:34:9a:50:8e:72:39:fb:ce:e5:74:82:02:9d:
82:80:9a:2a:fc:2f:6d:21:81:9b:54:8b:c8:32:66:0a:ee:46:
b9:78:75:ee:de:19:27:ef:b2:b3:21:a2:f1:d0:2c:fd:2f:2d:
e2:3f:d9:25:eb:b3:ab:4d:0b:4b:07:97:43:03:e4:47:c9:ec:
42:44:e6:8b:27:ae:81:a0:58:37:48:df:c8:5f:f7:e2:9d:d7:
44:01:d9:3f:23:33:79:8c:67:9c:64:12:6b:74:0a:44:bf:b7:
d4:97:f0:10:c6:37:c5:3e:25:f6:b3:f5:56:56:db:76:43:0e:
8f:b0:4a:60:ba:43:db:c1:01:fc:ef:ef:ca:20:91:5d:f9:b4:
4e:e9:d3:62:dc:01:5e:00:51:c5:0d:57:a6:b5:d1:8a:0c:7e:
d5:11:fa:f0:68:70:cf:57:70:6f:48:68:be:f2:f0:d5:dc:78:
e3:14:e3:14:39:62:41:f1:d0:bb:ef:12:21:f3:ad:e5:0b:13:
26:31:a3:20:50:25:b2:b5:86:e7:5b:71:0b:26:66:81:0c:ac:
90:0b:fb:b6:d1:f4:d4:4d:39:b6:31:ae:2a:9f:b3:08:1d:ab:
b9:c6:b4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org