Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LuCLY5gtB3qwFHLvWJq9U_mFPzw.roa
File: LuCLY5gtB3qwFHLvWJq9U_mFPzw.roa (raw, json)
Hash identifier: AHNX+jVdCJB2Fw92GSvW/SAmvnhyV5NjVBs4JqwwKzc=
Subject key identifier: 2E:E0:8B:63:98:2D:07:7A:B0:14:72:EF:58:9A:BD:53:F9:85:3F:3C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FB3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LuCLY5gtB3qwFHLvWJq9U_mFPzw.roa
Signing time: Sun 07 Feb 2021 12:35:38 +0000
ROA not before: Sun 07 Feb 2021 12:35:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4019 (0xfb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:35:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2EE08B63982D077AB01472EF589ABD53F9853F3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:ef:ae:94:30:71:a6:57:a4:53:f8:06:04:
95:4a:e2:17:40:bb:ba:51:6a:19:ae:34:e5:73:bc:
d8:e5:e3:dd:50:50:55:b5:07:7f:c6:90:6d:a4:be:
e0:12:ea:c3:35:7c:18:9b:df:f4:ea:10:c3:36:30:
b7:b0:55:1f:1d:53:33:8a:44:58:f1:74:20:c9:21:
15:a7:f1:91:67:f7:e9:9d:1f:ff:93:19:9a:bf:7a:
2c:40:a7:75:4c:0e:5e:43:16:2f:83:67:1d:c5:6d:
38:2a:3a:44:6d:6f:88:aa:91:94:72:4a:94:b6:2c:
c6:86:2a:79:04:49:aa:38:41:3a:dc:7d:6a:b9:fc:
44:41:e2:4d:c6:da:86:31:ba:94:d5:8f:e6:e2:fb:
8c:4c:a5:99:dd:48:f1:28:98:03:15:97:98:68:a3:
20:5e:56:62:e9:af:cf:5a:4d:25:31:eb:fb:8b:c2:
b4:83:fe:14:41:bb:1e:fb:a9:3d:30:cf:5f:16:af:
a8:98:1b:03:56:20:e9:d2:6c:67:74:94:c1:54:7e:
3b:d9:d7:bf:a0:c6:69:97:71:21:42:f3:2e:4c:09:
c7:61:a2:87:62:eb:3d:db:4d:0e:ff:98:bb:cb:92:
08:f9:39:f8:4a:b7:c0:10:04:1c:a7:e2:a0:e4:c4:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E0:8B:63:98:2D:07:7A:B0:14:72:EF:58:9A:BD:53:F9:85:3F:3C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LuCLY5gtB3qwFHLvWJq9U_mFPzw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.147.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:91:33:09:46:0b:17:b9:6f:30:15:e3:b4:00:08:9f:07:00:
8b:81:e6:4e:14:e3:d6:3b:ea:dc:38:d1:8d:93:28:f7:17:86:
03:56:e3:b1:4f:f2:b2:00:70:d1:bf:fb:ba:b8:50:d4:3c:e4:
4f:aa:2c:0a:bb:8b:3e:5a:f1:5a:ea:b4:b5:e6:3a:71:f3:a2:
ba:bc:5b:a7:15:bc:05:fe:98:78:59:e3:62:40:ec:4c:14:ba:
ba:f4:54:8a:dd:b4:63:8f:d9:5b:a6:4b:27:a3:26:3d:18:e5:
b2:f7:bb:f6:c7:2e:cc:f3:a0:ab:93:41:e8:cb:fe:75:29:c9:
58:62:39:a5:10:88:cc:87:2a:95:4a:b8:b2:d7:d4:40:88:d9:
a1:bf:e4:de:c2:18:e9:d9:3c:ac:a9:d6:e2:60:7e:26:bc:5d:
6d:cc:da:03:7c:b0:a6:16:d6:51:fb:8d:0c:fa:e2:aa:51:ba:
1d:91:f9:fb:e2:5a:a8:fb:e9:08:00:a8:08:7c:5c:8d:0c:a6:
53:4a:b2:54:f3:53:9a:ef:a0:5d:e6:00:2d:0f:c1:96:1c:f5:
24:38:4c:8e:30:82:4f:0d:a4:fa:23:99:54:e4:f4:bf:1c:d8:
c3:8e:51:6e:77:7e:bd:17:59:7d:7c:88:c2:83:f9:9d:36:67:
bf:8a:14:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org