Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w8Y62wVhRWXdwOqpyOAaz00uxoY.roa
File: w8Y62wVhRWXdwOqpyOAaz00uxoY.roa (raw, json)
Hash identifier: fUbQzpoQ5krMCEIw5sM0wwmvHycHDcysruIpNY3y7Q8=
Subject key identifier: C3:C6:3A:DB:05:61:45:65:DD:C0:EA:A9:C8:E0:1A:CF:4D:2E:C6:86
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w8Y62wVhRWXdwOqpyOAaz00uxoY.roa
Signing time: Thu 15 Sep 2022 02:36:15 +0000
ROA not before: Thu 15 Sep 2022 02:36:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.159.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C3C63ADB05614565DDC0EAA9C8E01ACF4D2EC686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1f:10:06:f8:64:3f:a7:30:36:fc:89:00:03:
a6:1e:36:8f:69:1d:60:e2:e1:db:d2:2d:99:24:3b:
2b:0d:a3:81:c4:9e:78:81:98:a3:7a:d8:ff:a7:fd:
61:29:8f:f3:79:98:93:b1:19:65:e0:61:f7:1d:8c:
cf:c3:46:01:1c:0d:6d:63:ed:f3:df:44:fa:34:45:
56:5e:1b:87:07:2b:c4:58:ee:ae:ff:69:33:77:71:
26:60:df:62:17:da:b1:9d:4a:10:d7:d9:cc:84:2e:
f9:e1:fa:c7:c6:a7:a4:d2:47:dd:04:13:a2:dd:f2:
48:f4:6f:9f:fc:59:8d:cf:82:e7:25:13:02:61:db:
9f:b3:76:fb:ca:48:45:ad:5f:cb:e1:0b:6f:26:74:
d4:a3:56:43:f2:9d:2e:b2:98:ad:cd:55:96:4e:2f:
ad:00:e8:e9:d7:bc:3d:2d:54:09:1d:da:78:94:cb:
83:1a:17:8c:1d:64:33:50:d4:dd:7c:22:cc:3c:9e:
9c:e9:c7:8b:97:13:ef:75:2a:62:37:76:26:70:33:
a5:95:d5:8d:3d:53:b2:ab:b0:28:5b:97:29:b2:08:
67:e6:37:98:b6:9f:7c:da:32:fb:78:10:9e:7c:04:
86:89:e3:65:98:6f:6c:b0:dd:45:f4:a6:d4:f8:13:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C6:3A:DB:05:61:45:65:DD:C0:EA:A9:C8:E0:1A:CF:4D:2E:C6:86
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/w8Y62wVhRWXdwOqpyOAaz00uxoY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:8c:e0:47:02:a3:e1:ae:74:92:d6:60:f7:bc:e7:1e:88:17:
a6:b5:dc:73:47:f9:b5:32:44:3d:28:6f:11:61:39:1b:e0:26:
a2:dc:f7:22:1b:31:f7:12:bc:c3:18:2e:c2:4a:39:16:34:ee:
8e:11:7a:0a:41:8a:86:40:f3:44:de:28:27:84:f6:48:51:54:
44:fa:05:74:f8:67:cb:6e:68:c3:49:1b:c0:59:c7:54:0e:00:
77:4b:16:7c:f7:d8:bb:d2:a0:64:e3:fe:21:40:66:31:56:ca:
23:e2:80:99:fb:64:a4:7b:41:41:f4:ff:c0:ed:3d:68:d9:ac:
ba:71:37:49:01:f9:8f:a2:8f:74:b5:2a:d0:33:07:6b:b5:4b:
06:2a:b7:50:34:6e:7b:64:ca:08:dc:62:10:86:e2:91:ab:dc:
ff:c9:91:b6:86:6b:97:0c:78:75:58:cc:2d:52:37:ff:26:ca:
46:7c:fa:6d:52:ba:4a:3d:34:97:5f:f1:b9:40:86:e0:1f:45:
da:08:1b:63:7a:7e:58:d1:e1:9b:f7:e0:85:4e:c8:ab:b1:38:
04:89:b3:06:03:c7:e1:9f:ff:79:8f:c1:65:dc:78:b9:95:bb:
da:a7:a5:2d:8a:f8:67:1a:19:49:89:fe:5d:99:15:0d:5e:9f:
77:41:1b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org