Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7oEI6UCkNL96KAlsi1mVa2I1xV0.roa
File: 7oEI6UCkNL96KAlsi1mVa2I1xV0.roa (raw, json)
Hash identifier: KXgSDJ3ik1Kpm1rLB97YGry+q1NvRC8aPfcWqFfzxM0=
Subject key identifier: EE:81:08:E9:40:A4:34:BF:7A:28:09:6C:8B:59:95:6B:62:35:C5:5D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19A6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7oEI6UCkNL96KAlsi1mVa2I1xV0.roa
Signing time: Sat 22 Oct 2022 06:07:26 +0000
ROA not before: Sat 22 Oct 2022 06:07:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6566 (0x19a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:07:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EE8108E940A434BF7A28096C8B59956B6235C55D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:17:f4:d6:04:19:a4:b4:7e:b3:55:a2:45:66:
6f:e3:d9:ec:9e:c7:90:c9:81:64:a2:c9:65:63:b6:
1d:98:09:86:3b:0b:7f:0e:a6:51:69:1e:3f:43:dd:
db:9c:96:f5:71:e1:31:ef:cc:a3:79:68:58:2e:01:
78:41:70:ed:bd:bc:87:51:44:7d:80:a2:28:ac:aa:
3a:ac:80:4b:39:ba:15:2d:b6:39:c0:f7:75:7b:05:
8a:b6:28:ec:3b:57:e9:0f:72:18:c6:0a:fd:af:13:
9d:f4:5b:ba:eb:19:36:50:52:f8:17:98:45:cd:31:
0d:90:1c:ca:47:77:48:e9:15:48:2a:cc:ba:9a:86:
42:35:e8:54:77:cf:e4:bd:4b:5b:77:bb:bd:bc:d2:
20:58:10:ca:56:23:92:07:1d:18:11:ff:66:06:1c:
04:72:07:d7:92:b3:ca:f3:ce:8d:1f:06:c4:70:0f:
6e:63:90:c1:3d:99:7a:75:27:2b:6b:64:3d:e5:6d:
00:f8:13:e1:36:4c:d3:a2:35:d6:d2:69:ff:84:b2:
0f:f3:c7:3f:0d:78:79:c0:d4:81:6a:00:87:5d:26:
07:e7:30:aa:f2:ce:6c:16:45:11:dd:aa:21:02:92:
03:93:73:9f:b6:c5:0a:fa:22:ab:e1:d2:da:39:cc:
b3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:81:08:E9:40:A4:34:BF:7A:28:09:6C:8B:59:95:6B:62:35:C5:5D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7oEI6UCkNL96KAlsi1mVa2I1xV0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.160.0/21
Signature Algorithm: sha256WithRSAEncryption
83:df:58:ce:6a:2d:98:28:a7:24:23:1e:bc:4d:dc:3b:c3:75:
4e:db:2a:01:7b:86:7a:51:34:01:4f:f2:1a:78:76:89:b5:c2:
76:94:47:aa:2d:01:5e:37:9b:7c:38:08:72:53:00:15:2c:e0:
6e:86:c0:4b:07:e8:2d:e6:b3:4b:79:b3:38:f6:31:e2:70:c7:
2d:92:b9:75:45:c4:64:15:c0:e6:3d:2b:26:da:c8:83:e9:bc:
75:2b:24:88:00:97:4f:6f:0f:05:6e:6a:74:43:13:c2:48:d4:
b7:f2:f8:4d:90:82:3c:2c:95:47:f7:96:cb:1b:d3:f3:61:f3:
78:dd:a2:8c:b6:f2:80:47:0b:a6:dd:46:1e:ca:c7:e4:98:d4:
5c:18:94:26:8e:20:5f:95:31:02:15:73:98:d4:a3:4a:76:b4:
91:ff:c9:83:1e:2b:3f:d9:ff:6c:87:6d:10:62:8a:97:22:c2:
3f:e1:b0:59:80:4e:7c:86:95:d2:b4:39:78:19:e9:c8:de:c6:
ba:a8:e1:9f:cf:90:67:fd:6f:d9:55:ce:1d:fa:d1:1e:74:02:
fd:be:87:8d:92:a7:07:20:cb:16:af:ab:3e:78:6d:8b:97:68:
fd:23:01:14:6d:65:61:f3:7f:97:d2:b2:ee:80:14:33:3b:e4:
c9:bf:f6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org