Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AUet51QmQ0hR9zE7--TOr03Rip4.roa
File: AUet51QmQ0hR9zE7--TOr03Rip4.roa (raw, json)
Hash identifier: F4qwArn4aPngYXMX3g7t5HmBbdIzkjzeyKB8jhvOGxE=
Subject key identifier: 01:47:AD:E7:54:26:43:48:51:F7:31:3B:FB:E4:CE:AF:4D:D1:8A:9E
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AB1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AUet51QmQ0hR9zE7--TOr03Rip4.roa
Signing time: Tue 29 Sep 2020 10:07:30 +0000
ROA not before: Tue 29 Sep 2020 10:07:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 45.64.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2737 (0xab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:30 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0147ADE75426434851F7313BFBE4CEAF4DD18A9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e4:49:10:e3:d6:0a:53:41:f8:1c:e0:41:79:
e1:58:98:cd:15:37:f5:d2:f8:64:7b:ba:da:c3:1d:
df:ff:ea:ad:06:40:e1:39:fe:8e:e4:b3:e3:44:85:
2b:3f:e3:39:aa:11:97:e1:dd:81:9f:ad:95:cd:e7:
64:f8:8f:1b:9f:78:43:43:fe:2f:40:b4:cc:43:b2:
31:69:5e:82:02:4d:89:85:f1:a3:63:f4:b4:4e:fd:
83:ae:9b:8b:19:59:a6:57:c0:b3:5b:d1:96:e7:df:
40:d9:17:57:2c:e4:38:8e:a1:b4:71:76:15:d1:28:
e7:bd:ad:0c:20:77:29:43:7e:d4:67:20:94:4a:43:
65:6d:8f:26:95:45:9c:38:ef:5e:bf:66:82:2d:1d:
9b:2b:74:32:89:dd:6e:2f:f3:3a:f8:8b:83:85:39:
d8:06:22:36:fd:06:30:ea:17:96:50:73:77:1b:7d:
22:88:4a:eb:8c:7f:84:89:fd:5a:5e:3b:54:7f:8e:
0b:1f:84:e9:22:66:63:15:87:cd:76:ac:a3:33:48:
f6:2d:5c:f3:27:96:a7:e1:56:3d:89:7e:68:bc:1b:
76:27:72:04:79:bd:1f:33:f1:62:58:fe:a9:29:ae:
65:ea:0b:f1:33:2f:f7:e7:09:3c:e7:8d:39:c2:b9:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:47:AD:E7:54:26:43:48:51:F7:31:3B:FB:E4:CE:AF:4D:D1:8A:9E
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AUet51QmQ0hR9zE7--TOr03Rip4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.34.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c3:a8:ea:ea:0c:6b:fb:d9:86:8f:19:85:19:7c:66:b9:9b:
3f:4b:6f:d5:ec:c4:71:b3:75:82:95:7d:f4:26:66:a1:7e:25:
c9:f3:12:62:fd:d1:80:06:04:ea:3c:ab:39:a6:83:11:77:4d:
82:3d:6d:9c:87:7b:27:15:49:ce:7f:2e:ad:44:6f:a5:1a:00:
05:0f:73:54:7e:e8:4b:4b:29:7f:ac:85:2c:64:22:67:55:bc:
5f:28:24:50:35:a8:f8:0d:86:b8:a4:8e:bb:d3:f1:52:a8:1c:
2f:da:63:f1:3f:10:6a:45:68:86:60:0f:92:cb:a3:f1:53:8b:
40:7f:ab:a7:5a:b0:ef:de:37:58:2f:f9:95:4f:a7:0f:87:31:
cc:a7:04:a0:23:fb:fd:33:3a:bd:f0:5a:cc:73:b1:bc:09:05:
d7:e0:a0:2b:3c:18:75:ea:68:b3:01:05:7f:04:03:94:9e:27:
9f:44:98:05:3d:ce:2d:8e:53:9c:c6:75:85:ea:18:74:32:20:
23:c7:48:5c:c1:fc:db:f1:41:41:d7:72:de:f0:b0:d5:de:67:
ef:d0:21:90:5d:7e:82:01:2c:57:74:c4:ec:33:00:11:ca:3d:
29:4c:01:ba:dd:84:68:f8:48:36:31:0f:43:83:67:ab:85:24:
47:c5:5c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org