Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yUX9PIjeVqT0YasYcTjx1XKwF1k.roa
File: yUX9PIjeVqT0YasYcTjx1XKwF1k.roa (raw, json)
Hash identifier: SPxfXxneOGPZYvpVtUyQtsIP4K3v+LSjRJJa2AkPU4w=
Subject key identifier: C9:45:FD:3C:88:DE:56:A4:F4:61:AB:18:71:38:F1:D5:72:B0:17:59
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1235
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yUX9PIjeVqT0YasYcTjx1XKwF1k.roa
Signing time: Wed 29 Sep 2021 02:54:19 +0000
ROA not before: Wed 29 Sep 2021 02:54:19 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.159.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4661 (0x1235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:19 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C945FD3C88DE56A4F461AB187138F1D572B01759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:9d:18:54:36:e2:dd:03:f1:8a:3b:3d:bf:
5d:45:c1:53:fe:6c:4c:29:37:92:96:86:62:bd:88:
0c:65:fb:4f:e0:a4:75:07:2b:27:f9:b1:77:16:48:
1e:8f:5b:d4:cd:64:91:f6:53:aa:96:ba:d7:7f:db:
5a:6f:a2:a3:68:b3:7e:a3:9d:86:43:10:25:55:f4:
57:7a:cd:6a:6d:cd:68:59:ed:a5:08:c0:8c:ac:a7:
4d:7e:99:4f:27:50:46:14:b4:da:ef:ec:2b:1c:21:
0b:06:fd:92:e2:f5:d5:3d:71:c9:fb:81:83:8d:16:
bc:a9:ee:f8:3d:cd:b8:c1:40:ed:61:27:38:2c:cb:
d5:21:f6:20:9d:03:52:37:97:d4:26:20:04:d3:f5:
92:06:b0:6e:4b:ab:9a:2d:ed:29:fd:08:ec:2e:43:
3d:6d:53:4c:7f:6f:0b:e1:14:cb:2f:d8:c5:68:9b:
56:81:fa:82:fe:25:3c:57:b4:8f:20:51:99:94:e4:
bf:58:2a:b6:8a:8e:a3:28:da:ef:49:88:68:31:c9:
dd:46:84:99:54:0f:87:f4:09:24:df:4b:e7:44:d0:
ee:72:43:00:ba:c4:17:51:ee:91:7d:6b:b1:cc:25:
84:73:72:d6:87:55:24:40:20:eb:95:8b:5e:dc:cf:
96:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:45:FD:3C:88:DE:56:A4:F4:61:AB:18:71:38:F1:D5:72:B0:17:59
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yUX9PIjeVqT0YasYcTjx1XKwF1k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.16.0/20
Signature Algorithm: sha256WithRSAEncryption
04:3a:99:fe:89:4e:60:f2:b0:7b:59:e9:91:cf:ed:e9:4d:fa:
f6:e8:e9:15:da:a0:3b:9e:d1:41:dc:e5:19:8a:8f:06:6b:32:
46:07:d4:29:bc:cb:93:50:96:48:74:d3:f2:ea:38:74:48:e9:
b4:bf:da:06:11:66:1b:86:10:ad:61:6d:0f:31:fa:15:3d:7a:
38:10:70:d1:88:e9:6a:e1:c3:51:14:75:67:6d:4d:83:a7:d1:
f4:d6:2f:9c:ab:44:df:38:e8:2f:b3:9b:f0:a4:14:f4:da:87:
61:e3:f6:50:cc:ed:1c:c2:3d:64:31:1d:d4:02:d7:c0:2d:b4:
77:99:5f:0b:8d:86:5d:c7:bc:df:7c:9c:c3:12:e8:45:4e:85:
ed:5d:59:41:be:c8:d3:d1:43:f4:1c:50:6c:01:1a:e4:45:34:
27:cc:39:dc:7a:7e:ab:2d:2e:d6:84:88:0c:71:2f:9f:48:9d:
8b:58:a6:7e:e0:08:b5:c9:6a:a3:8b:98:e4:fb:27:fb:91:68:
de:8d:7a:dd:c3:d0:d0:29:f9:c5:2a:7f:b2:68:5a:84:58:ed:
f8:65:fd:d5:1d:8d:f4:a7:cf:74:b8:8c:26:8a:42:f2:24:f2:
4a:0b:8d:8f:9c:fb:74:d0:60:0a:10:d7:fd:55:2e:54:ad:2a:
d9:7d:bc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org