Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ObrS2PyaNs6BpTySK8wSCv0sldQ.roa
File: ObrS2PyaNs6BpTySK8wSCv0sldQ.roa (raw, json)
Hash identifier: 0bJRz0Fwya3IzyuvcrAYS+jC4xrTPWyc6yUFLzYyuTk=
Subject key identifier: 39:BA:D2:D8:FC:9A:36:CE:81:A5:3C:92:2B:CC:12:0A:FD:2C:95:D4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B2D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ObrS2PyaNs6BpTySK8wSCv0sldQ.roa
Signing time: Tue 29 Sep 2020 10:08:06 +0000
ROA not before: Tue 29 Sep 2020 10:08:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2861 (0xb2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:06 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=39BAD2D8FC9A36CE81A53C922BCC120AFD2C95D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:da:b4:75:17:04:44:2c:d2:d5:8b:37:52:
7a:4c:ea:bb:e7:35:2a:12:71:00:0e:44:2e:18:4d:
46:fb:9b:89:ae:a4:32:41:a9:77:e4:6d:ad:81:1e:
10:c3:bf:4c:e5:32:3a:f6:7f:99:3e:b2:cf:73:f7:
05:05:0e:18:e9:58:3b:60:b2:f7:4a:53:0b:15:e0:
4b:2e:da:d2:76:87:55:24:04:61:0e:f6:b0:99:d5:
a6:d9:7e:69:36:4e:f9:e3:06:45:23:2d:64:6d:b1:
76:ff:14:ae:5e:b0:0b:77:b8:79:ce:b4:e0:fe:07:
4f:f8:66:4b:07:4d:87:72:61:1e:bd:ec:7c:14:29:
91:46:99:9e:17:f5:e2:b3:c8:8e:fa:99:6b:e9:83:
ca:92:95:13:4d:e0:90:d2:cb:be:5a:89:fa:72:ff:
b4:ed:a5:5c:42:8d:d1:7d:03:07:6b:eb:a7:75:6e:
f9:03:64:6e:24:02:01:4d:a1:6b:30:25:9d:8d:72:
54:4f:1e:c7:05:42:67:06:3c:30:f9:68:22:3e:27:
b6:a8:5c:95:2b:ed:84:d9:b9:a4:01:d1:d8:3e:75:
de:c9:b6:c9:71:d6:03:51:99:63:9c:5b:05:aa:76:
71:5b:ec:ea:13:af:a8:ff:b8:74:ab:e9:c4:02:08:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BA:D2:D8:FC:9A:36:CE:81:A5:3C:92:2B:CC:12:0A:FD:2C:95:D4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ObrS2PyaNs6BpTySK8wSCv0sldQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.248.0/21
Signature Algorithm: sha256WithRSAEncryption
68:a8:63:c5:21:b9:e9:09:71:c5:ca:86:b0:81:33:1d:d8:dd:
50:99:6a:52:9c:e8:5a:2b:db:cf:98:a4:1d:f5:09:7a:f2:ea:
99:3f:30:89:0c:1a:01:4b:74:e4:fc:64:90:62:8c:87:53:33:
18:fd:0e:16:9a:a0:39:2d:a0:5d:e2:d9:c2:38:2f:5d:e4:47:
8e:44:60:7e:44:2e:b7:6e:4c:bd:39:5b:2c:7e:6c:92:87:2b:
83:98:b0:08:89:86:e7:0f:15:2c:c6:26:7a:dc:c4:74:d3:4b:
5b:c3:a5:06:49:2d:df:22:b7:f5:cc:d3:d1:aa:9d:0c:28:75:
9d:19:4a:cb:fd:b1:3f:19:68:e9:e3:df:41:cc:21:31:a8:b6:
26:6e:6d:d3:4d:52:cc:3b:38:93:83:f3:72:2b:17:89:3f:f3:
d9:4a:95:a1:72:76:a9:95:aa:2a:37:cb:aa:ba:14:b5:39:99:
92:a1:cf:7b:79:c8:47:0e:9d:79:df:08:1b:10:6a:92:22:b4:
a3:74:c6:a1:a0:3d:7a:d2:22:f2:51:48:27:2a:18:5f:7e:ae:
ad:36:88:71:f1:8f:9b:f2:d8:1a:3c:78:aa:3e:ae:f3:87:45:
ea:0c:53:94:4b:ba:ba:94:38:5e:46:49:89:64:81:ad:10:a5:
64:f1:b9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org