Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7sgXDEvbvmeu-1fcR4jAacNvlA4.roa
File: 7sgXDEvbvmeu-1fcR4jAacNvlA4.roa (raw, json)
Hash identifier: RcmxVEiRjl9PsrO+reZt8W/qn9ejYdMi4rSYByXhx+Y=
Subject key identifier: EE:C8:17:0C:4B:DB:BE:67:AE:FB:57:DC:47:88:C0:69:C3:6F:94:0E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7sgXDEvbvmeu-1fcR4jAacNvlA4.roa
Signing time: Thu 15 Sep 2022 02:36:14 +0000
ROA not before: Thu 15 Sep 2022 02:36:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EEC8170C4BDBBE67AEFB57DC4788C069C36F940E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:8c:f2:85:a9:90:7f:ca:84:aa:04:e4:5c:
d3:be:70:0b:01:7b:a4:fb:e4:c2:31:6d:4a:57:cd:
fa:3f:81:77:1e:64:19:95:3e:a8:3a:22:ef:03:be:
e3:2e:52:7e:cf:1a:c5:f1:bc:c5:1d:3f:fe:b2:67:
23:4c:38:3a:54:93:ae:ca:f5:a7:37:27:80:63:1e:
1e:45:ce:69:85:9c:83:77:d1:f8:ac:29:e9:48:44:
13:fc:25:81:e0:ff:f1:7d:2f:63:9e:53:c8:3c:98:
92:41:24:45:cc:90:15:51:41:87:43:e2:d1:04:30:
c8:d1:2e:7a:cf:13:a8:20:4f:31:4e:c4:92:19:41:
df:1c:43:d5:f9:83:07:af:61:15:f7:ec:6c:2b:1c:
41:33:3e:a0:96:cd:4f:f7:bc:92:cd:de:6d:ad:28:
96:5a:60:ba:0e:16:b2:18:25:3b:79:c9:12:43:32:
94:26:62:4b:2c:f9:88:40:0f:76:e1:cc:7c:6f:65:
d4:97:80:16:29:de:78:ff:33:ab:58:af:c7:ba:fe:
5a:f1:ab:b1:70:24:d9:c6:62:7c:f4:3a:9b:c2:0c:
91:98:f1:fa:1f:1a:86:0d:37:2d:1a:f7:9d:85:b5:
0d:af:60:85:d0:18:16:4e:9e:85:38:c4:49:25:f4:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C8:17:0C:4B:DB:BE:67:AE:FB:57:DC:47:88:C0:69:C3:6F:94:0E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/7sgXDEvbvmeu-1fcR4jAacNvlA4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.100.0/22
Signature Algorithm: sha256WithRSAEncryption
65:69:9d:c9:13:12:c3:9e:ac:78:8b:89:e4:22:62:75:ab:1c:
be:06:b2:0c:69:fe:0c:ad:7c:74:88:78:b8:1c:90:07:31:55:
99:2a:37:d7:3c:ee:68:d3:58:d0:2d:e9:61:da:08:b7:6a:b5:
d1:eb:96:ab:1d:e1:cb:43:e1:19:d1:83:ad:9d:b8:55:76:1b:
a8:f4:74:64:7c:0e:72:0e:0b:a8:e7:d1:3e:6f:e4:5a:87:a6:
d7:49:f3:1e:60:c6:ae:92:e3:56:83:99:23:0d:52:1f:36:52:
1d:63:bd:06:d3:b7:5b:01:9e:19:23:ef:bb:47:1b:e0:e5:0d:
3f:7d:ca:f5:fe:39:bd:ed:4e:e2:4e:d8:25:49:16:bf:d6:bf:
a5:f2:2f:e1:ee:42:08:38:11:0d:d9:73:fd:c8:85:6d:84:02:
a6:d9:48:25:eb:99:51:dd:f4:d5:bb:c6:59:4d:c4:d5:74:7a:
09:a7:e7:5b:50:62:e9:8b:bf:3a:5d:f7:cd:fb:7b:a1:f5:8a:
41:a5:37:45:b8:7d:f9:ea:9a:a9:c2:c6:3a:0a:9c:6f:36:59:
22:98:ee:ea:64:0b:eb:38:32:68:f5:1d:39:a5:91:70:8e:fa:
a1:66:55:f4:e1:36:26:f3:7b:f4:bd:fb:ab:d5:66:ef:01:77:
93:1d:5f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org