Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/K95AZtyNKfTJ2TwjHerFwD-iQqE.roa
File: K95AZtyNKfTJ2TwjHerFwD-iQqE.roa (raw, json)
Hash identifier: GH7f8dhJ25yJx0jKs8w5heP8Q7vFxXu/pTrCz9vTBp0=
Subject key identifier: 2B:DE:40:66:DC:8D:29:F4:C9:D9:3C:23:1D:EA:C5:C0:3F:A2:42:A1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 135F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/K95AZtyNKfTJ2TwjHerFwD-iQqE.roa
Signing time: Wed 29 Sep 2021 02:55:41 +0000
ROA not before: Wed 29 Sep 2021 02:55:41 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 49.158.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4959 (0x135f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:41 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2BDE4066DC8D29F4C9D93C231DEAC5C03FA242A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:44:62:a8:35:00:5f:96:9e:ae:05:da:35:13:
82:43:8e:bd:76:d4:f0:50:7e:57:36:05:f9:06:f4:
a1:48:05:32:95:d4:af:eb:33:7f:38:c9:9a:f4:5d:
fb:bf:53:19:5e:f7:cb:fc:2f:27:39:af:d0:cc:20:
df:d6:64:b7:85:75:3e:65:a6:00:af:4a:e0:36:a9:
ad:ab:f4:56:1a:c6:4d:63:bd:46:f4:c5:76:b1:93:
1d:56:35:ea:0f:bb:88:69:3d:e6:d5:03:08:58:77:
6e:9d:91:12:c4:4a:33:e1:4b:5c:90:92:d5:67:39:
64:70:bc:b5:a1:70:fb:e0:40:e4:1e:08:94:c2:bf:
22:71:16:ae:43:41:85:a7:1d:fe:1a:3f:dd:06:72:
78:9b:59:2c:87:0a:8c:86:f2:1c:59:2a:09:5e:59:
98:df:65:70:f9:02:f5:cf:70:22:83:e7:0f:7f:c5:
0d:ec:27:cb:13:75:89:23:50:ca:dd:f6:7c:b4:f3:
34:d8:67:88:c0:38:92:fe:96:55:23:33:36:85:56:
3a:fc:1e:b7:30:7f:2e:9b:34:2a:14:27:70:07:c0:
65:8e:13:e7:60:31:7e:f2:0b:bb:3f:39:8d:c7:e4:
be:16:10:80:19:77:17:24:5b:0b:88:fd:e2:a0:c8:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DE:40:66:DC:8D:29:F4:C9:D9:3C:23:1D:EA:C5:C0:3F:A2:42:A1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/K95AZtyNKfTJ2TwjHerFwD-iQqE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.244.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:d2:b0:10:9c:fd:7c:c6:1d:a7:05:7b:9f:9a:28:2b:c3:be:
20:6e:4c:70:ec:f6:5c:44:bb:58:e6:6e:48:e1:1e:da:df:5a:
ba:d2:8a:32:3f:0c:8d:f2:9c:71:4d:f6:d6:90:0a:9e:95:05:
08:ba:85:ae:8d:f8:6a:6e:c9:af:07:83:01:05:3e:3a:2e:6d:
34:af:02:c5:ee:27:19:ad:0f:4d:40:20:7e:32:0f:d4:c7:d5:
f6:db:6d:df:97:f3:f3:f7:91:b9:75:f8:18:4c:c4:bc:08:e6:
e2:2a:0d:2c:46:09:be:27:e0:0f:a0:e3:76:8e:0a:0a:d7:a5:
c1:d0:36:31:90:79:ad:e5:ab:9f:11:56:26:ce:6a:ab:d3:b2:
22:c5:13:79:6a:8a:02:bd:7a:68:39:08:c1:58:37:49:6f:40:
2c:e8:9e:74:99:62:6f:89:65:92:02:44:74:96:99:cc:1f:76:
5b:71:96:f4:85:b8:0b:c0:58:b3:3e:5a:e2:db:f7:e5:17:3a:
41:3d:57:df:7c:80:78:ad:8f:da:51:d1:da:89:35:ad:d2:77:
13:da:78:ce:fe:1f:e0:68:67:1b:91:97:8f:e6:71:b9:9d:85:
44:8e:a8:d2:b7:40:54:98:27:2a:e9:c1:74:b6:79:8d:ee:a6:
f0:fe:c4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:35 2023 by rpki-client on console-ams.rpki-client.org