Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MLqeN0C8gf7jlgloS0oKHdDgaPg.roa
File: MLqeN0C8gf7jlgloS0oKHdDgaPg.roa (raw, json)
Hash identifier: MBL9trQyCdVH0iWSyP+lrD82+VwztMwr/BWAhn7fSGQ=
Subject key identifier: 30:BA:9E:37:40:BC:81:FE:E3:96:09:68:4B:4A:0A:1D:D0:E0:68:F8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19D8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MLqeN0C8gf7jlgloS0oKHdDgaPg.roa
Signing time: Sat 22 Oct 2022 06:11:52 +0000
ROA not before: Sat 22 Oct 2022 06:11:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.159.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6616 (0x19d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:11:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=30BA9E3740BC81FEE39609684B4A0A1DD0E068F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:98:54:70:95:f8:b0:6d:6d:47:13:b7:4d:
15:aa:6a:49:3b:ec:24:3b:54:9c:49:ee:31:69:85:
a8:aa:9d:77:b3:34:df:e9:5c:21:d8:35:7d:f4:bf:
58:17:89:6b:ba:37:97:79:32:74:00:39:8d:5f:9d:
10:ad:e3:ed:b3:88:89:57:ff:de:21:2b:7f:8a:63:
41:3a:a4:4b:dc:65:ff:d2:2c:d3:e5:02:9f:f2:a1:
6c:10:f5:b9:ca:55:e7:f3:54:a6:db:f0:77:11:b8:
83:b3:47:12:95:d5:a9:f2:f0:01:e0:48:68:00:3c:
4d:1c:99:50:7c:f1:1f:a6:b0:5c:c9:36:da:c3:f2:
b6:c4:2c:1d:5c:41:e0:fb:f6:02:12:38:52:9a:34:
ce:3a:4d:0e:ee:2a:91:1f:1c:df:1f:85:68:4f:a2:
93:d0:62:2e:50:08:88:cc:5d:3c:ca:b8:b7:62:ed:
50:b6:52:68:ae:a6:a1:bf:7b:9f:2a:81:2b:31:31:
41:f7:1d:5f:7f:ec:77:16:11:0f:39:e7:94:33:90:
28:7c:43:b2:f1:7c:3a:b6:6c:0e:10:01:2b:13:56:
a3:f5:89:f7:3a:93:90:d3:ba:b4:12:d5:bd:54:5c:
a1:25:11:ed:f6:97:ac:cc:13:24:bb:1d:38:d8:86:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BA:9E:37:40:BC:81:FE:E3:96:09:68:4B:4A:0A:1D:D0:E0:68:F8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MLqeN0C8gf7jlgloS0oKHdDgaPg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.72.0/22
Signature Algorithm: sha256WithRSAEncryption
45:55:7c:d5:17:c1:79:86:83:92:3f:93:8e:72:46:96:72:23:
4d:1f:b9:be:69:b5:f0:50:96:f1:d2:c3:03:e7:cd:70:a3:e4:
67:df:74:ca:6b:a0:3e:a6:e9:c5:54:fd:ad:c1:3d:bf:aa:d7:
67:5e:8a:c1:7b:9f:46:e5:a8:21:e4:8b:a0:de:d0:b3:32:37:
5f:76:66:d6:2b:ff:89:11:44:a2:1a:ba:e9:0d:fa:23:7a:43:
00:4b:16:29:3a:45:c5:e1:3b:07:cd:31:fd:06:91:9b:52:14:
63:54:d9:9a:d1:5e:df:82:81:10:69:56:a5:90:8e:61:98:47:
74:cb:e1:c0:08:c3:50:71:b0:6a:0f:4e:18:f5:09:ba:14:c1:
ea:a1:0a:d6:e9:bf:b8:b6:fe:21:b1:dc:55:e1:2f:76:c0:6e:
08:2d:8b:4d:df:36:ef:0a:87:e0:6f:e8:bf:2a:24:e9:ef:a0:
31:89:92:02:92:3c:cb:f9:3f:6a:9c:01:d3:77:fc:93:6a:51:
a8:c7:44:e0:82:c2:1d:9d:78:70:42:53:95:57:59:06:dd:3e:
d5:ad:df:9f:d2:62:1a:fc:2d:96:de:7c:a9:36:03:f8:c2:4f:
c1:21:96:44:e5:66:67:99:91:48:54:df:bd:b7:f6:b2:57:fa:
32:49:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:01 2025 by rpki-client