Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9ZID_8iJ_Eujp3Nd3srtvfMzXH4.roa
File: 9ZID_8iJ_Eujp3Nd3srtvfMzXH4.roa (raw, json)
Hash identifier: JqqOcl52O9SpoR2AobRy2INp4KGDNxh+fwBb9AWvMYI=
Subject key identifier: F5:92:03:FF:C8:89:FC:4B:A3:A7:73:5D:DE:CA:ED:BD:F3:33:5C:7E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AD9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9ZID_8iJ_Eujp3Nd3srtvfMzXH4.roa
Signing time: Tue 29 Sep 2020 10:07:42 +0000
ROA not before: Tue 29 Sep 2020 10:07:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2777 (0xad9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F59203FFC889FC4BA3A7735DDECAEDBDF3335C7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:ad:2d:33:a8:ac:f9:3f:3d:a0:bf:d1:11:
49:c6:f8:01:28:62:45:88:5a:b3:c1:e4:68:65:06:
26:7f:94:6e:ac:97:e3:4b:42:37:88:84:a5:b8:e1:
09:0a:60:64:12:ec:c8:a4:ed:c8:79:f8:33:26:61:
01:03:75:4f:17:14:b2:17:8c:ad:b1:58:98:c5:c6:
95:39:19:ac:6e:83:49:82:dc:fd:f2:0a:25:09:7f:
3d:1a:9f:b9:a8:fe:84:2c:83:75:cf:63:b6:df:6a:
65:62:ca:2a:d5:8c:3e:33:0e:44:2c:d9:ff:a1:87:
97:79:8d:ac:27:24:0d:0d:57:ad:ba:11:50:a3:02:
64:f3:49:19:f6:ae:bd:30:06:cb:12:11:6a:01:f1:
92:00:8d:4d:b7:9b:b4:72:57:e8:eb:d5:0a:a7:74:
57:89:bc:67:7c:f9:5f:68:97:19:8c:36:d3:e5:be:
2a:6a:1d:c3:d5:4c:15:ce:2d:f8:35:57:a1:05:98:
cb:11:20:7f:fe:31:7b:ee:c3:0d:a6:b9:26:f3:2e:
13:3e:d5:24:5f:35:84:3b:eb:68:59:1b:b1:02:7e:
e7:98:0f:2a:e6:b5:a5:e0:11:f9:91:3a:66:82:f1:
f1:96:81:e3:b7:84:93:aa:f3:47:1e:34:60:6d:cd:
ed:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:92:03:FF:C8:89:FC:4B:A3:A7:73:5D:DE:CA:ED:BD:F3:33:5C:7E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9ZID_8iJ_Eujp3Nd3srtvfMzXH4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.16.0/20
Signature Algorithm: sha256WithRSAEncryption
2c:ad:0b:a6:e7:96:3f:c1:24:d5:78:76:e9:d1:96:51:90:42:
33:27:dd:43:15:07:27:29:2c:00:e9:7a:ca:8b:f5:df:ad:0d:
de:04:84:27:ac:7f:af:b4:af:92:d6:6a:58:87:43:36:a3:3e:
2d:c7:9b:dc:28:35:a8:24:a0:8f:ce:33:e4:65:f9:eb:06:b1:
52:b2:9f:b9:8f:3c:1a:b8:a7:c6:be:fb:f5:21:bf:93:96:36:
43:80:a5:91:86:b9:a0:d2:0b:8c:b7:a6:65:e7:3c:60:e1:c6:
cb:cb:d7:ec:1f:1f:59:8c:d9:6e:a1:96:42:4e:64:c5:43:fc:
50:23:8c:e5:b0:88:60:06:cc:13:7b:bd:b3:9c:d8:33:5e:a6:
99:a8:3a:54:b2:4a:14:d8:d0:f9:1a:ca:8c:c7:92:f6:19:9d:
a2:02:11:6a:a6:31:50:d8:c8:53:48:33:62:9d:d0:9e:8d:f2:
24:9c:1f:6b:0b:fd:eb:a9:e5:e4:86:46:b9:32:1e:0a:79:56:
4f:e6:0a:98:53:af:9d:af:d7:0c:83:0c:ae:22:3e:74:df:75:
04:51:cf:4c:97:0d:18:cb:fd:16:80:43:2f:db:08:71:29:9e:
2d:7a:51:82:36:72:6e:92:a0:d2:dc:42:0a:db:65:a9:12:57:
70:9e:9c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org