Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/T_ryx088_SGSVrM5Ft4nBUfGRCM.roa
File: T_ryx088_SGSVrM5Ft4nBUfGRCM.roa (raw, json)
Hash identifier: jghWe9CEpjscD8PNgIAkDQChxqP3Jax6l97RAi6E2Ww=
Subject key identifier: 4F:FA:F2:C7:4F:3C:FD:21:92:56:B3:39:16:DE:27:05:47:C6:44:23
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1009
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/T_ryx088_SGSVrM5Ft4nBUfGRCM.roa
Signing time: Sun 07 Feb 2021 12:37:13 +0000
ROA not before: Sun 07 Feb 2021 12:37:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.159.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4105 (0x1009)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:37:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4FFAF2C74F3CFD219256B33916DE270547C64423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:da:2f:d5:6d:6e:a2:18:a6:06:a8:2b:1a:e5:
ad:9d:ab:4b:3e:14:38:11:6c:f2:22:a0:b3:f6:e0:
45:18:0d:ca:90:f1:34:45:60:d6:4a:dc:f6:68:32:
98:06:44:f3:dd:a9:f1:60:26:08:d7:58:9d:d0:7f:
f6:58:42:0c:8f:4d:a8:57:f6:83:b1:68:9a:e7:93:
e5:d0:43:0c:25:0a:c8:1f:b0:30:ff:1d:69:ea:8d:
55:0d:51:69:8b:68:50:6f:1f:61:dc:ad:47:8a:5a:
b6:62:45:18:71:c4:2d:ce:1a:bd:82:95:e4:8a:a8:
81:f7:d0:70:4f:a4:f8:5f:bd:a8:4d:8b:39:de:08:
0e:fa:db:80:25:f0:df:04:d9:ea:cb:fb:81:c0:21:
cb:fb:44:fe:ee:8e:69:c3:99:26:81:c4:ec:52:a5:
86:62:6c:35:9a:53:da:36:fc:e1:eb:bc:06:a9:12:
57:e1:1e:80:6f:90:09:01:bd:f1:c7:11:f5:90:5d:
99:d2:a8:ef:ce:78:a4:d6:65:02:a4:e7:21:3c:46:
5b:2d:2a:3e:48:71:f9:f3:dd:67:bd:5e:a3:0a:23:
ac:0d:01:f0:b2:1d:3d:e5:6c:ef:e5:08:87:c9:5b:
fb:f1:92:2d:f0:79:9f:21:d3:40:bc:6c:01:4c:6c:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FA:F2:C7:4F:3C:FD:21:92:56:B3:39:16:DE:27:05:47:C6:44:23
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/T_ryx088_SGSVrM5Ft4nBUfGRCM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.76.0/22
Signature Algorithm: sha256WithRSAEncryption
63:17:92:1f:3a:8c:a7:d0:ad:63:e3:71:1c:d2:87:97:05:c0:
1e:b5:c3:0c:4c:bd:c0:a3:1d:74:5a:a5:90:a3:0b:82:fd:7b:
33:7d:c2:42:a8:4c:86:10:ea:01:46:ed:b1:4f:92:b9:91:de:
63:04:53:1d:87:8c:ab:09:6c:62:cb:cf:5f:c7:80:9d:76:b2:
38:fd:b3:53:ae:30:b2:bb:58:80:61:86:96:2a:71:23:c9:06:
28:34:d4:11:c0:7e:52:ca:10:b0:00:61:04:76:aa:18:9e:3a:
1f:e4:34:df:8c:56:2e:d5:40:b0:77:e0:8e:93:fe:e9:a3:e7:
be:de:f2:48:c8:3e:5e:c4:f0:78:f8:e4:7b:99:a9:5b:a1:5d:
4c:2d:23:0e:7e:b8:43:22:b8:c6:22:e4:8d:65:df:8c:37:64:
b1:e6:aa:11:45:cf:b8:60:70:e3:c6:e6:7d:a7:04:aa:f1:88:
8f:2b:7a:eb:bc:13:da:2e:f3:71:c0:a0:36:a8:e9:ea:ba:0e:
a9:35:8c:c8:49:78:0e:80:40:cb:e7:79:f8:83:54:9e:44:6f:
5b:92:a0:12:94:81:5d:27:a7:b4:45:4d:e5:02:e9:77:d4:a9:
86:cb:6d:21:e9:7a:5e:c3:60:77:86:37:54:7d:c9:22:f9:59:
26:9d:98:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:49 2023 by rpki-client on console-fra.rpki-client.org