Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OtFmugDH2J5DfdiwJ0GvADss47U.roa
File: OtFmugDH2J5DfdiwJ0GvADss47U.roa (raw, json)
Hash identifier: 1vlJy4UTmamaX27HZjkSKqCzHQMyGGBrsgQ6IsKbxdE=
Subject key identifier: 3A:D1:66:BA:00:C7:D8:9E:43:7D:D8:B0:27:41:AF:00:3B:2C:E3:B5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OtFmugDH2J5DfdiwJ0GvADss47U.roa
Signing time: Thu 15 Sep 2022 02:36:23 +0000
ROA not before: Thu 15 Sep 2022 02:36:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.159.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3AD166BA00C7D89E437DD8B02741AF003B2CE3B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:23:fd:e3:a8:71:2d:14:5a:98:64:b1:e2:44:
53:ab:27:97:25:07:21:a0:f4:07:d0:c4:6d:41:74:
c5:27:1a:0c:13:e4:d4:01:19:02:92:86:0b:72:49:
28:ae:71:d3:a4:3c:8f:db:db:b6:1e:c1:a1:92:8a:
f9:93:9c:b0:3d:8c:f8:3e:cf:32:d2:cb:59:3b:5e:
6b:49:49:43:0e:9b:79:e7:97:10:4a:73:91:51:5e:
ee:a5:cd:6f:a0:e3:81:57:e5:83:2b:26:ce:15:2f:
3d:9f:7d:0e:e6:5f:f6:55:1e:1b:df:32:cb:3c:56:
43:e9:75:92:be:42:25:5a:3d:c9:22:ca:55:39:dd:
f1:12:fa:80:93:b7:b6:a7:94:8d:65:73:ac:0b:f9:
99:70:f4:83:7e:c9:75:50:45:ad:72:47:ca:59:3a:
93:5e:4c:c0:b8:b4:6a:c6:45:ee:f4:97:c4:5d:be:
96:7b:bf:32:64:6c:03:19:15:b9:0b:98:29:31:be:
2b:f0:af:c8:a2:60:53:52:3b:88:c1:34:30:15:b9:
54:35:9c:74:a5:d2:9a:9c:2f:43:1a:d6:22:81:26:
2c:db:cb:ac:f6:9c:53:28:d8:a8:51:82:79:a0:d6:
36:f6:51:1a:3a:e8:bf:cb:97:5a:3e:23:43:e1:c5:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D1:66:BA:00:C7:D8:9E:43:7D:D8:B0:27:41:AF:00:3B:2C:E3:B5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OtFmugDH2J5DfdiwJ0GvADss47U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.180.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:a8:63:f7:d2:fc:c3:6a:ad:a6:dc:5b:c4:e0:f1:17:3f:7a:
a2:2d:47:e4:7c:b9:c6:67:4e:3d:c2:2a:b3:67:4a:22:41:9d:
b8:9a:fe:03:3b:88:1d:56:36:d5:05:e1:4d:ff:f1:90:d2:29:
d8:0d:0b:d5:0e:73:12:d3:97:ca:a1:00:e7:52:cb:9f:31:ce:
6c:bf:d1:49:02:c8:4e:02:89:39:9a:d9:6e:c5:d2:82:7c:64:
4b:e2:36:f8:7b:63:62:7c:e1:1e:ad:0a:73:f4:04:d4:6b:68:
00:4b:67:28:9f:fb:d6:bc:5c:26:bb:07:ce:81:e1:c1:a7:34:
af:df:d6:8c:53:e1:01:b7:b6:cd:eb:78:4a:2e:10:e0:35:6d:
4d:e6:e3:c6:61:e0:04:72:c6:60:af:d3:ae:fe:4c:a2:2e:ec:
ae:14:57:a8:53:69:c2:31:2f:72:41:05:83:60:e6:ba:d7:25:
27:d3:03:07:25:cd:5f:29:56:eb:29:56:77:b6:9b:09:3a:8e:
9b:90:e3:1e:b7:33:51:93:fa:9e:cd:04:73:cd:1d:b1:9e:0d:
28:47:dd:fb:86:56:4c:a2:9a:5b:51:56:28:1e:3d:ff:c6:7f:
b8:4a:50:93:94:46:94:29:71:43:c5:9d:eb:16:62:e9:c8:61:
0d:2c:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org