Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SCYj1sX3jVP6z9vEbI-4neTJdsg.roa
File: SCYj1sX3jVP6z9vEbI-4neTJdsg.roa (raw, json)
Hash identifier: L+vyeKms5pQpRTg7jMduDGTuePJaGZUwooyX/SbSH4c=
Subject key identifier: 48:26:23:D6:C5:F7:8D:53:FA:CF:DB:C4:6C:8F:B8:9D:E4:C9:76:C8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1296
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SCYj1sX3jVP6z9vEbI-4neTJdsg.roa
Signing time: Wed 29 Sep 2021 02:54:45 +0000
ROA not before: Wed 29 Sep 2021 02:54:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 49.158.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4758 (0x1296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=482623D6C5F78D53FACFDBC46C8FB89DE4C976C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:76:14:98:5a:20:00:40:18:08:9c:4d:a9:
bc:ef:7a:49:fa:31:65:f2:72:0e:2a:89:81:f7:6b:
ac:9e:50:a5:7b:f9:da:8e:58:82:a8:64:78:97:47:
79:da:a9:9a:c0:59:39:6c:16:9b:b8:27:22:8e:a7:
20:e6:bf:88:dd:e7:dc:fa:d2:8f:33:9a:1b:3e:be:
ab:75:4c:da:10:6a:97:31:d2:1b:85:5f:d4:07:0e:
18:94:3d:82:4d:59:77:30:52:17:e5:18:a3:cf:af:
50:95:be:7d:fd:68:88:f0:c6:e0:86:38:86:17:02:
bf:14:6e:e4:e9:d8:fa:2d:7c:dd:d7:7b:35:d9:f3:
fc:18:07:84:77:49:19:00:a8:ba:b8:22:2b:b7:44:
85:eb:7b:b8:0e:7d:19:6e:6c:16:2b:41:a4:12:a8:
17:98:0b:66:e3:37:0d:01:77:77:28:20:00:e9:8d:
b4:77:9c:64:db:fe:ce:18:60:b7:64:76:0c:45:6d:
01:30:f7:3e:b1:e6:f9:34:26:a2:1e:3c:96:a0:06:
42:e4:29:b3:da:05:83:d7:1d:8d:8c:c0:52:9d:0d:
e2:ea:84:45:01:5f:75:0e:cb:52:46:39:4c:48:0b:
76:ef:37:62:85:5c:bd:4d:2a:03:bf:09:f6:ea:93:
a6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:26:23:D6:C5:F7:8D:53:FA:CF:DB:C4:6C:8F:B8:9D:E4:C9:76:C8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SCYj1sX3jVP6z9vEbI-4neTJdsg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.152.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:ae:2a:0b:49:d2:e7:e8:7b:48:a4:53:a1:f7:e3:ae:95:6e:
a5:16:8a:8c:71:75:40:14:d6:60:7b:f8:cd:7b:c0:86:ec:ad:
51:d0:10:c3:13:00:a5:95:4f:d0:5b:33:7a:73:89:7d:7b:69:
d8:73:c6:3a:a0:29:ff:ab:e3:f8:ac:00:fe:88:26:28:fb:ce:
e9:4c:85:0d:27:75:81:6b:4e:2f:25:ec:98:f1:05:e7:48:c9:
ae:9c:f0:58:f6:08:94:74:89:77:c5:05:14:4d:3f:5e:8b:e8:
94:ba:28:68:ef:c3:c0:be:a4:99:92:ee:b8:1d:f8:e3:dd:0f:
b0:d2:11:2f:04:a5:96:50:70:f7:d8:e3:20:9c:3e:c1:62:2e:
a9:f6:98:7a:b5:42:a2:93:74:50:a9:6b:3f:47:79:24:43:bf:
62:2e:74:27:dd:e1:35:8b:37:99:cc:0f:3b:a1:81:08:55:6f:
cc:e3:73:d5:5f:e6:02:10:1b:83:f6:10:10:45:60:1c:79:4f:
3f:48:a5:c9:4c:60:22:ac:92:9c:9f:51:cb:a1:33:7a:c8:cb:
d0:21:91:2d:f2:22:f1:59:bb:a3:04:39:29:de:d8:2c:12:e5:
ae:a8:da:1c:4d:89:ac:a4:2c:9f:2c:63:2a:29:86:4f:e9:04:
93:77:24:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org