Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9wpVaGgjXV2I4I13dGL63F4UNrw.roa
File: 9wpVaGgjXV2I4I13dGL63F4UNrw.roa (raw, json)
Hash identifier: W2i1R1Univ6GjkbHrLDivUMwKrRUj6LhbwKNpmhFqYU=
Subject key identifier: F7:0A:55:68:68:23:5D:5D:88:E0:8D:77:74:62:FA:DC:5E:14:36:BC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9wpVaGgjXV2I4I13dGL63F4UNrw.roa
Signing time: Thu 15 Sep 2022 02:35:41 +0000
ROA not before: Thu 15 Sep 2022 02:35:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F70A556868235D5D88E08D777462FADC5E1436BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ce:de:d1:e4:70:b7:00:77:9d:54:ae:41:4a:
e9:7a:f0:40:e2:f4:47:2c:30:e3:0a:b2:c5:00:d4:
f0:ba:77:7c:69:87:17:ef:54:13:16:08:41:2f:6a:
9b:67:38:23:5d:0c:77:5f:33:ca:1b:81:52:c4:c4:
a7:ed:1a:59:07:3b:6b:ca:49:bf:6f:9e:b5:38:23:
fd:7a:c9:7d:4e:37:5e:4f:f7:5a:43:ef:4c:b0:06:
53:af:9f:10:0f:0f:9e:7a:2b:ae:8b:ec:af:b4:ed:
35:bd:85:45:f7:12:91:ae:ce:62:df:e2:93:cb:b5:
11:7f:44:71:87:16:52:f2:4d:6c:86:83:ee:6b:50:
32:58:aa:2c:e9:c5:6b:a4:19:e2:f0:8d:db:41:c1:
53:4b:e3:f0:8f:f5:aa:3b:7a:2f:bc:15:2c:57:f3:
e1:ed:c6:21:ec:0c:c3:c4:8f:35:12:b3:09:0f:0a:
a3:6e:3b:a7:66:6c:b6:6d:6b:d2:af:6d:bd:e6:04:
ac:b6:dd:49:a0:00:19:ea:3f:c6:11:5b:fc:48:8b:
62:ec:32:84:20:31:56:6f:e7:37:16:a8:5a:10:c1:
fc:bc:c3:52:e7:bb:6b:f9:c6:f7:3a:dd:d6:9f:8b:
b6:d2:50:60:14:a4:09:72:1c:ee:3d:d8:84:af:62:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0A:55:68:68:23:5D:5D:88:E0:8D:77:74:62:FA:DC:5E:14:36:BC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9wpVaGgjXV2I4I13dGL63F4UNrw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.56.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:b3:7b:35:57:2f:0c:bc:ad:40:6b:7a:58:b2:1c:ea:35:47:
8f:5f:22:ce:9a:77:c7:f1:55:5c:4f:47:ed:2b:9c:dc:ce:a4:
97:35:95:b2:b5:e0:9b:5f:48:20:a6:38:9e:11:16:07:43:31:
a0:12:f3:e8:de:90:15:d3:bf:bb:61:d9:b2:79:da:39:b1:2a:
97:be:6a:c9:41:9f:5c:c3:71:13:2f:a1:e4:fb:39:53:c4:0c:
05:06:d2:33:0d:0b:64:6b:65:01:fd:ea:51:af:8f:62:0f:1f:
c5:96:e2:85:1d:7f:b5:e7:b7:d5:f5:0b:2e:6b:10:fa:7a:1e:
b9:97:4d:f6:af:b3:f0:ac:8e:3b:1e:db:26:11:4d:6b:47:c6:
5e:d9:c1:78:51:82:8b:7d:1d:69:01:51:58:a6:20:4d:82:62:
dd:af:45:7e:22:0f:10:b9:80:88:1e:0c:3d:0c:bb:ca:02:46:
62:b7:88:15:65:35:83:41:38:b8:da:03:03:cd:4c:cb:98:69:
b3:4f:bf:76:ad:77:96:e6:c2:f1:4e:80:76:56:0a:01:a0:47:
35:14:c4:c8:84:07:c0:f2:88:bb:d8:e4:90:12:61:2a:35:15:
4b:d5:44:94:da:7d:78:4c:30:18:de:87:dd:29:52:e7:dc:b2:
27:70:11:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org