Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SVT98jgTttLCkNHclG08BdQRJXM.roa
File: SVT98jgTttLCkNHclG08BdQRJXM.roa (raw, json)
Hash identifier: OMDDf+EpNX91R5n1+XtFIgG4Q+SFhVti1X1YKRfThSM=
Subject key identifier: 49:54:FD:F2:38:13:B6:D2:C2:90:D1:DC:94:6D:3C:05:D4:11:25:73
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AB5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SVT98jgTttLCkNHclG08BdQRJXM.roa
Signing time: Tue 29 Sep 2020 10:07:31 +0000
ROA not before: Tue 29 Sep 2020 10:07:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2741 (0xab5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4954FDF23813B6D2C290D1DC946D3C05D4112573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f7:ee:fe:09:d2:b9:1d:2b:3c:94:d0:08:1a:
ac:69:90:f8:49:dd:09:78:fa:04:08:44:82:6c:25:
ac:9a:72:95:9f:bb:b4:3b:6a:48:3e:45:2c:fb:0b:
7c:24:74:5c:11:ba:d1:ed:70:a6:27:14:a0:3d:fb:
56:98:2a:4c:ac:73:bf:33:38:22:c9:68:9c:90:ac:
cd:9a:ef:8d:ae:c5:c4:75:93:65:b7:06:5e:65:ea:
26:b2:37:73:e3:85:73:06:0e:82:45:43:fb:e8:ca:
13:26:a6:e7:b2:39:41:f9:71:c8:7e:fe:19:08:1c:
e7:53:e1:6b:72:29:bf:73:4a:9e:75:c1:01:0c:52:
2d:b0:a4:21:b1:f0:a4:e5:a0:a1:50:f5:af:b8:cc:
9b:cf:9f:6f:3e:d5:33:ee:d2:fe:68:41:b9:c9:48:
c8:ed:e0:00:4c:b1:13:08:c2:fa:12:d9:79:a2:b0:
a2:af:95:da:44:fd:f5:bc:e9:36:70:ba:d6:ca:f5:
2a:33:5a:4e:17:9a:61:c5:bd:9d:ad:36:91:72:00:
c7:1d:88:e8:c2:7a:a6:31:be:d4:dc:59:d1:e2:fe:
0c:9b:55:0d:98:3f:04:e9:57:61:6a:88:5d:42:f0:
01:ad:ad:a7:6e:1a:04:59:d6:44:43:5c:01:88:da:
2c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:54:FD:F2:38:13:B6:D2:C2:90:D1:DC:94:6D:3C:05:D4:11:25:73
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SVT98jgTttLCkNHclG08BdQRJXM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.120.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:c1:41:5b:f1:7e:65:47:ef:a6:e7:5b:e8:2e:11:1f:67:9d:
62:68:b3:80:cd:f3:de:8c:d4:de:81:07:8f:a4:34:08:1b:60:
b2:16:9a:7a:be:fa:14:34:57:be:02:c3:d5:65:36:7a:a6:40:
e1:c2:96:97:17:f1:81:8a:cf:a9:ec:43:e9:b5:f5:c9:1d:cd:
d8:ec:b2:7a:a9:35:a6:e8:da:99:ca:9b:78:e4:c0:b4:69:91:
1d:95:2e:ff:f3:5e:e8:e5:4f:d9:46:bf:69:b1:fb:86:77:be:
63:74:a0:2c:c0:49:16:d0:a4:7f:b6:27:4b:fe:cb:ff:35:4b:
f1:62:58:20:38:3d:f3:26:30:7e:62:2e:f3:61:83:3f:7c:41:
46:62:e4:6d:fe:39:60:17:75:e7:33:16:03:38:b4:42:b4:15:
e4:86:83:d9:1f:db:8f:ca:12:9a:b7:d3:8e:d8:f0:39:ea:3e:
72:b2:f3:24:8d:92:36:77:b8:6e:ed:99:1d:cc:2d:a5:8b:34:
0a:e0:b5:c8:ed:47:df:80:b4:3f:5a:04:0e:3d:d1:a6:c2:85:
aa:e9:4f:1d:d9:cd:87:b3:a6:8a:ec:74:5e:b7:16:72:26:ee:
16:1d:6b:f0:3e:f0:e0:95:ea:87:a9:8f:fe:a9:e0:c3:a6:c7:
9c:5c:db:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org