Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LDrqkbBl6sooxEwgmIM9_bdyfhM.roa
File: LDrqkbBl6sooxEwgmIM9_bdyfhM.roa (raw, json)
Hash identifier: Sfl1eQEjfGXdIelrZzLFAikV6yl1gTWKohcGrVwAiyA=
Subject key identifier: 2C:3A:EA:91:B0:65:EA:CA:28:C4:4C:20:98:83:3D:FD:B7:72:7E:13
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FBF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LDrqkbBl6sooxEwgmIM9_bdyfhM.roa
Signing time: Sun 07 Feb 2021 12:35:52 +0000
ROA not before: Sun 07 Feb 2021 12:35:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 49.158.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4031 (0xfbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:35:52 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2C3AEA91B065EACA28C44C2098833DFDB7727E13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7d:22:6f:ba:f8:9c:d3:50:70:ab:e5:a4:aa:
74:75:c8:20:74:99:d9:36:11:6c:7d:68:29:70:02:
51:18:50:1c:06:33:31:4a:8e:0e:d8:62:f4:f2:95:
82:3b:08:bc:81:c0:9b:26:d2:e8:2b:45:ef:11:fa:
4e:f7:92:85:4a:9b:17:fe:25:b8:d8:dc:34:33:73:
d8:75:18:58:5c:d8:15:61:55:a5:46:18:0c:ba:72:
7c:fc:a2:a6:2b:f7:16:34:23:1b:07:ed:99:c9:6b:
d9:a3:5b:d6:ef:cd:c3:56:8f:63:74:6c:9c:20:04:
02:07:88:94:f6:c6:18:60:71:5e:59:b8:ec:23:1c:
1f:71:c8:1b:31:26:16:71:d0:9d:f8:2a:5c:de:f4:
11:53:79:59:63:f9:eb:55:a0:85:ac:d6:72:17:50:
6f:1d:18:b5:be:7a:c6:92:b2:24:b1:28:3b:d0:e7:
4a:ae:73:8d:34:9f:48:7b:a9:6e:4e:8a:67:09:ff:
78:b7:31:54:d6:9d:57:99:cd:5c:27:18:c0:46:85:
54:85:e5:f6:25:d8:04:0b:8a:9e:a1:da:7d:16:fe:
9c:57:d3:e2:38:af:db:6a:c8:43:f9:7c:1e:69:00:
1f:ef:99:d1:79:4b:cc:1a:16:3e:f9:1a:37:2f:71:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3A:EA:91:B0:65:EA:CA:28:C4:4C:20:98:83:3D:FD:B7:72:7E:13
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LDrqkbBl6sooxEwgmIM9_bdyfhM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.176.0/21
Signature Algorithm: sha256WithRSAEncryption
42:fb:ed:37:ad:49:bf:ca:76:bc:7e:01:7a:f7:8e:c4:68:d3:
d4:c7:2d:a5:ee:68:80:30:14:67:0c:e7:f0:61:0d:fd:86:69:
81:4a:89:00:06:9e:27:30:18:ee:86:c0:33:f1:38:6e:6c:44:
cb:65:a0:8e:72:93:04:9f:d6:51:66:1d:95:6c:8e:8f:27:af:
9d:35:ee:74:7c:17:0a:4c:c1:be:6a:99:92:8b:8d:b2:07:8a:
32:60:fd:03:34:ef:64:fe:17:ab:0b:f2:41:e8:9a:93:06:c9:
8d:bc:0a:94:4c:24:70:85:0f:7e:65:0e:62:b9:65:58:fb:c4:
b1:91:3c:25:73:31:aa:52:a6:f6:e7:76:56:3a:4d:1d:2d:2b:
3f:9d:8d:0c:66:fa:57:10:6a:06:90:13:a3:d4:20:e9:95:18:
97:75:2b:a9:1a:d0:0b:25:7e:c6:bc:90:6b:de:e1:1c:14:b6:
cc:df:36:b4:19:1c:6f:9e:f9:94:1b:d1:5c:bb:3e:da:2e:65:
1e:ec:02:ec:c3:f1:02:8c:2b:c2:64:1d:7e:aa:27:8e:50:df:
ba:ec:53:f6:f5:f8:79:e5:e2:fa:37:48:92:e9:7f:9e:10:ba:
bb:98:c9:94:53:e3:13:c0:ae:23:7e:51:d4:f1:9d:45:d3:f6:
b9:7b:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:47 2023 by rpki-client on console-fra.rpki-client.org