Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-6O5NxE-FGtguLc1DGtcMENDnew.roa
File: -6O5NxE-FGtguLc1DGtcMENDnew.roa (raw, json)
Hash identifier: BRra4EFGEY10Cw24j+sZ48rQOZXDq7zpQ3FGmo/JGPU=
Subject key identifier: FB:A3:B9:37:11:3E:14:6B:60:B8:B7:35:0C:6B:5C:30:43:43:9D:EC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 100B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-6O5NxE-FGtguLc1DGtcMENDnew.roa
Signing time: Sun 07 Feb 2021 12:37:16 +0000
ROA not before: Sun 07 Feb 2021 12:37:16 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4107 (0x100b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:37:16 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FBA3B937113E146B60B8B7350C6B5C3043439DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:26:36:3e:13:87:8b:55:e7:e0:96:28:20:
32:81:8a:f0:8e:44:f9:b8:d7:d3:5e:44:2d:e7:22:
22:19:88:db:c3:76:da:62:ef:99:5a:53:3c:b9:04:
eb:03:bf:db:42:96:7b:11:b7:de:b5:33:b3:0c:8c:
6a:68:6e:f5:f7:8b:66:73:9a:c7:b7:dc:76:e7:f2:
af:fa:5c:55:7f:95:cd:e8:05:47:c2:4d:a7:78:5e:
f9:00:b1:bd:2d:23:d7:07:a0:39:d4:26:1b:3e:2e:
31:d5:cc:bc:68:86:e0:2c:2f:f6:7d:2e:49:70:40:
20:45:8d:88:9c:bc:dd:b6:64:3f:96:c8:dc:da:96:
10:2b:0e:a5:b5:da:1c:36:61:ef:b1:b0:52:43:47:
1e:f9:1f:80:c2:fb:8d:d4:e5:7d:de:bd:62:d3:49:
12:9a:85:17:8a:c5:b1:bf:14:28:25:6a:c5:d0:61:
4d:36:63:52:4a:1d:d4:0a:ce:8f:78:42:ab:06:5a:
43:df:b0:17:09:ec:11:2e:b7:f7:f2:8f:1a:48:10:
47:64:3e:45:40:71:1d:76:9b:df:ec:5e:1f:e8:19:
ab:d9:3a:ce:2b:0c:b4:06:d4:18:9d:13:96:8d:0e:
fa:94:56:c8:ba:9d:76:59:05:d2:ab:58:71:d9:06:
4e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A3:B9:37:11:3E:14:6B:60:B8:B7:35:0C:6B:5C:30:43:43:9D:EC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-6O5NxE-FGtguLc1DGtcMENDnew.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.80.0/21
Signature Algorithm: sha256WithRSAEncryption
13:47:cd:88:b0:41:35:75:89:74:36:29:41:9a:6f:55:9e:45:
e6:8f:c9:b5:04:7c:58:0d:a7:d6:9d:23:85:20:ab:e8:1a:81:
51:70:b3:03:99:eb:c1:92:60:57:64:38:47:1b:3c:78:6e:b0:
49:d7:71:47:15:4f:eb:a6:33:94:5e:55:ed:33:b9:1a:0c:f9:
10:3d:50:15:b8:b9:4f:8b:22:46:46:1d:2c:97:64:d3:c3:45:
5f:ed:45:27:7e:ac:40:48:6c:41:da:ef:08:4e:ce:59:71:77:
a6:8b:2d:90:38:c4:e3:d8:0d:c3:5a:ab:7d:37:5f:39:41:b4:
65:99:7d:75:10:a9:86:82:5b:fb:fe:0b:f9:05:0d:ea:20:f8:
cb:68:40:ca:b2:c0:33:03:f2:e7:a6:e4:1e:d8:56:16:bb:77:
69:a1:69:c2:38:99:aa:8d:2f:dc:05:5f:ea:9b:df:d4:f7:c3:
a9:4c:4a:f2:4e:f9:5c:f7:8f:0c:0e:49:57:33:c1:31:75:b3:
02:0c:38:db:0e:1a:c3:8f:00:fd:9b:3b:fb:5d:c5:42:d0:08:
cb:56:a3:c1:e5:43:90:1e:db:d2:e7:6a:30:9d:9e:9b:2b:d3:
e2:26:d8:96:14:78:d2:5c:73:db:a8:80:e8:b1:60:78:5c:e9:
b9:c3:34:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:00:58 2025 by rpki-client