Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/K4bbK74cQKs-W6Zj9_Ot3bRToBg.roa
File: K4bbK74cQKs-W6Zj9_Ot3bRToBg.roa (raw, json)
Hash identifier: enaaZygFH7gFqPxBirSFY/XQCcXc83OByyKJlfnrOMw=
Subject key identifier: 2B:86:DB:2B:BE:1C:40:AB:3E:5B:A6:63:F7:F3:AD:DD:B4:53:A0:18
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/K4bbK74cQKs-W6Zj9_Ot3bRToBg.roa
Signing time: Thu 15 Sep 2022 02:36:38 +0000
ROA not before: Thu 15 Sep 2022 02:36:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2B86DB2BBE1C40AB3E5BA663F7F3ADDDB453A018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b3:2f:ab:b6:86:92:8e:31:6c:a2:07:50:99:
a2:6f:4c:c4:da:1a:a3:93:84:37:43:0a:3f:a3:17:
db:d3:83:17:9c:07:8f:38:62:48:0c:8f:c4:49:40:
65:cc:1b:d9:ba:be:e6:73:56:eb:16:e2:68:e0:66:
52:99:38:ad:74:cf:d0:3d:83:3f:aa:96:0f:6f:4a:
3e:af:5d:00:2f:ea:d9:44:b1:d3:f9:38:6d:4b:9e:
8d:b7:66:b9:18:6c:0c:3a:fc:56:cf:71:f2:56:c5:
68:a3:e8:99:e2:2e:e2:1b:c5:0f:4f:db:4e:27:0c:
b0:fa:08:70:00:8d:68:67:84:59:16:4a:0d:13:96:
64:8b:89:d3:47:47:e7:04:71:0d:ec:92:ca:9f:8d:
4e:f8:42:dd:48:03:69:9e:11:09:c8:e7:71:df:f6:
54:34:57:0c:57:e8:e5:bb:ef:d2:92:fe:ad:f1:bd:
13:cb:56:3d:b6:ce:7e:24:ef:6f:41:11:ad:9c:7a:
73:36:6a:45:b7:17:3b:6d:ae:75:a2:0e:d9:cb:e4:
5f:c2:bf:e0:18:32:c7:7e:a4:43:cf:8b:d2:3c:e8:
aa:75:cd:67:2e:c8:89:55:0a:c5:a5:53:22:1a:c1:
81:00:7d:de:61:f2:ee:a1:0a:e7:9f:1a:87:23:9c:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:86:DB:2B:BE:1C:40:AB:3E:5B:A6:63:F7:F3:AD:DD:B4:53:A0:18
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/K4bbK74cQKs-W6Zj9_Ot3bRToBg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.48.0/21
Signature Algorithm: sha256WithRSAEncryption
58:88:ab:cb:00:f2:ae:f8:61:2b:d7:a5:5e:f9:40:a6:d9:84:
e0:e3:63:71:8f:38:b8:72:99:d7:2e:56:67:a7:a2:5c:42:4e:
c4:c2:e2:1b:77:22:16:69:b4:4a:aa:81:40:51:b2:9a:d2:47:
0a:36:63:df:8e:2d:65:28:22:b9:89:5a:ee:1c:e8:09:1e:d0:
11:a1:39:34:e3:1d:56:a1:34:50:95:a3:8b:59:df:91:97:7a:
0f:e7:a4:da:7e:56:49:71:49:27:cb:e2:ee:37:cd:c4:c2:50:
dd:02:e0:5e:64:e7:81:5b:e8:33:8c:d0:37:0a:e3:55:7e:58:
cf:59:45:99:03:13:61:13:67:be:cd:8c:b8:5b:3e:60:e5:f0:
94:5f:ee:1d:9b:1a:a3:de:65:70:54:dc:7c:16:ba:c5:24:46:
e0:cb:df:90:f8:e7:6a:c7:56:36:f5:a5:12:25:61:f3:4e:15:
00:9b:f0:b9:50:0f:b7:74:25:5d:75:f7:29:b7:c2:17:ab:8d:
fd:3b:31:a1:4d:6d:91:68:e2:a1:d4:95:04:b6:2e:bb:69:82:
31:74:02:e3:18:20:c4:5b:07:f4:b7:89:ce:64:0b:42:54:01:
b4:a5:a1:98:60:16:22:2a:5b:b6:9e:ae:e5:e5:d4:4a:ef:ba:
46:56:4f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org