Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OEeqFw4eSW1joq0JfYRfg-8K7M.roa
File: 6OEeqFw4eSW1joq0JfYRfg-8K7M.roa (raw, json)
Hash identifier: GGwFNORjLd11tlFF5Dz5CZ/RFFXd9X0rW5x7qJ+Xtkc=
Subject key identifier: E8:E1:1E:A8:5C:38:79:25:B5:8E:8A:B4:25:F6:11:7E:0F:BC:2B:B3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AB7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OEeqFw4eSW1joq0JfYRfg-8K7M.roa
Signing time: Tue 29 Sep 2020 10:07:32 +0000
ROA not before: Tue 29 Sep 2020 10:07:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.158.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743 (0xab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E8E11EA85C387925B58E8AB425F6117E0FBC2BB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:1a:e3:46:f8:a4:85:9d:24:c3:4c:ec:4e:
a4:84:d0:70:9c:5f:e7:3d:02:e2:8d:b7:11:67:65:
b8:84:89:a9:8d:e2:fb:61:15:65:3d:c3:32:a6:1d:
3b:09:fe:87:5d:08:01:ef:9a:40:cb:16:00:3a:50:
1d:63:d8:5f:05:0b:a4:1f:99:68:d5:77:da:4d:07:
30:22:58:30:ea:c7:cb:f4:0c:cd:60:d1:03:fb:54:
73:d7:58:85:ed:8b:ae:ab:16:52:dd:09:8c:b6:b8:
fd:2c:f1:b2:78:23:53:73:ad:0e:6e:da:7e:e2:87:
ad:05:b3:3e:91:76:fa:cf:f7:02:cb:b0:16:2e:4f:
64:fb:a5:0c:63:81:2c:92:ff:b5:16:e5:bd:b5:5e:
a0:6a:73:03:a5:f6:b3:12:0b:7b:5e:39:8e:a9:36:
96:9d:8e:f2:d1:cf:ac:10:93:2e:07:4e:d5:c6:a4:
fd:f3:41:67:05:30:7a:d9:1d:db:82:2e:0f:34:e1:
40:30:d9:05:f5:7a:a7:12:ea:90:62:be:04:45:05:
bd:4e:a6:c1:46:23:31:3c:fa:1f:3f:c0:bb:ad:cd:
0f:30:9a:da:5b:73:b4:ef:8a:18:bc:00:c6:ca:d9:
04:80:90:4f:13:62:7e:e1:22:cc:5f:ef:ae:7a:4a:
81:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E1:1E:A8:5C:38:79:25:B5:8E:8A:B4:25:F6:11:7E:0F:BC:2B:B3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6OEeqFw4eSW1joq0JfYRfg-8K7M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.128.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:d7:8c:56:40:97:be:d6:66:ba:ca:c3:55:f2:8d:08:0b:b3:
f8:97:98:18:ef:4a:48:40:3a:fd:96:da:5b:bb:50:00:03:f1:
8a:8f:db:4c:0f:e9:2c:cb:5a:a9:77:67:ab:1d:10:68:db:7e:
8f:be:45:4d:eb:30:68:c0:e9:c0:e5:9f:71:d7:c5:87:88:c1:
5a:74:2e:cc:e5:46:b1:2d:b6:02:41:9c:30:70:be:5c:94:44:
4e:7f:f0:e5:be:bb:97:8f:37:f4:fa:df:a3:76:20:e4:b5:c1:
be:fc:88:21:f1:88:f2:52:a5:18:00:a3:15:70:dd:e8:78:ff:
56:2e:ee:7f:92:64:dd:2e:64:bb:be:11:8a:5d:00:5b:bf:ca:
eb:04:31:dc:2f:43:c0:ae:0e:f8:3e:78:36:7b:84:28:ee:1d:
ff:a7:81:20:94:28:43:f3:72:05:f9:3f:8d:6e:4c:ca:ce:e4:
9f:d7:00:80:32:b5:76:13:2d:c4:b3:b1:cc:13:f0:5f:79:21:
e2:35:0e:b3:e8:d9:54:a1:8e:25:f8:4a:42:c6:82:d0:ac:b5:
1f:53:fa:83:3a:89:4b:d1:cc:1a:a6:fc:7e:06:43:fd:3c:99:
ca:8b:c6:3e:57:c2:b4:2a:a6:11:71:f0:01:47:1d:b2:bb:18:
bd:3d:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org