Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FSNWia_iAfXiyP3vRUQcnabV9iQ.roa
File: FSNWia_iAfXiyP3vRUQcnabV9iQ.roa (raw, json)
Hash identifier: NLdCBdnuaSr1/6y6sU9eYlhDSwae/j4A9xfK1+AZpL0=
Subject key identifier: 15:23:56:89:AF:E2:01:F5:E2:C8:FD:EF:45:44:1C:9D:A6:D5:F6:24
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1297
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FSNWia_iAfXiyP3vRUQcnabV9iQ.roa
Signing time: Wed 29 Sep 2021 02:54:45 +0000
ROA not before: Wed 29 Sep 2021 02:54:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 49.159.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4759 (0x1297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=15235689AFE201F5E2C8FDEF45441C9DA6D5F624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:40:b2:1a:7d:f2:9f:13:f4:fc:55:26:45:
70:3e:7f:5e:66:22:66:ff:65:52:44:f3:02:88:1e:
3d:b4:a8:0a:86:4b:c6:c2:85:54:02:f2:f7:b3:bc:
24:55:20:10:83:70:cc:3e:9a:4f:51:78:b7:2c:3a:
54:04:55:e5:f5:73:ef:72:77:e7:f4:8c:64:c3:55:
93:e7:ea:d5:20:28:0a:bd:2a:bc:08:da:75:13:88:
ef:12:37:88:9d:0b:a7:bf:00:f9:5e:ec:49:d7:b7:
28:f6:d5:6b:55:6a:9c:5e:84:bf:be:a3:65:40:99:
81:c2:62:5f:39:66:f9:f6:ba:9e:c5:06:6d:68:c6:
60:a7:74:34:32:38:8b:73:d9:8e:97:b8:84:e3:51:
7e:f5:2e:4d:84:37:b1:f6:77:f3:bd:c6:ad:66:12:
dc:6c:42:b5:b3:f3:5a:08:30:0f:d6:38:d7:e6:2c:
19:5d:2a:64:a5:fb:1d:a6:6e:dd:56:d5:ed:fc:10:
e3:9a:aa:0d:b6:f7:be:6e:87:c7:13:8f:f4:a9:db:
c7:19:b1:b8:d5:45:dd:7a:7a:db:ed:d4:b9:f3:50:
5a:16:83:77:d3:d0:27:fc:e2:35:44:91:ad:e6:f8:
3e:24:f4:e9:f7:3d:03:6a:55:b7:66:30:04:c0:e8:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:23:56:89:AF:E2:01:F5:E2:C8:FD:EF:45:44:1C:9D:A6:D5:F6:24
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FSNWia_iAfXiyP3vRUQcnabV9iQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.64.0/22
Signature Algorithm: sha256WithRSAEncryption
63:0b:8c:62:4e:d1:7b:01:cf:6b:d6:24:3a:34:1c:ab:69:08:
af:4a:a2:60:17:ad:68:be:b0:04:fd:0d:ec:94:e1:5b:97:5e:
a5:7d:97:8e:8a:5f:6a:4b:0b:20:76:ba:ec:7f:16:db:1b:dc:
12:d0:d3:27:70:e0:d3:54:a5:b3:30:a2:e9:3e:33:03:3a:4d:
e7:e3:7c:c1:8d:d7:4c:74:98:65:be:97:01:6b:82:19:bb:55:
d1:f0:a0:ca:78:e3:00:ed:a9:a6:94:bb:b4:fe:30:23:5b:d8:
73:b2:2c:0d:da:cd:47:b1:c7:89:31:b8:ce:1a:9c:b6:29:ad:
f7:26:8d:89:e3:5f:43:27:7f:26:00:30:23:84:78:42:8b:80:
06:b1:73:88:e7:5a:9c:e6:59:44:cc:70:60:49:a4:86:12:a0:
ee:c0:b7:dc:3a:f5:6a:80:76:ff:72:d8:f2:60:87:ac:1b:e1:
df:1e:8c:9e:8e:61:75:69:fa:8d:73:96:62:9e:52:41:05:ea:
19:59:49:cc:50:72:3a:a5:1c:a4:a3:d6:c7:0d:06:e6:ea:ee:
da:c0:39:98:c2:f2:4e:5a:07:44:37:d4:1b:f1:ce:b1:6c:e3:
f0:30:e2:f5:e2:67:23:40:66:5f:af:85:2b:10:10:79:27:20:
b4:93:6b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org