Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HeiV6qgGXKsx8ExkYGBQXqAjOGM.roa
File: HeiV6qgGXKsx8ExkYGBQXqAjOGM.roa (raw, json)
Hash identifier: a+zX5T+27Mt/zMJeoFkxcZLHJ0LtSQPAH2u+Ps4Gdxs=
Subject key identifier: 1D:E8:95:EA:A8:06:5C:AB:31:F0:4C:64:60:60:50:5E:A0:23:38:63
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19C8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HeiV6qgGXKsx8ExkYGBQXqAjOGM.roa
Signing time: Sat 22 Oct 2022 06:10:59 +0000
ROA not before: Sat 22 Oct 2022 06:10:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6600 (0x19c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:10:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1DE895EAA8065CAB31F04C646060505EA0233863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:dc:23:14:71:31:d5:56:66:25:63:0c:4e:
21:35:c0:dd:41:2f:95:6f:55:d4:25:79:7e:d3:7e:
a6:21:c5:14:c6:95:ab:b3:07:fa:a6:09:5d:f9:a9:
b6:69:c1:77:f5:61:43:ea:29:28:63:9a:41:f7:5e:
b4:37:e8:0c:9c:7a:cc:bc:21:e0:af:da:a1:f6:8a:
92:6e:bc:ba:a0:15:62:7f:29:65:c8:96:1e:2f:02:
76:2e:97:2c:26:33:8f:ed:a9:0e:6c:7f:ac:7f:bb:
7a:3f:74:72:22:4a:59:3e:66:3c:e7:4e:38:28:bd:
f6:dd:d4:b0:33:2f:30:f0:4b:1d:bf:41:99:2b:7c:
4b:c6:df:a7:f1:36:50:07:9b:8e:67:f8:c2:e3:3b:
48:79:3d:48:7a:34:61:15:e0:be:19:9a:3d:f0:9a:
de:77:e4:19:1f:19:bc:26:71:9d:76:f9:a2:f9:8c:
da:20:6a:44:4c:ff:09:9b:09:23:ab:f7:2a:d8:55:
55:a2:fb:da:b1:9b:86:e7:5d:12:29:79:20:41:7c:
5a:ed:b4:b3:8b:4e:ae:56:b4:87:32:9d:e2:d9:b9:
54:b7:d7:51:83:d1:41:f9:66:44:56:a2:e7:ba:c1:
21:77:80:5c:1a:54:22:77:2b:76:22:06:ad:2b:9d:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E8:95:EA:A8:06:5C:AB:31:F0:4C:64:60:60:50:5E:A0:23:38:63
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/HeiV6qgGXKsx8ExkYGBQXqAjOGM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.32.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:90:fc:b8:59:fc:67:32:4f:2b:4f:6c:be:ef:30:6d:e3:f0:
17:05:24:be:ab:48:a2:b3:b7:ff:44:8e:d0:19:33:bc:90:f7:
ba:8f:0a:a9:ed:d0:2a:d9:ed:0f:94:12:16:26:dc:8d:5d:8d:
98:48:76:a9:6c:2d:5e:a7:8f:4f:d1:e8:4d:75:de:d4:d1:16:
3e:8d:45:bd:0d:24:31:50:3d:df:47:4f:37:50:3a:2f:0c:f4:
4d:7c:06:c7:96:72:4c:88:28:f6:87:aa:20:5f:c5:88:e6:f9:
c6:7d:cc:ce:52:50:c9:5c:d1:62:87:01:ab:ac:7a:19:78:16:
8b:2a:b2:5d:c2:46:33:52:c2:9d:f1:f2:40:ea:0a:64:e8:1e:
fa:32:d1:89:26:f2:ef:2c:b4:db:8c:53:dd:2c:52:ba:e3:92:
b0:87:b9:c1:14:c0:f2:dd:c4:cb:19:db:cc:ab:57:83:35:fc:
0a:41:c9:c3:77:58:c4:1c:ed:63:2f:9c:25:d0:88:a3:cf:60:
fd:61:11:5c:72:62:d1:46:c8:bb:64:d9:17:99:16:1b:de:65:
a7:a7:ce:19:01:98:19:8d:6b:99:36:dd:1d:c5:cd:5d:1f:33:
bd:14:c5:43:be:4c:71:d4:c6:41:46:85:a4:25:04:72:6d:22:
7a:d6:88:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org