Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SZz-PjGvt3U1lOBI00cJqO0RddA.roa
File: SZz-PjGvt3U1lOBI00cJqO0RddA.roa (raw, json)
Hash identifier: kwTJFidfmQHbwrqWxSB/WgaiSsmnuMkpcux2gU4QEc8=
Subject key identifier: 49:9C:FE:3E:31:AF:B7:75:35:94:E0:48:D3:47:09:A8:ED:11:75:D0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SZz-PjGvt3U1lOBI00cJqO0RddA.roa
Signing time: Thu 15 Sep 2022 02:36:04 +0000
ROA not before: Thu 15 Sep 2022 02:36:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.16.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=499CFE3E31AFB7753594E048D34709A8ED1175D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dd:c2:53:ee:25:31:b7:f1:32:4b:ff:3e:6c:
26:8f:f5:4f:66:3a:78:16:0b:ce:b1:5b:5e:5f:ca:
e0:7a:92:4c:b2:4f:71:64:d7:0b:a1:c0:93:8b:79:
af:2c:b4:8a:32:29:08:97:a4:bf:6b:c2:cd:00:9a:
a9:82:9f:d7:b2:69:bd:e7:ec:22:f3:ac:40:b9:fb:
04:e0:b7:da:aa:49:cb:9d:38:70:ae:f7:1a:1a:ed:
1b:ab:fe:e9:a6:47:8a:8b:d4:ef:3c:5e:33:ee:8d:
ec:b1:60:6b:93:97:45:83:62:5b:76:22:be:ca:8d:
47:93:74:63:4a:be:6f:0f:22:a1:93:c3:8a:c2:74:
fd:ee:2c:0a:df:69:74:7d:d9:51:f1:ef:1e:72:c5:
28:3a:5b:24:64:3d:93:ec:b7:a3:1a:ba:7a:36:ea:
85:f2:96:b5:15:98:92:d5:3e:b8:75:66:e7:f7:e4:
b4:a0:48:98:ef:78:d9:df:16:ce:98:47:e0:bd:82:
b4:f4:bc:5d:ba:36:cb:d8:85:d3:e9:bb:22:71:39:
8c:7d:c0:80:72:3f:4f:8c:a3:a4:32:8f:e0:7b:37:
a7:ac:f2:0d:57:e7:46:e9:16:9a:d7:2c:0b:80:60:
50:dd:90:3d:65:0b:a0:d5:df:55:d9:d9:07:14:1a:
bc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9C:FE:3E:31:AF:B7:75:35:94:E0:48:D3:47:09:A8:ED:11:75:D0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SZz-PjGvt3U1lOBI00cJqO0RddA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.16.0/20
Signature Algorithm: sha256WithRSAEncryption
55:48:98:16:59:90:e5:b0:60:d0:86:d4:aa:38:b5:93:fc:66:
0f:1f:e6:cb:b2:cc:51:e2:0b:46:76:12:3b:2f:22:4f:c6:5a:
6d:ce:41:c2:91:39:7f:ad:86:75:22:10:33:83:53:2b:9e:c8:
53:af:e1:45:8f:cd:4f:df:af:3e:5c:4a:15:35:b5:4e:65:96:
1e:49:d7:b2:7d:42:c1:b0:2b:5d:d2:2b:0d:15:a5:fe:48:e2:
5a:55:d7:cc:16:a9:5b:be:ce:c3:71:48:6b:c1:54:89:87:75:
f2:b4:74:ca:32:bd:7e:b5:5f:c2:58:d5:9a:62:47:e2:a4:45:
f4:2e:16:3a:2b:0c:57:61:7d:ab:12:0b:cd:11:94:02:44:f3:
37:3b:5f:4a:7d:7e:03:00:d0:dc:b3:2a:e3:7a:a4:c5:4f:f0:
f4:dd:56:7a:be:88:bc:c1:12:16:b8:38:00:d9:21:04:cb:9a:
84:ad:a8:f9:0a:3d:b0:c6:6c:b3:a2:68:68:1f:f1:30:bf:b7:
dd:58:e0:80:b5:b6:8f:1c:8f:79:cc:75:0e:07:14:2c:18:2b:
9c:8c:ef:3e:82:24:41:17:39:5c:50:84:9b:b1:78:99:dd:f4:
35:65:73:dc:76:9a:f5:fe:e7:0c:4f:e7:02:fe:bc:22:65:61:
54:b4:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org