Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7nnRp2LXg21u7nay0wkDXjCOQpA.roa
File: 7nnRp2LXg21u7nay0wkDXjCOQpA.roa (raw, json)
Hash identifier: cMa43wiHsZv+HyRelisu0cQdTiJlf69DH1UrSxThE10=
Subject key identifier: EE:79:D1:A7:62:D7:83:6D:6E:EE:76:B2:D3:09:03:5E:30:8E:42:90
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7nnRp2LXg21u7nay0wkDXjCOQpA.roa
Signing time: Thu 15 Sep 2022 02:36:14 +0000
ROA not before: Thu 15 Sep 2022 02:36:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EE79D1A762D7836D6EEE76B2D309035E308E4290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:09:7f:68:9d:65:f0:86:73:52:8f:a0:11:
74:36:63:52:62:74:6c:6f:5e:21:a5:4b:b0:e0:ae:
f9:04:b8:ef:3c:56:75:a5:35:49:8d:ee:eb:88:ec:
de:e1:68:03:9f:3f:29:3f:47:f4:3c:4c:96:38:0a:
a5:f7:a9:3f:d5:f3:65:61:e4:d8:38:49:eb:5a:32:
10:d6:c4:b8:73:96:be:98:55:19:e9:df:14:cd:13:
66:ce:9d:8d:7b:8f:2a:7a:42:e4:d8:bb:82:08:27:
0e:42:59:74:73:bf:c9:71:69:8b:21:ae:98:d2:34:
1b:dd:0b:c4:e5:b0:fa:6e:64:ae:9f:4a:97:b9:6e:
32:54:92:19:ad:d9:c3:40:85:0d:08:01:3d:bb:e6:
97:42:ea:b9:37:11:5d:ce:72:6d:22:38:ec:8d:4b:
8c:e9:bc:c2:9d:dc:d8:db:4d:b4:38:42:c3:7b:08:
62:b6:1c:03:1a:d4:94:f3:69:cf:1b:17:29:69:ef:
2e:e9:48:07:5e:93:97:a2:1b:cf:75:54:c1:c7:a5:
13:1c:d2:6f:4c:96:c0:31:e2:de:d6:d3:f0:19:5a:
11:df:58:d4:ef:70:33:75:ad:c0:84:73:ce:bc:b2:
c7:fd:2b:9a:d9:ab:ce:ce:2a:73:42:93:77:d1:b1:
2d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:79:D1:A7:62:D7:83:6D:6E:EE:76:B2:D3:09:03:5E:30:8E:42:90
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7nnRp2LXg21u7nay0wkDXjCOQpA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.216.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:a2:05:f3:62:a7:23:e1:02:1c:06:75:54:c6:e2:e2:52:57:
f6:3f:45:49:69:f4:db:d5:0b:9a:e7:f5:93:3d:9a:51:44:2f:
d0:e9:1c:48:7a:91:6c:9f:ca:42:dd:c7:c9:25:7c:6f:37:0b:
44:8c:63:b0:14:bd:82:19:03:65:cc:c5:a3:a9:f8:47:ac:75:
c9:6f:7a:83:c3:77:ba:a8:39:11:03:02:c9:f0:af:5b:74:40:
e9:30:b2:28:33:61:fb:6f:b2:db:32:b2:f4:d1:0b:f6:e3:b9:
43:fc:01:f6:d4:d1:a3:c0:63:a6:a5:32:dd:53:ee:62:5e:d0:
4e:dc:17:69:19:71:c4:a2:0a:54:37:1a:51:e3:e6:e2:dd:39:
4b:90:01:e5:ed:28:0e:5e:d1:36:10:08:fe:44:f8:1b:ca:a0:
e4:ed:54:0d:b6:cb:08:49:ad:48:37:d5:9d:8f:82:32:41:3b:
a7:74:9c:03:9b:92:e1:4e:bf:75:95:c8:b0:9f:18:ac:eb:13:
16:c1:11:4a:d2:0f:35:74:dd:f1:1a:cc:27:fa:aa:3f:ba:6c:
28:76:4d:e8:48:0b:44:42:4e:0d:73:fe:76:52:45:18:62:e5:
8c:6b:0d:23:f8:73:a8:0d:b9:5b:fe:14:a8:09:4c:36:43:74:
d1:84:c6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:39 2025 by rpki-client