Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9aP_BRxdPPuxS-VuAVdRHjdWJ4M.roa
File: 9aP_BRxdPPuxS-VuAVdRHjdWJ4M.roa (raw, json)
Hash identifier: gyvjMeqm1ehr0vFcQg7dt+Zew1GMMn9YU7+L7MUPb4s=
Subject key identifier: F5:A3:FF:05:1C:5D:3C:FB:B1:4B:E5:6E:01:57:51:1E:37:56:27:83
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1230
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9aP_BRxdPPuxS-VuAVdRHjdWJ4M.roa
Signing time: Wed 29 Sep 2021 02:54:18 +0000
ROA not before: Wed 29 Sep 2021 02:54:18 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4656 (0x1230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:18 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F5A3FF051C5D3CFBB14BE56E0157511E37562783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:10:52:ed:11:14:67:12:ac:1e:c2:93:f3:
8a:3a:b1:15:01:f5:06:0d:21:22:8e:fb:4b:65:b8:
93:41:b7:27:4e:90:c4:d1:ae:fa:6b:32:ff:aa:f7:
37:2d:ea:40:62:48:80:4c:da:63:71:ff:ca:3c:5c:
a5:5c:95:97:a7:96:f9:44:dd:4f:13:94:77:83:9c:
e1:79:42:fb:f2:65:84:25:b1:4f:fb:c3:a0:55:b1:
69:d6:42:05:ee:af:5a:5e:a5:08:c3:40:46:29:2c:
46:fd:bb:72:8e:77:9d:9a:fb:4e:01:48:eb:f3:3b:
35:74:94:8d:ca:da:c3:75:c7:d0:89:09:d7:bb:d7:
a2:f5:cf:eb:9a:f4:58:1e:a9:47:f2:5c:1d:77:06:
01:cf:2a:6b:79:7a:b9:8f:9c:8b:7b:e9:1d:05:fe:
24:d1:9b:0c:f1:72:2d:8a:b1:0d:3c:62:60:e7:8d:
dc:bf:fa:ea:86:a5:0f:1a:a7:93:04:da:84:f7:da:
da:a4:c6:df:dd:f6:43:bd:a4:36:26:40:c8:cc:51:
d2:db:cf:c4:96:53:7b:1f:6d:d5:4c:85:28:f4:43:
f3:cf:2b:52:63:98:9c:99:1e:5a:d7:8b:5f:88:c3:
79:f1:cd:59:26:de:07:1f:90:7e:36:e7:bc:da:18:
db:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A3:FF:05:1C:5D:3C:FB:B1:4B:E5:6E:01:57:51:1E:37:56:27:83
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9aP_BRxdPPuxS-VuAVdRHjdWJ4M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.60.0/24
Signature Algorithm: sha256WithRSAEncryption
68:76:2b:21:18:86:e1:7a:7d:aa:65:78:c1:5c:d3:ad:78:be:
54:cb:d9:fc:11:72:17:5d:18:fa:6a:9f:f2:5c:42:d4:22:00:
e5:bb:88:7f:56:f8:99:75:f3:08:b5:3e:11:70:5b:b1:a7:e3:
06:d3:ff:76:48:35:36:b3:be:bc:33:12:12:58:1a:8f:0a:f1:
4a:03:83:da:d5:2b:72:dc:06:69:f2:b9:81:bd:cd:99:fa:74:
53:11:07:4c:68:a5:53:91:3c:8f:80:85:eb:84:16:15:c4:cf:
48:36:8f:7b:6e:d3:e4:5b:be:f3:58:e3:82:61:f3:db:1a:fc:
85:44:78:ce:12:32:b2:bf:17:35:76:e3:3c:a2:4e:c1:64:1a:
77:a0:dc:7d:d9:57:15:5c:b9:ad:7b:8f:40:3d:40:c4:5d:80:
da:80:21:ac:ca:26:91:7c:78:a9:8a:a3:cd:db:b7:21:3a:aa:
af:f2:14:94:d0:db:41:3b:61:4c:cd:97:07:d0:3e:4c:d5:ff:
4c:0c:11:05:67:1b:27:34:df:77:47:c5:43:f7:9b:f3:dc:6d:
29:d5:e6:6e:8d:4a:67:08:f3:24:1b:3d:aa:ee:72:16:f1:e9:
e3:e1:34:be:2c:93:a6:78:d0:28:26:18:8d:c0:79:0f:f1:2f:
b4:6a:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org