Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2k6pghsBP0NVttETLT_iVngNJHg.roa
File: 2k6pghsBP0NVttETLT_iVngNJHg.roa (raw, json)
Hash identifier: PxW6qVgHURVimlD3nA+iJwOCtZdq+3igBhorOKekTDA=
Subject key identifier: DA:4E:A9:82:1B:01:3F:43:55:B6:D1:13:2D:3F:E2:56:78:0D:24:78
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AF0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2k6pghsBP0NVttETLT_iVngNJHg.roa
Signing time: Tue 29 Sep 2020 10:07:48 +0000
ROA not before: Tue 29 Sep 2020 10:07:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2800 (0xaf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DA4EA9821B013F4355B6D1132D3FE256780D2478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:67:c5:ed:07:ca:c6:58:cc:fb:cf:6b:dd:b6:
a8:8e:28:11:31:17:ea:99:82:4f:c0:96:f8:57:07:
bb:24:ba:53:25:aa:64:e4:4b:85:e3:1b:f7:04:a1:
de:4f:11:12:52:87:7a:8c:c5:a6:46:a0:c5:70:ff:
eb:3d:9d:67:3f:bb:f6:73:e0:40:49:35:27:c2:4a:
96:9f:db:b9:24:b1:b3:21:05:fc:a6:c3:b3:a9:c3:
7a:99:6e:06:54:6b:39:e5:c3:2f:9d:83:d3:b5:35:
0a:e4:fb:de:2c:e5:7f:89:d0:27:f6:31:19:64:51:
0d:73:f4:4c:fc:b0:a9:be:22:b4:fc:80:74:78:aa:
ff:83:26:8e:60:0e:97:8e:ce:1e:bf:fa:3e:b9:08:
ef:96:79:ac:89:c7:0a:2e:bd:58:0c:06:aa:15:21:
a9:ae:4a:29:21:89:50:d5:2f:08:e9:c9:75:1d:49:
13:a9:e7:76:5a:98:ee:39:04:e7:74:79:9c:09:70:
3b:c5:41:f6:58:bf:a4:d9:fc:26:3f:37:6e:3c:ea:
e6:d6:36:24:40:5b:7c:48:ff:ce:f2:f6:0a:bc:54:
de:e7:df:11:ca:56:f0:04:68:23:9d:0f:80:f7:f6:
53:78:45:6f:f3:1b:8c:1f:ed:29:75:0c:8a:6f:a3:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4E:A9:82:1B:01:3F:43:55:B6:D1:13:2D:3F:E2:56:78:0D:24:78
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2k6pghsBP0NVttETLT_iVngNJHg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.80.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:b8:c4:2b:33:21:f0:a7:ad:08:c1:ed:07:21:bb:59:66:2f:
bb:a9:19:0a:0f:dd:53:21:6d:2f:96:6c:f5:67:88:bb:0f:c2:
0d:04:e4:9a:59:89:75:c9:63:47:64:27:f8:e1:ec:41:f6:a0:
b8:2e:83:2d:07:ed:4a:01:c6:ca:ba:ed:4b:c7:c5:d7:50:aa:
86:d5:8a:fb:e3:5a:ea:86:74:19:1c:1b:a8:da:8f:79:55:dd:
be:a3:5b:1d:f1:88:5b:d3:83:3e:97:8d:dc:67:9e:d2:3b:65:
95:47:1a:5a:fd:d1:bf:e5:39:37:44:8b:aa:4d:6e:b7:0b:da:
49:7a:fd:e3:b7:d1:08:d5:9b:b3:d8:09:72:3e:58:80:34:d0:
95:3b:c4:68:ef:72:08:6a:d5:9e:43:03:6b:eb:b3:ba:ac:09:
a4:8e:b7:ee:26:0c:27:b8:4f:fd:00:69:61:68:27:43:1c:25:
bc:af:41:d7:2a:c7:62:16:fe:df:11:bd:cf:3c:1d:c6:05:3b:
6f:b0:3c:a9:3a:ae:ec:b4:d0:4f:cf:d5:a0:eb:ff:c9:b4:9f:
b0:4f:68:f2:26:e3:41:6b:b0:d2:5c:65:2f:ee:fa:ce:6e:d9:
59:24:d2:f8:9c:5d:65:81:4f:f0:e7:9f:67:9b:30:f3:0f:b6:
9e:c9:00:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:50:09 2025 by rpki-client