Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-bqMTZn9DTxL1BkGk0jU8zQy5Xk.roa
File: -bqMTZn9DTxL1BkGk0jU8zQy5Xk.roa (raw, json)
Hash identifier: 23j5kekhrbpwec5tCYMBb370/dn/3XW6IoIcjnGGUSM=
Subject key identifier: F9:BA:8C:4D:99:FD:0D:3C:4B:D4:19:06:93:48:D4:F3:34:32:E5:79
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-bqMTZn9DTxL1BkGk0jU8zQy5Xk.roa
Signing time: Thu 15 Sep 2022 02:35:19 +0000
ROA not before: Thu 15 Sep 2022 02:35:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F9BA8C4D99FD0D3C4BD419069348D4F33432E579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:60:6e:e2:e8:31:66:22:2f:4d:9f:d6:28:
f3:79:11:c6:86:56:9c:a7:6c:51:7a:a8:2c:d5:fa:
1f:f5:ca:57:76:1d:d2:db:37:1d:03:bc:0c:51:d6:
68:e7:11:9d:56:66:26:d8:0d:d6:28:1f:ee:08:18:
9f:d4:7d:e5:14:f9:11:4f:ae:5e:bd:9b:b3:9d:3c:
9f:2b:1b:97:54:b1:f0:aa:a3:b3:3b:43:52:91:7f:
5d:f8:1a:6c:83:94:cd:7c:1d:fa:b6:4a:c8:af:0d:
c5:c9:3a:65:ed:62:4e:c3:07:76:9a:59:d5:0a:d1:
d2:90:bd:fe:93:50:ab:c7:72:d6:ce:44:86:58:74:
91:6d:ca:53:ac:ba:85:60:b6:e9:94:5f:cb:24:47:
9f:15:f9:b1:9c:58:80:1c:77:ed:ed:92:ea:1d:d6:
f4:69:f1:d2:e5:88:03:f3:1a:8b:ee:5e:8a:a7:cf:
eb:2f:1b:4d:5f:8d:39:13:0f:81:4a:84:4f:c2:e0:
28:5e:4e:04:78:a3:37:7c:89:8b:56:13:a4:e6:cd:
79:7c:a6:d4:7e:6a:b9:b4:f4:5c:9a:89:18:f9:01:
65:11:b5:70:39:10:51:ec:40:28:8e:ad:92:43:00:
1f:97:20:e0:e2:ba:8b:06:76:10:96:89:be:39:f2:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BA:8C:4D:99:FD:0D:3C:4B:D4:19:06:93:48:D4:F3:34:32:E5:79
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-bqMTZn9DTxL1BkGk0jU8zQy5Xk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.96.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:03:06:7b:92:0d:b0:8d:5f:75:c2:c5:d7:09:91:9d:86:89:
90:df:ee:69:7c:b1:49:92:e9:e9:79:fb:30:0a:da:96:1a:9d:
e0:f6:93:97:e9:6c:3a:e9:d5:7d:db:72:d8:aa:ae:a2:8c:31:
42:8d:33:25:41:81:98:f0:2a:c9:72:2c:b5:13:49:8f:32:af:
b0:08:72:1f:db:06:8a:3b:c4:8a:a8:b3:7b:d8:25:e1:13:d0:
e5:3e:21:65:34:87:2d:47:22:ce:bb:73:af:c5:c7:b6:32:81:
c1:b4:8a:be:8f:3b:27:a8:9f:7a:9c:96:4a:c4:d8:4d:98:ed:
29:0f:22:31:d1:20:5f:3c:f6:2d:43:15:1b:ae:d6:e2:9c:2b:
ee:33:4e:f6:35:5d:5a:9d:5f:54:82:14:b1:26:f6:a0:b2:90:
77:8f:39:9d:f3:e8:23:c9:6e:5c:7f:79:9b:81:ee:8f:7d:77:
69:02:32:30:34:f0:31:43:3d:a8:22:b6:79:47:ff:55:ba:ac:
95:68:8a:69:79:4e:3d:39:93:f0:0a:9b:38:61:3a:1f:b6:b6:
cb:21:38:12:c6:4b:3f:23:c8:e2:e9:cd:5f:e6:27:42:3d:64:
27:b5:6e:03:cc:33:c0:67:5d:0d:c6:5c:b1:72:2a:35:f5:56:
67:06:16:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org