Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EqFfLmJi35IOgqyF1KtgUOF3vnM.roa
File: EqFfLmJi35IOgqyF1KtgUOF3vnM.roa (raw, json)
Hash identifier: MHJqw97h+nCBdIwGAvHYrtQK+IzMHk/yUsVGBkp8MDE=
Subject key identifier: 12:A1:5F:2E:62:62:DF:92:0E:82:AC:85:D4:AB:60:50:E1:77:BE:73
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AE7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EqFfLmJi35IOgqyF1KtgUOF3vnM.roa
Signing time: Tue 29 Sep 2020 10:07:46 +0000
ROA not before: Tue 29 Sep 2020 10:07:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.159.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2791 (0xae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=12A15F2E6262DF920E82AC85D4AB6050E177BE73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1f:fe:53:76:78:9a:19:44:42:8e:cd:cb:57:
8f:cd:c1:75:0b:06:67:7a:86:16:49:30:d4:40:e1:
1c:13:aa:ca:32:f2:bd:6d:fc:d9:1d:66:15:1b:c4:
67:cb:46:54:3a:c6:e6:71:5e:20:2d:5c:98:da:87:
0b:21:5c:b1:d7:d4:ed:ac:aa:11:b0:ef:32:41:78:
7d:a6:2c:1a:ca:d0:49:76:2e:aa:2c:c1:32:ef:df:
a7:53:c4:2f:df:4f:47:fb:07:75:ba:4c:b2:25:7f:
f1:18:b2:50:3b:26:28:fb:2e:20:78:e2:05:df:c3:
35:aa:d9:d5:9f:de:54:50:0f:3b:c2:d5:c7:e0:db:
1e:c7:02:af:b6:f2:c0:fe:87:44:66:8e:34:99:f6:
69:c7:da:d1:37:d6:a8:16:f9:b2:6f:70:a1:31:c2:
4d:b4:53:c2:6d:51:98:4c:a3:be:7f:20:56:41:20:
80:3e:22:01:87:53:c3:3f:32:f1:c0:19:45:6a:7a:
62:0f:0f:82:54:bc:03:7c:bb:a9:8b:40:ce:3f:5b:
e1:7c:87:da:3f:fc:a6:ba:28:2c:cd:94:9f:29:11:
f0:eb:2c:ab:ff:10:3d:4d:72:10:f4:8d:e8:8f:04:
51:23:39:66:39:e0:28:68:15:47:64:2b:33:5b:a3:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A1:5F:2E:62:62:DF:92:0E:82:AC:85:D4:AB:60:50:E1:77:BE:73
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/EqFfLmJi35IOgqyF1KtgUOF3vnM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.240.0/22
Signature Algorithm: sha256WithRSAEncryption
99:ea:8e:fb:82:2c:ce:a1:a2:63:fc:86:af:61:00:07:5d:fb:
89:2b:4a:16:39:a5:23:98:4a:3e:51:8e:0e:27:ad:86:47:9c:
a4:3f:8f:29:6b:d5:4e:19:e8:54:42:81:38:a4:9d:d8:81:6e:
13:bc:5c:cb:35:33:b9:b4:86:17:df:7a:a1:34:ac:8e:80:6c:
67:d5:ec:ba:a2:8d:9c:c8:78:af:b2:3c:98:b6:05:06:3b:0d:
25:2d:4b:9f:4a:2b:d0:bd:2f:3b:79:e0:ff:63:ab:b0:62:ef:
d1:60:47:1e:ce:aa:90:d6:fd:02:5f:5c:64:92:d7:be:5a:da:
e9:f8:c2:56:7b:e4:fa:ac:0a:ad:67:ad:65:2a:c4:9f:58:85:
69:14:8c:ea:ce:f6:3b:3b:72:59:81:0a:e0:ad:01:e8:2a:ff:
61:85:3b:3d:56:93:07:cf:64:1a:99:a5:57:4e:44:28:e6:ae:
20:af:7c:9a:4f:ad:9c:52:08:9b:48:86:18:0c:24:53:13:f2:
34:24:1e:99:c9:37:34:48:d0:9b:d3:3a:e8:c9:74:55:e4:b7:
83:cf:76:2c:55:05:54:45:be:9a:19:d0:64:c5:f0:91:f1:a3:
4e:23:20:99:53:18:1a:0b:47:63:95:ef:69:b3:c8:75:f0:a4:
04:66:2f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:35 2023 by rpki-client on console-ams.rpki-client.org