Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1jysIZqu63w-neqBi_PM2XRGSkA.roa
File: 1jysIZqu63w-neqBi_PM2XRGSkA.roa (raw, json)
Hash identifier: W2PKRfLyNxmBSp+w9z3kCbZIDPYS2f91Uz08/mxZsEw=
Subject key identifier: D6:3C:AC:21:9A:AE:EB:7C:3E:9D:EA:81:8B:F3:CC:D9:74:46:4A:40
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0ABD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1jysIZqu63w-neqBi_PM2XRGSkA.roa
Signing time: Tue 29 Sep 2020 10:07:34 +0000
ROA not before: Tue 29 Sep 2020 10:07:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2749 (0xabd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:34 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D63CAC219AAEEB7C3E9DEA818BF3CCD974464A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:34:4c:3c:a4:4f:99:b3:67:8d:8e:a5:4c:
b5:e6:53:df:8a:a7:c0:f3:92:e2:e5:68:21:95:e3:
14:cb:dc:f0:18:a1:8c:d7:f6:08:07:a7:dd:13:4f:
2b:f8:1a:6b:df:6d:11:b3:a6:9b:1a:66:7e:b4:87:
85:7c:79:21:14:2b:f1:b7:7e:32:3d:96:dc:80:7a:
b4:00:50:e3:e6:a5:a7:d6:06:52:b2:c9:18:12:86:
b6:ad:ca:d3:5a:47:56:79:d6:28:25:ab:87:dc:86:
e2:44:72:69:43:8f:57:10:41:7e:41:8a:28:93:74:
1e:c9:a9:b4:0e:c3:25:8f:ef:c9:0f:a5:98:23:ee:
1d:ba:12:58:e4:4b:d5:7e:72:3b:b1:ef:81:34:8e:
14:dd:38:f0:39:54:d2:9c:fc:9c:11:2b:35:66:bb:
46:4b:1d:8d:77:48:e7:16:8b:ab:56:d5:8f:85:60:
64:49:a6:ef:13:11:cb:c2:a5:a8:8b:8c:a0:1b:d7:
1f:7d:f0:69:b6:a6:5d:1e:43:f3:5f:fb:47:2e:87:
54:1e:a8:25:12:78:eb:62:22:db:be:06:8a:8b:bd:
c6:78:49:be:c1:3c:3d:1d:ec:38:91:f9:8a:f0:2e:
76:e2:9c:b2:cb:a0:98:b8:e6:54:1a:1c:46:93:75:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3C:AC:21:9A:AE:EB:7C:3E:9D:EA:81:8B:F3:CC:D9:74:46:4A:40
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/1jysIZqu63w-neqBi_PM2XRGSkA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.147.0/24
Signature Algorithm: sha256WithRSAEncryption
85:48:72:5d:94:b3:00:29:19:63:8c:ef:03:d3:d0:a0:89:32:
04:2e:c7:8f:1f:4d:34:73:4d:08:20:db:6e:8e:f7:2b:9b:cb:
25:2a:d5:27:b6:33:0b:e7:6a:af:90:17:67:0c:b0:e5:50:40:
f3:8b:2f:9d:8a:f0:46:cb:47:21:0e:97:86:fe:8b:a3:ae:84:
1c:7d:ce:12:f1:d0:47:40:1d:d6:ac:dd:1f:57:28:42:e5:65:
1d:44:e6:c9:0e:b6:8b:3c:2b:7c:0f:61:41:4f:f4:26:6d:e0:
1d:06:61:04:a1:9c:5b:fa:f3:de:44:c7:82:72:16:77:ba:fa:
da:a3:fb:74:f1:ba:25:34:38:0f:05:e9:35:b9:dd:8e:4e:e1:
8b:14:18:30:5f:8e:55:52:8f:97:a9:1f:65:06:b2:00:29:cd:
b5:05:bf:a6:87:83:b3:aa:9b:20:3e:ce:b1:6b:51:f0:ad:36:
9e:75:95:ad:c0:82:97:8e:07:42:eb:32:17:34:a6:15:db:9e:
89:4d:48:83:08:03:b4:38:82:1a:9a:0c:e8:ae:10:5d:3f:0e:
54:5b:62:b1:dd:9e:ad:14:94:0c:75:be:04:cd:7b:e8:46:11:
13:0e:02:90:7e:e5:ee:f2:b9:b5:d7:cf:bc:4a:0a:a8:98:14:
7e:48:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:56:25 2025 by rpki-client