Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GGzS2lEh2vdkbW_yAbsFmOLNNkI.roa
File: GGzS2lEh2vdkbW_yAbsFmOLNNkI.roa (raw, json)
Hash identifier: 8dNiCAalY7r2PyQqJ7DZCeQB/9u6VfejS4KlsZlIj6c=
Subject key identifier: 18:6C:D2:DA:51:21:DA:F7:64:6D:6F:F2:01:BB:05:98:E2:CD:36:42
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12C0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GGzS2lEh2vdkbW_yAbsFmOLNNkI.roa
Signing time: Wed 29 Sep 2021 02:54:56 +0000
ROA not before: Wed 29 Sep 2021 02:54:56 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.159.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4800 (0x12c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:56 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=186CD2DA5121DAF7646D6FF201BB0598E2CD3642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:f8:05:73:7d:c5:fa:7b:73:c6:7b:42:2b:
06:10:8c:ce:9e:89:3b:8a:8f:64:94:7a:9f:b4:b5:
92:dd:07:5e:1d:02:b0:51:e8:73:60:e8:43:fd:69:
ed:25:8a:90:4e:2e:b5:73:35:b1:25:8c:b0:d9:9b:
80:dd:3b:e5:1b:b6:c8:41:49:90:74:08:22:24:84:
17:b5:8a:91:2a:59:e7:4d:a9:77:43:c3:7a:d6:73:
e0:e1:19:f1:67:3e:31:7d:cb:c1:8b:06:53:e2:20:
96:19:d2:c3:6a:4a:0f:e6:47:a5:30:7e:15:5e:f5:
d1:e3:bc:4d:38:86:43:f5:68:27:cb:97:ec:eb:9c:
1e:5e:51:85:61:d7:1c:51:1e:69:b7:8b:fd:d9:07:
01:70:91:84:5e:6a:d4:11:89:b7:88:13:0a:a7:64:
68:3e:60:4d:3c:64:5c:13:af:3e:61:e5:9e:bf:24:
70:f7:ba:12:79:65:e2:55:e2:e0:ff:ff:26:7d:22:
72:2d:b8:ab:d3:ca:51:40:53:aa:2c:89:c4:10:9d:
62:36:b3:04:40:b0:5b:88:5d:ea:20:c0:fd:9e:94:
94:1c:2d:86:3e:82:4f:4a:c0:8c:16:b6:37:05:4f:
5f:a4:f8:d7:8c:92:c7:ef:d7:21:c9:98:fd:5c:dd:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6C:D2:DA:51:21:DA:F7:64:6D:6F:F2:01:BB:05:98:E2:CD:36:42
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GGzS2lEh2vdkbW_yAbsFmOLNNkI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.240.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:2a:5f:67:55:6f:b8:d8:20:d2:9b:8a:6e:5b:62:a7:33:df:
13:00:e0:94:e9:92:4a:84:15:91:68:f8:84:0e:c9:b4:03:a3:
3b:27:13:a8:99:c0:80:6d:7b:46:22:59:f5:f5:e9:d0:c8:bf:
bf:1e:4a:48:ec:af:a8:eb:da:6f:75:5a:a1:64:d7:ec:61:1d:
7c:02:9d:75:c6:e0:9f:ba:e7:08:cf:a4:2e:2a:b9:08:42:0a:
78:49:6b:b8:5a:ec:9b:3e:04:53:43:cc:03:08:0f:aa:54:be:
7b:a8:3f:f8:2e:e3:0e:06:4e:c4:7b:8b:94:c7:22:48:db:af:
a3:27:42:91:17:b9:84:44:ba:e9:f3:ec:b0:92:d3:c8:d3:29:
37:eb:97:95:ca:36:a5:d6:c6:46:f1:80:e4:4c:29:d9:12:b1:
93:fb:10:90:9a:85:0f:8c:40:21:55:19:16:a1:a2:52:23:93:
64:dc:ea:47:29:d3:9b:a0:53:fc:f7:84:df:43:d7:99:59:f1:
8a:32:ba:36:f4:91:2b:83:60:b0:2c:10:f7:e8:3d:b0:dc:ec:
f1:d1:28:6c:87:0a:68:7a:43:71:4a:82:75:a0:60:56:a8:5f:
b5:9e:dc:da:55:a6:a1:dd:85:ae:78:e1:bc:cd:a4:1b:b9:c1:
ca:c1:e0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org