Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0NCKxAouYoRm5QFbhhyazHs51oI.roa
File: 0NCKxAouYoRm5QFbhhyazHs51oI.roa (raw, json)
Hash identifier: dZGwpS0q28LxG/rwYNkyxnKmwDB/OiU/G3tMR9vWc1U=
Subject key identifier: D0:D0:8A:C4:0A:2E:62:84:66:E5:01:5B:86:1C:9A:CC:7B:39:D6:82
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0NCKxAouYoRm5QFbhhyazHs51oI.roa
Signing time: Thu 15 Sep 2022 02:35:53 +0000
ROA not before: Thu 15 Sep 2022 02:35:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.120.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D0D08AC40A2E628466E5015B861C9ACC7B39D682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:e3:40:c6:20:5e:ac:fa:a5:80:b1:90:af:
2b:91:6a:68:88:26:76:85:60:40:59:7a:7b:13:d8:
d3:10:98:5d:f8:30:b5:bb:39:62:b4:2e:bf:30:2b:
d8:da:24:6e:85:50:3c:b2:35:24:bd:3c:ff:23:7a:
6e:40:2e:b6:37:3d:2b:61:e4:82:21:d9:29:c0:06:
98:4b:1b:ed:36:d7:b7:a8:ff:87:23:f6:8d:d7:a1:
a4:63:67:da:65:8a:12:fd:c4:1b:28:92:77:07:ff:
a7:27:89:30:60:e4:7d:47:4e:38:22:f1:ac:08:6a:
59:0b:95:06:78:4c:d7:59:ae:03:fc:d4:79:40:f4:
2a:7e:4c:9d:8d:49:a3:75:c4:21:79:27:a0:d6:a9:
79:86:66:be:7d:a2:c2:f1:d6:95:b1:dc:1f:a6:2d:
45:29:ce:26:85:32:9e:bb:e8:22:71:81:04:be:e2:
1e:6b:12:a9:d0:6b:f2:26:d0:d5:d2:ad:65:44:78:
50:87:3a:7a:d7:35:d6:93:13:86:9e:aa:1e:cc:71:
49:e1:3e:ed:3f:47:78:b6:47:3c:51:41:43:b9:d5:
c5:9f:64:40:08:d1:cb:70:c9:88:d6:df:b8:6d:08:
06:12:13:b0:f3:90:75:4a:6d:fa:82:4c:16:4e:02:
e5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D0:8A:C4:0A:2E:62:84:66:E5:01:5B:86:1C:9A:CC:7B:39:D6:82
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0NCKxAouYoRm5QFbhhyazHs51oI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.120.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:7b:1b:7a:cd:c6:72:2a:ce:c6:83:3f:d9:47:b5:b8:3a:5c:
f9:38:dc:97:b1:4a:65:f9:53:3e:77:b5:c8:9e:e5:c2:ec:b8:
2f:49:4e:e3:bf:44:59:ef:24:41:1d:bd:8a:07:c1:14:30:24:
37:91:0c:4c:48:8c:1e:38:ae:6d:e1:ce:9a:ba:2b:3b:2f:d7:
b8:a7:a5:aa:fb:5c:88:1a:3f:a0:e2:ae:e5:4a:9a:97:b7:a0:
6b:b6:bc:05:08:b5:78:3e:ce:fc:9b:42:36:77:4a:76:80:f7:
b8:9a:cd:de:bd:a7:28:c8:de:44:78:6c:65:17:77:0f:20:60:
f0:65:03:b5:c9:36:08:82:c5:01:8a:0d:4d:ea:d0:e7:3f:b5:
51:ad:54:bc:82:51:9f:c1:4c:74:f7:21:44:af:f0:56:09:75:
db:68:f0:a4:7c:cc:d1:7a:a0:58:e8:56:93:22:be:62:1a:13:
5b:4e:e5:53:dc:12:38:a1:c0:0b:84:57:db:93:43:2f:8d:8e:
8b:bf:6f:b1:91:53:f6:1c:e4:ce:5a:b8:0b:37:b9:d9:f7:98:
c8:69:b0:e4:ef:f6:71:a2:a5:80:24:32:d6:2e:b6:13:1e:f5:
67:26:df:11:f1:20:b1:42:63:3b:05:c5:81:f9:9e:02:56:7f:
39:17:0e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org