Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D6BNtCt7A_sUnq5V2A_gMJFJEWA.roa
File: D6BNtCt7A_sUnq5V2A_gMJFJEWA.roa (raw, json)
Hash identifier: n0sQ8ZVnf/0SQo6oE+vlz+7dMlWbnDJbOWfDd/SgL+Y=
Subject key identifier: 0F:A0:4D:B4:2B:7B:03:FB:14:9E:AE:55:D8:0F:E0:30:91:49:11:60
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0EFD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D6BNtCt7A_sUnq5V2A_gMJFJEWA.roa
Signing time: Sun 07 Feb 2021 12:32:29 +0000
ROA not before: Sun 07 Feb 2021 12:32:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3837 (0xefd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:32:29 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0FA04DB42B7B03FB149EAE55D80FE03091491160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:d8:5a:1c:c1:85:d1:1a:d7:05:18:90:20:
35:88:16:73:bb:41:63:ae:88:d3:ef:e1:8f:70:3a:
11:92:89:b2:69:9b:7d:d6:a4:90:ee:75:de:d6:96:
70:9b:c6:bc:f5:84:32:c7:35:44:30:37:b5:cd:1a:
eb:65:5b:68:bb:8f:c0:1e:23:57:4a:22:59:e4:b9:
47:65:4f:b5:18:bf:2b:88:39:2b:ec:74:ca:fe:83:
12:d4:86:bc:e2:2c:bd:f0:5f:f9:dd:e2:9d:a1:18:
45:42:9a:34:f4:1e:cd:81:8b:5c:7f:ab:66:63:2f:
48:46:e8:5e:38:23:3d:3f:fc:9e:6c:9c:5a:03:95:
e9:e0:af:37:d8:1d:34:61:4c:8e:2d:31:a7:61:1f:
32:b6:c8:ad:c2:dd:96:ef:31:01:f8:d4:31:e0:e9:
06:c6:57:c5:79:8d:59:38:a4:b4:14:1c:ef:5e:90:
b5:da:3a:3e:f5:72:04:8c:8c:7a:28:f0:b7:82:f0:
99:16:4d:fc:39:36:59:59:04:2e:38:23:81:14:b5:
8b:54:f7:c4:d0:c6:9c:1b:c8:12:86:27:8e:c5:32:
c2:2d:27:37:7c:f7:cf:e4:f8:04:33:9b:7b:fc:f4:
c5:92:08:dd:40:6c:56:67:5b:8d:16:14:0e:05:95:
45:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A0:4D:B4:2B:7B:03:FB:14:9E:AE:55:D8:0F:E0:30:91:49:11:60
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/D6BNtCt7A_sUnq5V2A_gMJFJEWA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.60.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:cb:f0:77:30:bf:b7:42:c5:fa:2e:b6:5b:86:f2:aa:bb:72:
4f:dc:55:21:a2:29:19:4b:b7:c9:27:45:84:d6:b4:fa:50:34:
e5:c1:9d:ac:cc:ee:68:29:da:75:67:80:09:9a:9a:65:e2:97:
17:cf:46:18:77:e0:f1:cb:ad:aa:b4:b2:be:c0:62:32:a0:90:
d5:34:75:af:27:2a:dd:f0:ab:c6:8b:22:f1:65:c3:33:b3:9a:
6b:09:4e:7d:b1:1c:cc:be:f8:f9:c6:33:da:10:7d:42:16:0f:
c6:c1:06:67:78:86:0e:3c:a8:b6:94:bd:1d:e9:73:0e:f9:42:
cb:7d:d7:6f:67:a3:74:d3:90:b0:ab:da:9a:26:f7:57:91:38:
d2:7e:00:09:51:ea:57:29:b5:5f:f6:2b:1e:70:f6:65:76:9f:
98:39:85:c4:6a:30:d9:ac:4d:1d:a7:a4:b6:4a:bd:4b:63:c3:
f9:06:36:9a:99:69:00:f0:38:96:9a:f9:20:13:ba:37:2b:b7:
67:5a:40:d0:2b:3e:19:b8:cb:60:79:00:56:b3:b0:fd:25:bd:
88:ae:36:1d:98:60:24:ac:80:e2:9e:bc:40:e0:e4:39:ec:cd:
0e:10:b0:ad:c4:7d:9d:31:e0:e0:a3:57:60:da:a1:be:41:ba:
11:ab:9f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:34 2023 by rpki-client on console-ams.rpki-client.org