Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SqQsb_-BadkgHI4iXyiGtX6BVV0.roa
File: SqQsb_-BadkgHI4iXyiGtX6BVV0.roa (raw, json)
Hash identifier: CE0nwPqznT+O8wwfSL+GXpgE7sLowARQCkuxWtgc4yc=
Subject key identifier: 4A:A4:2C:6F:FF:81:69:D9:20:1C:8E:22:5F:28:86:B5:7E:81:55:5D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SqQsb_-BadkgHI4iXyiGtX6BVV0.roa
Signing time: Thu 15 Sep 2022 02:36:12 +0000
ROA not before: Thu 15 Sep 2022 02:36:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4AA42C6FFF8169D9201C8E225F2886B57E81555D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:5b:e9:31:04:04:7a:97:2b:e6:d5:c8:e9:
31:43:9c:6c:22:6d:f0:ae:3a:ca:9c:c0:33:31:8b:
95:09:8d:8d:d3:00:04:be:a3:9e:68:3b:6e:5a:b2:
2f:31:7f:20:d3:24:8c:f5:c8:98:60:93:a9:8c:2b:
1c:29:20:5a:be:d9:fb:5c:e3:2b:83:af:2e:fc:4b:
a0:7e:8c:8d:c7:d2:87:aa:55:db:32:05:2f:40:5c:
9a:bc:5d:3f:7f:d1:cd:1d:fc:6b:8c:3f:fa:dc:1e:
ce:ec:f4:c4:46:82:81:14:13:10:27:df:06:64:00:
47:28:33:6e:ef:a1:b5:b4:41:dc:12:0a:2b:03:87:
20:a8:3a:42:1b:61:57:09:46:5f:92:4a:c5:81:86:
2b:1a:67:49:14:a8:a5:a3:5e:a0:e4:2d:07:08:c4:
10:53:c4:ec:b2:46:99:24:c7:32:b2:25:4d:75:fe:
08:2f:07:47:62:e4:c9:16:b1:9d:52:ec:68:07:0c:
9e:c9:b2:c6:c5:a3:55:b7:81:29:7c:50:f0:01:32:
43:1a:64:9a:e8:4c:23:69:ca:e7:ee:02:3d:b4:21:
f2:72:86:8e:30:ec:45:1c:e9:bf:81:b4:9b:02:23:
23:d5:8d:45:fe:ce:09:70:a7:9f:40:b8:93:51:e9:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A4:2C:6F:FF:81:69:D9:20:1C:8E:22:5F:28:86:B5:7E:81:55:5D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/SqQsb_-BadkgHI4iXyiGtX6BVV0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:1b:c9:61:35:eb:99:09:78:44:65:ee:04:b8:80:9a:33:7c:
fe:db:9a:ce:89:a7:ef:6e:48:05:22:ea:ea:aa:11:ec:35:00:
c8:b6:0d:77:92:e7:6f:44:87:34:b4:a8:f4:38:12:8e:0c:c6:
68:c9:e2:82:fb:c1:00:55:b7:2a:87:fe:dc:c7:c5:c4:25:00:
17:83:f9:22:fe:3f:ab:be:91:a9:42:39:1b:ad:3a:4a:52:cf:
e2:7b:c6:f5:13:33:ad:90:83:da:75:70:d9:be:41:ef:43:b5:
46:24:cd:43:b5:61:62:9a:7e:16:33:88:b2:3c:a8:e9:9c:9c:
f6:96:ce:30:69:71:96:9a:4d:09:a1:3b:db:7d:ad:ca:00:b3:
93:d1:e5:46:dd:f8:a0:51:11:e9:66:6d:68:03:df:2b:3a:c7:
d7:a0:bd:07:0e:21:a5:5f:44:0c:cc:91:96:16:be:8c:d4:fc:
b9:5a:48:ad:47:19:61:07:01:61:fa:bd:07:f7:cd:d6:04:e4:
76:22:0e:8e:dd:ad:1e:e6:56:05:33:b3:35:e7:2a:71:ce:5a:
ee:28:16:bc:7e:60:a1:50:6b:f4:a1:99:d6:fa:31:16:e7:de:
6e:d1:1a:f8:72:85:94:b9:8d:f0:07:55:46:b3:c0:d6:ed:7c:
58:8d:fc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org