Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LCU28x2GcN9XmvogVzns_i6I_zk.roa
File: LCU28x2GcN9XmvogVzns_i6I_zk.roa (raw, json)
Hash identifier: 0dTa2J70oqsCkL0WOMuGt0VAf86MI08BqRmEFGmLAI0=
Subject key identifier: 2C:25:36:F3:1D:86:70:DF:57:9A:FA:20:57:39:EC:FE:2E:88:FF:39
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F9F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LCU28x2GcN9XmvogVzns_i6I_zk.roa
Signing time: Sun 07 Feb 2021 12:35:15 +0000
ROA not before: Sun 07 Feb 2021 12:35:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3999 (0xf9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:35:15 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2C2536F31D8670DF579AFA205739ECFE2E88FF39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:2a:cf:aa:2b:5f:5d:7c:e7:13:76:52:5d:
b6:31:d7:f7:65:fa:32:81:24:11:31:b7:2c:15:f3:
9b:25:e8:d9:83:46:f0:87:84:32:d4:92:b9:cc:0e:
03:02:7c:32:de:ff:c3:a7:91:74:1a:48:4e:3b:39:
b6:5a:80:e3:e1:fd:7a:8b:ea:2f:cd:8c:a6:91:11:
cd:29:f2:a4:02:58:57:a7:85:25:52:fc:f1:df:79:
44:4a:ad:f7:80:db:46:d5:71:b9:e0:9f:6e:23:bb:
5e:b6:e3:29:ce:01:3b:6b:84:e6:17:55:c0:99:be:
da:75:9f:16:42:e1:08:af:49:cb:83:cd:05:a8:5f:
6a:c6:ad:26:dc:54:06:07:6a:f7:c0:7f:bb:6d:0f:
94:5f:f0:31:67:ae:58:e5:15:59:f6:02:f1:ab:7e:
97:78:26:05:e0:d8:90:2a:98:86:b1:c2:85:d7:69:
02:7f:88:d7:36:f7:02:b2:b5:96:1d:fb:5a:85:cb:
86:80:1a:29:12:15:19:17:f5:2b:66:49:9c:4e:41:
7b:ec:71:8a:66:f3:a3:53:05:fd:b3:93:f9:8e:0d:
5e:02:4f:7a:5d:da:f5:f1:a2:9b:32:71:7c:18:b7:
35:22:23:ee:95:94:6d:22:1a:31:6e:3f:83:a8:2e:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:25:36:F3:1D:86:70:DF:57:9A:FA:20:57:39:EC:FE:2E:88:FF:39
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LCU28x2GcN9XmvogVzns_i6I_zk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.104.0/21
Signature Algorithm: sha256WithRSAEncryption
22:fd:74:22:99:05:29:e5:40:66:77:a2:d9:a8:c0:e4:e3:3c:
0c:6e:e0:cb:9f:27:24:d9:f1:12:ac:3a:6a:59:f5:48:b7:7b:
c0:1c:15:6f:c8:08:13:94:bd:bc:75:c0:51:22:30:ca:f3:fb:
d3:ae:81:6a:d0:72:3f:be:c3:30:4b:74:a0:0f:d4:b1:76:35:
74:f7:bb:98:ec:f0:39:35:9c:3f:6e:53:d3:64:68:0d:ea:30:
77:a1:66:02:63:53:a8:34:0a:92:b4:cc:db:01:52:66:bb:e8:
6b:a3:bb:da:a6:82:ef:be:ad:e4:0a:a6:4f:c8:56:fe:e9:88:
ff:18:04:61:0f:42:19:ee:f8:59:2e:a3:f2:5b:32:57:06:2b:
22:3f:4b:af:01:42:15:18:6c:0f:cf:32:64:6d:05:48:0c:05:
20:a0:5b:87:b8:26:bd:fe:b0:e2:0f:36:d0:71:d7:8b:25:b6:
c9:76:c6:4e:eb:08:05:15:46:9c:c8:89:09:f6:06:60:0d:7a:
72:b3:cd:92:bd:e2:eb:f9:f3:a5:4a:e1:fd:fb:80:22:21:e8:
48:b6:b8:26:03:9b:f9:58:91:43:c0:a2:1c:60:17:de:7c:ac:
ac:78:c9:b5:e4:d3:54:f7:c7:07:78:58:af:2a:65:98:26:71:
32:d3:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:47 2023 by rpki-client on console-fra.rpki-client.org