Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CVW9_7kRQu2VxTNtx65J97j_tps.roa
File: CVW9_7kRQu2VxTNtx65J97j_tps.roa (raw, json)
Hash identifier: aZL5bQxUtSZ8EU0pPlf3+n3VsJnpsdFCUlT5aIbt00Q=
Subject key identifier: 09:55:BD:FF:B9:11:42:ED:95:C5:33:6D:C7:AE:49:F7:B8:FF:B6:9B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FDD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CVW9_7kRQu2VxTNtx65J97j_tps.roa
Signing time: Sun 07 Feb 2021 12:36:25 +0000
ROA not before: Sun 07 Feb 2021 12:36:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4061 (0xfdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:36:25 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0955BDFFB91142ED95C5336DC7AE49F7B8FFB69B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:65:c3:bb:45:b7:2c:3c:1a:2c:ca:42:f5:
29:a2:04:14:81:4c:42:b8:09:71:cf:59:8d:48:2c:
d6:86:08:4b:f0:09:df:5e:49:1a:30:bf:6f:c2:91:
18:b3:c8:95:35:ce:39:bc:a5:9b:af:e8:00:d7:c4:
ed:c9:fe:33:f8:93:57:94:8e:fd:7f:bd:53:6f:2c:
cf:44:8c:ae:68:1e:32:6c:b3:3c:59:9b:40:d2:97:
24:ac:b9:9c:99:d4:85:c3:7e:04:55:86:0c:68:04:
1e:58:dd:a0:10:04:4a:86:19:6c:b4:4f:eb:db:26:
ab:33:37:5c:ef:1e:17:9d:09:12:9d:4f:b4:b4:5a:
e3:ec:a4:37:44:90:bf:7c:4f:10:84:ce:fd:e1:6a:
c9:68:49:2b:23:71:f4:33:8b:5b:bf:45:b0:8b:22:
d1:cd:0f:20:26:e4:02:1c:ea:81:4e:93:5b:f2:2e:
e3:ae:ba:4a:9e:69:6d:de:b0:15:d9:63:85:35:2d:
91:99:03:ba:40:b8:27:c8:06:bc:2f:db:5c:14:c2:
5f:ea:f4:14:91:f6:8b:4f:27:d8:17:3e:54:c4:6d:
72:fe:80:eb:77:a2:6e:80:55:ca:0a:1a:16:bb:c9:
0a:32:8f:c7:ac:2d:6c:e7:d6:f9:9b:14:04:ae:c5:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:55:BD:FF:B9:11:42:ED:95:C5:33:6D:C7:AE:49:F7:B8:FF:B6:9B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CVW9_7kRQu2VxTNtx65J97j_tps.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.104.0/21
Signature Algorithm: sha256WithRSAEncryption
79:cd:f4:4e:08:ef:c6:d8:74:80:93:5d:90:10:dd:8c:28:b5:
4c:5e:5e:22:4d:65:66:93:9f:9a:64:da:7c:33:c2:2b:88:ed:
ab:32:b8:29:d0:8a:c4:b5:74:00:13:ff:38:1b:fe:e9:83:29:
94:27:23:49:68:ab:a5:f9:2a:f6:62:86:bf:31:e3:4b:5c:90:
2b:3f:0e:79:32:db:6d:e5:20:6d:a1:fd:2d:5f:5e:88:cf:26:
28:53:c7:29:87:e1:c0:a6:46:2f:71:df:24:1f:f3:84:c6:f0:
43:c6:70:0f:d4:ee:ec:31:9a:7c:66:f0:24:fd:56:b7:0a:91:
c1:d8:1f:d0:5c:f2:3d:8d:31:7c:ad:7f:33:98:78:a2:19:50:
55:6f:0f:82:1e:7f:35:01:a1:be:3c:0f:00:84:fc:61:e3:93:
c4:9b:c2:bb:29:dd:33:d2:5f:5e:b2:28:ee:49:5b:84:90:43:
9e:7d:f9:06:93:b1:fd:a9:bc:e2:9e:fb:d9:a2:50:e6:65:b1:
42:72:9b:69:31:3b:0e:6f:9b:00:ee:0c:a1:23:73:dd:05:cd:
69:54:c4:d0:da:54:02:c8:de:90:46:cc:d9:43:50:e6:ca:8c:
59:dd:bd:7a:b9:ae:0e:0a:e2:cb:ad:41:d4:8a:89:e5:c1:eb:
1b:58:52:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org