Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/C2uEcZfp2OFAQ3_oT7O6i06SXos.roa
File: C2uEcZfp2OFAQ3_oT7O6i06SXos.roa (raw, json)
Hash identifier: Rz4ixOP+MgFUzqZXw6WzTULpBXiYcGphli9hpRRbGgY=
Subject key identifier: 0B:6B:84:71:97:E9:D8:E1:40:43:7F:E8:4F:B3:BA:8B:4E:92:5E:8B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FB7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/C2uEcZfp2OFAQ3_oT7O6i06SXos.roa
Signing time: Sun 07 Feb 2021 12:35:43 +0000
ROA not before: Sun 07 Feb 2021 12:35:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 49.158.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4023 (0xfb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:35:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0B6B847197E9D8E140437FE84FB3BA8B4E925E8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:98:92:ba:43:62:53:67:95:e1:c3:f3:82:da:
ee:ab:ff:98:75:fe:ea:4e:e6:ff:8e:97:c4:bf:58:
7a:ae:a3:fd:a8:a9:dd:d4:f0:4b:44:83:41:7a:60:
7f:ef:c6:61:03:f7:1d:88:9f:de:57:b2:b6:91:36:
07:24:b9:82:49:77:31:cb:b0:6b:03:34:d8:ad:79:
05:80:28:59:d8:cb:e4:d3:f1:bc:d8:e2:08:2a:b6:
16:10:1a:9c:2d:97:fd:28:f6:87:51:aa:df:05:dc:
b2:5c:ad:88:03:42:bb:e9:06:23:d2:77:d9:40:84:
a8:79:a2:3f:68:64:a9:68:bd:67:81:24:db:24:6d:
90:49:0d:16:e0:13:d7:29:1c:0e:60:91:13:ec:36:
c3:83:12:92:c2:21:fd:cb:72:63:03:05:bb:a6:d6:
c2:70:be:77:86:8a:4c:8f:38:68:00:ad:6b:b6:ba:
72:56:d7:e1:8f:c6:fe:ce:a9:b1:4b:cc:e4:c4:7e:
ac:59:f7:7f:60:b4:30:79:54:02:37:33:13:0b:64:
cf:ff:fb:d5:dd:53:1e:97:61:d3:92:08:27:7e:9e:
ac:17:6f:e7:27:c2:3e:b5:2e:9e:42:50:92:88:8e:
42:ca:72:43:26:e2:0f:d5:a0:5d:4c:5d:44:18:d7:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6B:84:71:97:E9:D8:E1:40:43:7F:E8:4F:B3:BA:8B:4E:92:5E:8B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/C2uEcZfp2OFAQ3_oT7O6i06SXos.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.152.0/22
Signature Algorithm: sha256WithRSAEncryption
05:7d:2b:16:9f:ed:f1:82:87:b8:82:fc:35:70:bd:59:c8:37:
dc:66:04:9e:f3:a3:c0:17:34:6c:8b:ec:60:c6:b7:43:91:e4:
e9:e3:d6:67:a1:03:ab:ab:42:f5:c2:88:f7:78:e2:2c:2a:fc:
9c:10:10:a8:ed:70:6e:7e:ce:1c:8f:de:8c:54:76:7e:b1:ac:
1f:44:41:d1:63:8c:db:73:d2:59:1e:ca:39:fe:74:1c:d3:76:
9b:e7:1e:be:f0:c9:e4:e0:44:9a:da:d2:1e:f3:7a:0d:f6:a2:
6f:7a:b6:0b:1c:86:98:9c:94:f3:35:d0:a1:09:cc:10:e6:69:
2f:2b:01:e6:1f:0b:c8:9d:68:b9:d3:6d:b0:68:d8:f4:bc:e0:
d1:37:67:35:c9:78:4c:51:a8:3b:83:d2:de:e2:7d:3f:5e:ce:
45:69:db:ad:08:c6:c0:49:ae:62:a5:32:f0:64:53:ce:82:cc:
05:e7:de:9d:e4:dc:b7:6a:49:92:ec:ec:78:cd:3a:d7:99:c5:
3f:34:b2:05:31:ef:66:24:6f:40:99:2a:39:7b:15:ba:3b:97:
46:c1:f2:1c:a7:d4:5e:f3:f2:1c:58:1c:75:18:89:43:65:77:
fc:62:70:5f:78:e9:e9:1d:01:d0:c8:0d:e3:16:1a:d8:b0:68:
48:0b:0d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org