Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IoA63To_gqPP1xRUbe8jmNFtASM.roa
File: IoA63To_gqPP1xRUbe8jmNFtASM.roa (raw, json)
Hash identifier: umzKtf6OIIjaafRTJSiGfIt4dO8mnMSO1UX8UUC82+Q=
Subject key identifier: 22:80:3A:DD:3A:3F:82:A3:CF:D7:14:54:6D:EF:23:98:D1:6D:01:23
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AB8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IoA63To_gqPP1xRUbe8jmNFtASM.roa
Signing time: Tue 29 Sep 2020 10:07:32 +0000
ROA not before: Tue 29 Sep 2020 10:07:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.158.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2744 (0xab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=22803ADD3A3F82A3CFD714546DEF2398D16D0123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:ad:6d:96:8e:ed:4f:5a:8b:77:19:8c:fd:
20:d9:5e:f1:2f:00:28:c3:45:69:08:bb:d4:b2:21:
95:88:d3:49:f8:21:92:ea:2b:61:3b:d0:93:90:c9:
8b:fc:7e:d2:d9:a3:b7:f7:eb:b3:4c:9e:5e:ac:9d:
a5:77:e4:3e:77:e1:61:d9:97:7b:3a:76:be:5a:90:
4b:f9:16:b9:72:c3:f0:74:0a:14:8b:8b:02:19:0a:
b2:cf:1e:72:5a:21:d8:67:a7:e5:1a:8f:e2:8d:79:
7e:61:4c:ae:71:a6:44:a4:fc:e6:20:0c:cf:d3:d1:
fb:1b:65:b1:93:83:2d:65:3a:85:d2:11:db:b7:14:
4b:9b:33:4b:24:35:ad:2f:02:f3:75:96:aa:92:49:
de:ab:d0:9e:e3:19:e4:bd:d8:f4:8e:5b:d1:7a:5f:
69:6c:2c:bc:3e:07:7a:8a:2b:2a:28:bb:bc:ac:84:
70:39:d9:46:43:c9:3d:7d:fa:25:9a:67:c6:b8:08:
6b:fc:5c:a0:bc:d0:e6:d1:46:9d:16:f3:2e:13:f1:
0f:8a:b8:f7:48:82:78:a0:ba:93:bc:c0:e3:52:66:
6b:55:55:9e:98:34:bb:d9:75:74:87:b9:2b:52:b4:
67:c9:da:f1:5d:e8:9b:23:60:83:f8:9a:d1:2b:a4:
e4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:80:3A:DD:3A:3F:82:A3:CF:D7:14:54:6D:EF:23:98:D1:6D:01:23
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IoA63To_gqPP1xRUbe8jmNFtASM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.132.0/22
Signature Algorithm: sha256WithRSAEncryption
94:cb:2a:de:31:fe:90:8c:42:81:38:6e:cf:62:10:5f:31:35:
8c:5a:e7:e9:71:a2:69:73:de:64:5c:7b:42:36:04:93:bf:36:
10:d3:cd:55:8f:02:78:aa:db:10:f0:0a:78:f7:c9:a0:f4:36:
d5:8b:a9:9f:aa:5c:e7:75:7b:ba:17:70:0f:96:bd:ea:81:30:
1d:9b:a2:d9:42:01:f9:e9:46:3b:b8:b4:38:af:61:53:07:b8:
9c:e1:a9:27:10:b5:5f:85:05:24:62:a1:5b:a6:50:e9:16:6c:
ae:40:8c:b6:13:e7:0d:f9:1e:5e:f2:b7:91:96:a0:7a:cf:1c:
f3:b9:b1:9f:a8:58:98:0d:98:df:b7:c0:48:59:07:61:fb:54:
b9:8f:59:02:31:6a:81:5d:29:96:e7:f4:d8:1c:f9:9e:4b:3e:
8b:d4:08:fc:0c:f4:97:5b:83:ee:61:a0:7c:a9:1e:9a:61:ca:
72:49:bc:35:13:2f:bb:2b:49:9c:15:0a:b9:75:a1:4f:d6:07:
f2:6d:08:0f:81:25:ea:ae:bd:29:da:ad:e9:ea:ba:93:c0:13:
fb:c8:5d:3b:94:cc:dc:29:9a:45:f8:4f:b8:22:fd:08:fb:c3:
6b:b8:ba:40:cc:f0:83:f1:50:4e:90:75:d0:10:ae:f4:5c:e9:
35:e5:6e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org