Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LnE7cL-2llofHJ29j3QjFL63oVo.roa
File: LnE7cL-2llofHJ29j3QjFL63oVo.roa (raw, json)
Hash identifier: WtnHtbyCVWVoS1MkZ2G+62mqLBrLnr5KoMUyf79RuJ0=
Subject key identifier: 2E:71:3B:70:BF:B6:96:5A:1F:1C:9D:BD:8F:74:23:14:BE:B7:A1:5A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 187A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LnE7cL-2llofHJ29j3QjFL63oVo.roa
Signing time: Sat 22 Oct 2022 05:57:57 +0000
ROA not before: Sat 22 Oct 2022 05:57:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.158.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6266 (0x187a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:57:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2E713B70BFB6965A1F1C9DBD8F742314BEB7A15A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:bf:ea:37:33:ba:9c:fa:d2:dc:1b:53:8a:
f9:9b:c1:71:6c:6a:a9:3c:90:67:72:a4:a7:a7:91:
7d:bf:bf:8f:2d:48:8d:6b:7c:21:90:7f:f4:84:51:
82:72:d0:4d:31:99:e5:82:c7:d7:9d:ba:be:73:35:
32:ad:bc:3e:6c:3b:4f:c1:5c:3f:cd:60:4d:f7:17:
24:7c:cc:4e:82:c4:0b:ab:f9:1b:94:41:36:71:e1:
3b:3f:fe:b0:bf:d5:b9:1c:52:43:12:63:ef:3b:29:
e3:25:ba:6c:10:67:3d:3b:d6:74:16:44:84:ec:5c:
c6:5f:54:f9:05:69:1c:c7:d2:61:31:9e:3e:d9:40:
d3:ba:35:5a:b2:b3:71:4c:2a:ae:9d:b7:35:5e:3b:
d4:2d:a0:a0:18:7a:a5:20:4d:d1:dd:f2:ce:fa:e4:
c2:a0:db:33:02:98:03:ed:66:9e:41:4f:18:1e:8f:
0f:52:e6:0a:4d:ab:e4:ca:53:e3:7a:0f:ec:fb:da:
55:ac:ca:62:9c:c6:2c:25:98:c2:18:76:94:57:68:
d5:d9:94:16:e6:ad:b4:8f:b2:54:15:dd:d0:35:86:
6a:34:14:e4:07:80:ee:80:f4:23:6a:8a:e7:f3:29:
a5:d6:cd:01:c0:dd:8e:04:b7:e9:25:de:85:f3:92:
5f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:71:3B:70:BF:B6:96:5A:1F:1C:9D:BD:8F:74:23:14:BE:B7:A1:5A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LnE7cL-2llofHJ29j3QjFL63oVo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.200.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:37:7a:83:97:6d:6b:66:47:c3:6e:32:d7:d1:1c:2e:01:1a:
63:2e:c4:85:36:f5:13:0c:10:d3:71:82:61:6b:27:a5:a0:ad:
48:11:88:72:18:ec:dc:07:87:b9:7c:f3:71:cd:20:d9:28:2e:
4b:0f:83:0a:18:37:67:4f:f7:2d:2f:46:fb:99:42:5b:64:6a:
f7:64:7b:9c:e9:f2:35:5d:f7:50:fc:b5:7c:06:57:9f:09:04:
3d:e8:ad:de:7c:68:b3:55:47:7c:4c:7e:e0:eb:d2:fc:66:1a:
75:e9:36:35:30:5f:d3:b3:ca:84:a0:70:a9:fa:73:03:32:08:
cf:38:4b:7c:66:b1:f6:06:ac:7a:ce:7f:79:e0:dc:8d:fc:aa:
26:87:cb:fa:a3:d3:47:47:34:fb:d1:3a:80:57:58:39:36:f8:
4a:01:75:b2:2b:f0:fd:8b:8b:d5:fb:f3:03:f0:8c:8d:81:6d:
dc:3d:f3:02:fa:1e:eb:fd:8e:98:4e:6a:35:a2:c9:b2:94:ec:
58:16:ea:98:43:80:bc:aa:83:0d:bf:42:55:24:02:fa:d9:67:
0b:9a:52:88:07:3e:4b:c6:c4:11:26:12:34:9a:be:f6:1d:58:
11:c8:b2:7b:ed:77:bc:18:f2:07:cd:1a:61:e0:82:fa:f6:7c:
ae:58:6c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org