Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-SLUH7zr937iullTuRyZwD-FyxE.roa
File: -SLUH7zr937iullTuRyZwD-FyxE.roa (raw, json)
Hash identifier: 9jK3U6PXwcyeMn9rlAKizo4z/dGerrYmqZVLDGDPBVc=
Subject key identifier: F9:22:D4:1F:BC:EB:F7:7E:E2:BA:59:53:B9:1C:99:C0:3F:85:CB:11
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-SLUH7zr937iullTuRyZwD-FyxE.roa
Signing time: Thu 15 Sep 2022 02:35:42 +0000
ROA not before: Thu 15 Sep 2022 02:35:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F922D41FBCEBF77EE2BA5953B91C99C03F85CB11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:51:c1:78:00:a9:50:7e:1c:91:42:b1:df:89:
e4:3e:e0:2b:0c:e2:e7:14:97:90:8d:6e:1a:bd:60:
59:f7:73:ab:df:a7:a1:94:ff:86:05:35:87:86:12:
07:25:16:35:27:ce:d3:81:4b:ce:f2:b7:26:a1:60:
6a:f6:76:0b:1e:01:1b:60:ef:08:8c:54:17:6a:93:
08:ec:ef:af:5d:8a:08:6a:a1:ba:18:e9:de:40:5c:
43:0b:f3:21:54:f0:26:b7:55:ab:5a:43:84:e9:d0:
2e:32:36:68:59:e7:d7:1c:81:90:ca:7c:a2:b1:6b:
41:14:05:af:80:c3:ae:7c:32:eb:2b:43:80:20:5f:
5a:99:55:65:92:80:b8:a2:4e:c8:06:44:16:5e:9e:
02:ae:77:6e:54:e1:44:be:9c:87:a6:c4:37:39:5f:
f0:b2:11:16:00:82:ab:fb:2a:f7:35:66:00:19:59:
ee:f4:be:e0:6a:2e:9a:88:7b:7c:c5:27:b1:03:ec:
0d:69:3f:96:b9:1a:31:ca:e9:17:85:43:3c:c5:0d:
b0:ee:a7:1c:6b:59:2d:0a:00:3e:2f:b8:dc:72:65:
a7:13:19:da:16:96:af:7d:b7:8f:62:36:85:01:c2:
ef:ea:23:2a:ea:4a:a2:89:7c:79:9b:6c:1b:a3:11:
0e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:22:D4:1F:BC:EB:F7:7E:E2:BA:59:53:B9:1C:99:C0:3F:85:CB:11
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-SLUH7zr937iullTuRyZwD-FyxE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.144.0/22
Signature Algorithm: sha256WithRSAEncryption
30:ac:ef:7a:5a:bc:e3:34:e9:94:21:2d:f4:50:1a:90:e1:b2:
67:4c:c3:75:cf:65:f4:b8:18:37:03:2f:a1:94:2b:08:be:ce:
32:bf:d9:93:11:60:a4:6a:41:85:83:b6:92:06:55:62:b3:b9:
13:59:82:f2:69:e7:a0:46:47:44:0e:c9:ce:9f:44:04:cf:66:
87:20:e0:59:bc:86:73:25:1e:60:26:78:d7:aa:79:98:09:b6:
7b:54:b7:7b:ce:4e:65:4d:ea:b1:63:9f:ae:bc:20:f8:21:ef:
bd:9e:42:9d:34:24:76:17:0d:a8:d9:61:c1:21:8f:7e:8d:35:
61:45:6d:c3:af:aa:f8:55:d5:b1:a3:66:3d:d0:78:fa:04:34:
ed:2b:a3:b0:fc:3f:8b:ea:43:bc:c2:6d:f3:bc:a8:55:1f:a8:
52:4d:f6:ef:c6:b2:97:43:f9:67:39:d3:38:8f:a5:f4:07:e4:
40:88:7a:71:ea:99:d7:fa:c8:98:35:7a:14:c6:51:b9:4b:af:
97:c0:36:98:32:9d:ff:e2:e4:f2:26:8a:eb:2e:3a:4d:2b:80:
6a:19:71:16:f2:8d:8e:84:ea:ee:6c:ab:8c:86:cf:b1:a0:20:
bc:33:e3:8f:e5:a2:be:77:35:23:ae:1a:48:9f:80:27:76:e2:
c6:58:5c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org