Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Eh7l-P01fZLhQMzJbzI6Igi4opA.roa
File: Eh7l-P01fZLhQMzJbzI6Igi4opA.roa (raw, json)
Hash identifier: M9NpzbdARYZobwY/6nyHcXyYCBGMEqASz0W0RqjzcxI=
Subject key identifier: 12:1E:E5:F8:FD:35:7D:92:E1:40:CC:C9:6F:32:3A:22:08:B8:A2:90
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AD2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Eh7l-P01fZLhQMzJbzI6Igi4opA.roa
Signing time: Tue 29 Sep 2020 10:07:41 +0000
ROA not before: Tue 29 Sep 2020 10:07:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 49.158.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2770 (0xad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=121EE5F8FD357D92E140CCC96F323A2208B8A290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b4:7a:2d:93:40:65:d6:01:3d:8a:da:c9:4d:
ba:96:8d:aa:f0:06:dd:ef:16:3e:26:de:b0:38:2e:
bb:7e:2d:68:3d:16:82:1f:f7:12:48:50:7f:d6:d9:
2e:11:5e:5f:f3:11:6c:67:67:f5:6f:5b:08:01:d7:
6d:a4:7b:ed:d9:b5:10:56:39:8f:46:49:50:aa:10:
7c:67:b1:99:f0:b2:91:2b:1c:10:fc:05:06:d0:f2:
23:70:fd:74:82:78:22:36:be:53:c1:9a:b6:d4:18:
9d:0a:0c:9c:a3:06:03:65:74:5a:5b:60:3b:1c:3c:
62:e9:23:15:e2:89:9c:63:d1:5d:f5:98:d0:4c:ba:
5b:64:e2:53:72:87:db:5b:bd:e0:55:9b:ca:67:37:
c1:19:f1:41:3f:f9:83:8c:de:b8:a5:0e:4b:8e:26:
04:cc:0d:c3:d7:cd:23:79:c1:85:78:7e:97:51:2a:
44:f4:b1:f7:dc:65:74:a6:03:27:0b:39:3e:c6:13:
83:6c:a0:a6:96:59:a4:b3:c1:13:41:82:ea:3b:83:
b6:c7:39:cf:5a:f8:56:04:2f:38:97:1f:5e:b9:fd:
3d:99:4e:97:0d:6f:cd:a2:05:64:75:42:f3:fa:2d:
b0:ca:1f:43:cb:6d:82:ea:5e:fc:e8:cf:38:58:02:
c7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1E:E5:F8:FD:35:7D:92:E1:40:CC:C9:6F:32:3A:22:08:B8:A2:90
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Eh7l-P01fZLhQMzJbzI6Igi4opA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.196.0/22
Signature Algorithm: sha256WithRSAEncryption
44:13:52:bd:03:5d:25:e7:51:d6:a3:96:11:e5:b2:ca:68:58:
dd:8f:2a:58:0e:01:74:b2:2b:43:4f:e0:8b:df:27:3e:35:a3:
ab:bb:85:1e:78:7c:59:37:cb:99:a5:82:a7:1f:9f:26:20:dd:
c0:0e:d4:ac:7c:a2:a1:02:00:49:bb:69:88:d1:09:b0:6a:a4:
07:ff:27:98:97:07:e5:96:5a:2d:ef:78:6f:ad:f0:11:ad:44:
b8:8e:58:f1:4d:98:b9:e5:e7:4c:23:c2:d7:f2:d6:87:19:13:
17:ef:a1:57:78:07:ff:1a:9d:7e:be:2f:fb:da:50:ec:04:ff:
2a:44:b3:c4:37:8e:e8:67:6f:64:05:6a:50:0c:a2:b1:94:39:
31:17:8d:a1:cc:d0:17:1b:26:88:e5:19:ae:8e:f4:2d:a6:68:
c4:49:da:04:12:1d:05:40:57:74:bd:8a:88:bb:40:47:2e:53:
7c:f2:63:6c:f4:f5:d1:16:3d:30:0a:d2:94:75:ac:f2:fb:fd:
6c:28:62:52:08:80:5c:69:18:d0:95:26:b0:01:ec:59:e1:d6:
e6:ff:fc:53:b7:4d:8c:db:92:ba:20:e0:95:48:32:b5:01:8f:
d6:2a:10:81:4b:46:30:21:7b:f7:67:f4:98:4f:e5:43:5d:cd:
78:aa:d3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:24 2025 by rpki-client