Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AkkmRP4q3ZkM3sttww4myk0SxUM.roa
File: AkkmRP4q3ZkM3sttww4myk0SxUM.roa (raw, json)
Hash identifier: JCBAVgKBuri5plmPjbBm4hN3MtUB84oDMLRoFvnclsU=
Subject key identifier: 02:49:26:44:FE:2A:DD:99:0C:DE:CB:6D:C3:0E:26:CA:4D:12:C5:43
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1295
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AkkmRP4q3ZkM3sttww4myk0SxUM.roa
Signing time: Wed 29 Sep 2021 02:54:45 +0000
ROA not before: Wed 29 Sep 2021 02:54:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 49.158.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4757 (0x1295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=02492644FE2ADD990CDECB6DC30E26CA4D12C543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5e:0b:81:9f:25:48:c0:79:78:30:47:2c:9e:
f7:20:44:23:0d:ca:7f:34:30:f7:98:3b:2d:7f:6e:
12:1b:a2:1d:51:28:84:52:37:11:85:cb:13:69:ce:
8f:9b:45:d1:25:eb:1b:fc:32:88:f7:56:f3:55:86:
92:6a:01:13:b3:7a:9f:fb:0a:e6:d3:7d:3b:c8:41:
88:29:52:98:32:9c:37:bf:5c:31:d0:ba:e0:2c:92:
18:bf:72:77:5b:92:45:4d:67:ab:0a:6b:e6:20:86:
76:a8:0f:49:20:37:2d:98:cd:da:e1:ab:24:04:cf:
89:2c:c9:bf:9b:a2:01:2c:e1:39:ca:c6:d5:31:c6:
64:0b:d3:48:bc:1f:cf:5e:70:70:63:4e:e4:5e:1e:
6d:54:b5:1a:39:a1:f3:63:63:fe:da:35:8b:b4:83:
11:14:30:78:6b:45:86:28:38:96:27:48:dd:03:d3:
de:6c:ae:22:fc:42:79:06:b7:8e:2b:a6:7b:33:ae:
b8:96:2e:bb:df:39:49:d2:c7:96:ad:53:43:ac:cb:
43:15:a6:bf:80:d1:c9:fc:83:af:a7:63:15:74:70:
76:ea:b6:c6:6c:02:b9:93:17:6a:c6:13:fc:ba:d5:
c8:4c:0d:e0:6c:33:3f:48:5c:d9:f2:9c:a8:79:ae:
c1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:49:26:44:FE:2A:DD:99:0C:DE:CB:6D:C3:0E:26:CA:4D:12:C5:43
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AkkmRP4q3ZkM3sttww4myk0SxUM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:2c:9c:31:ca:52:f5:ce:1f:ce:2c:00:61:22:5e:af:84:3d:
98:8e:64:ff:f3:48:47:86:cb:cf:c7:8d:5d:68:4e:fe:31:c6:
17:fc:2e:e1:45:d9:8d:ca:28:5b:f7:61:f4:01:40:31:0e:32:
8d:96:58:ee:df:d4:a5:7a:ac:c8:49:8b:75:f4:4c:55:bb:c2:
4e:f1:1b:65:68:3b:79:71:31:2e:27:e2:19:d8:28:ab:58:b8:
4d:f7:b8:4a:68:4b:25:b5:eb:3b:b3:76:4b:ee:8f:92:2c:bc:
3a:ea:81:ac:5c:08:2d:20:17:0c:94:3e:f5:53:17:11:5d:e8:
91:8b:3b:83:1a:62:d2:02:61:64:83:eb:91:e0:00:42:60:23:
9d:f5:10:3f:2c:13:a8:be:f1:5b:e7:bc:38:ee:cd:fd:a3:bb:
c9:62:1a:88:1d:cd:79:17:62:7a:5e:eb:88:79:8c:6e:d0:e6:
dd:34:b5:c5:96:c4:5a:e1:02:d2:e5:84:c6:22:4a:24:b6:fc:
37:7b:79:25:6e:7f:a8:39:bf:58:8f:14:85:d9:e3:dd:02:f8:
64:42:2f:44:de:b2:95:a9:be:74:5c:7b:76:1d:f1:69:84:e4:
c0:ca:26:b3:2b:72:bb:ff:9b:ba:d5:d4:27:86:6b:53:12:d0:
12:75:29:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org