Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B9xfbJxTROUqTs3H9ElJd2SKX4g.roa
File: B9xfbJxTROUqTs3H9ElJd2SKX4g.roa (raw, json)
Hash identifier: RhNDSDOH0Roe98S6dZNvtvT3z4eqtGhYRu9SewmoUzM=
Subject key identifier: 07:DC:5F:6C:9C:53:44:E5:2A:4E:CD:C7:F4:49:49:77:64:8A:5F:88
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 113D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B9xfbJxTROUqTs3H9ElJd2SKX4g.roa
Signing time: Sun 07 Feb 2021 13:14:34 +0000
ROA not before: Sun 07 Feb 2021 13:14:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.158.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4413 (0x113d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:14:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=07DC5F6C9C5344E52A4ECDC7F4494977648A5F88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:0a:a4:1f:e2:72:33:b9:ad:83:a0:da:90:
5c:ee:82:57:60:fd:dd:50:c2:e9:1b:6b:f5:f5:dd:
98:16:e1:b1:c2:1a:54:d4:52:c5:d8:a1:24:95:51:
86:46:f6:89:fd:f7:0b:3e:88:51:38:c6:05:11:53:
8a:02:2f:50:d0:43:8c:8e:ad:a4:2f:f8:4f:2a:97:
2c:0a:29:35:01:c2:c8:1f:dc:d8:84:4b:49:f4:bb:
23:6e:ed:b1:fa:a6:5e:f6:5a:bb:50:1e:55:95:2a:
03:63:95:61:32:ca:cb:3c:ad:d5:30:ba:28:9c:c7:
54:ff:76:64:28:83:82:3f:15:01:0e:d3:d8:88:86:
4e:15:1e:98:75:2e:b8:07:9b:41:68:44:7b:3c:5d:
75:0f:b4:7e:dd:25:7e:5e:fe:5b:4a:d5:c9:ce:15:
ef:66:36:8e:6a:b7:bf:89:f9:bb:77:a3:e1:db:0f:
51:2f:a8:85:33:d0:03:64:56:b4:7f:4b:d9:b7:e1:
39:d6:2d:56:31:65:4d:10:e8:a2:be:5c:49:b7:bf:
bb:a8:73:a5:13:f4:a6:b7:6a:b7:b9:42:a1:03:f5:
ba:a1:ff:79:e7:4b:6a:28:c5:db:0e:32:45:7e:ac:
6f:f8:75:87:bc:b4:dd:3f:45:a1:95:bd:c0:4d:4c:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DC:5F:6C:9C:53:44:E5:2A:4E:CD:C7:F4:49:49:77:64:8A:5F:88
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B9xfbJxTROUqTs3H9ElJd2SKX4g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.220.0/22
Signature Algorithm: sha256WithRSAEncryption
02:c5:1f:ad:00:49:d8:91:34:10:19:4b:93:a9:b6:c5:80:ad:
cc:1a:21:d8:59:a8:8a:06:ce:55:a0:a1:7b:09:f9:1e:40:71:
3e:fc:05:19:6c:72:16:8e:30:23:db:17:f0:16:c0:a8:10:b8:
8e:77:4c:f9:21:7d:f9:14:9e:e9:45:04:08:49:d8:89:91:09:
6e:e4:86:6d:b5:6f:88:df:20:29:1a:03:f5:7d:da:06:4d:e5:
5d:8c:24:57:67:09:dc:58:f8:03:f2:4e:2f:98:65:e5:46:a4:
78:9d:bc:35:26:58:dc:36:25:7a:4b:ea:2f:c1:14:34:01:c5:
cd:7b:d7:59:a6:d1:00:4c:70:ec:74:d2:49:d8:e8:2c:93:18:
4f:8b:09:82:1e:0f:61:44:b6:2e:d3:32:3c:ee:69:b2:55:0e:
42:bb:b4:96:07:36:9f:0b:30:b5:59:c1:8d:18:f8:a0:10:05:
02:27:a8:75:b4:f6:9d:70:62:ba:9f:c2:08:b9:b5:a2:e8:a5:
9f:cf:86:7e:d3:24:0d:2e:4c:1c:e6:99:63:18:89:a1:b9:cf:
f1:2a:41:4c:94:86:f4:dd:61:3e:c6:fd:3b:c1:b8:35:be:15:
61:15:dd:48:49:16:64:5d:2b:99:38:5e:f9:ea:86:74:2b:bb:
b2:20:70:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:46 2023 by rpki-client on console-fra.rpki-client.org