Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UUTgBqFDQtlicchEo92EClAaqjY.roa
File: UUTgBqFDQtlicchEo92EClAaqjY.roa (raw, json)
Hash identifier: 9gw7iMSPfeO+54knru+tUcFDqUS3GAXC3TXIGGmy+CI=
Subject key identifier: 51:44:E0:06:A1:43:42:D9:62:71:C8:44:A3:DD:84:0A:50:1A:AA:36
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1921
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UUTgBqFDQtlicchEo92EClAaqjY.roa
Signing time: Sat 22 Oct 2022 06:06:08 +0000
ROA not before: Sat 22 Oct 2022 06:06:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6433 (0x1921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5144E006A14342D96271C844A3DD840A501AAA36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:68:b7:fa:86:66:5c:cb:20:2e:e7:5c:2b:d1:
03:a8:bf:7a:61:a2:0c:91:99:13:e1:86:6e:80:b4:
01:c4:77:b9:a9:24:14:74:0a:4a:66:60:3d:f6:bc:
27:99:99:0b:65:a4:14:e0:f3:99:74:53:39:e1:e3:
a6:ba:45:d8:e0:fe:06:5d:c3:df:a2:03:30:93:16:
e4:fb:b0:57:a0:eb:33:fb:83:02:c4:e9:5a:5f:20:
37:35:dd:47:1f:d3:0a:04:da:de:d9:e0:71:12:2e:
97:17:ca:95:fa:33:30:2f:ec:a4:5e:4e:17:1b:b4:
cd:47:52:5b:14:05:18:9c:c6:1a:6f:5c:e4:1e:dd:
1d:8a:37:e1:33:9f:64:61:ab:0e:35:49:b1:9f:94:
14:51:4a:d5:64:93:9c:01:ac:f5:95:43:22:7d:04:
f5:15:ef:a1:0b:f6:0d:a6:06:d7:3b:0f:16:7d:68:
be:4b:d4:e3:ce:66:79:76:fe:fa:95:0b:7e:d9:a7:
d9:04:cf:86:69:61:d9:fa:34:7d:1a:66:fb:85:9c:
00:1d:1e:53:c5:01:28:96:6d:58:2f:28:bb:4e:08:
ba:99:3e:7f:c0:e2:d2:04:51:1c:3d:b6:65:5f:4f:
95:a2:8e:8e:f5:e4:20:fe:6d:4a:45:34:8d:76:8d:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:44:E0:06:A1:43:42:D9:62:71:C8:44:A3:DD:84:0A:50:1A:AA:36
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UUTgBqFDQtlicchEo92EClAaqjY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.80.0/21
Signature Algorithm: sha256WithRSAEncryption
46:2c:08:a5:24:08:0e:40:bb:a0:f1:52:d4:f2:5c:2a:e5:cf:
1d:12:ba:05:5c:37:ea:e9:0a:47:f9:f4:35:e4:21:22:58:51:
87:cf:68:1c:8c:56:e3:75:0e:dd:01:a0:0d:57:99:a1:94:cb:
b6:fc:75:56:07:c4:fa:d3:13:c4:d5:86:cb:1c:d2:71:4f:90:
3b:7b:a7:83:85:f9:d5:ad:f3:61:26:d0:f0:b4:04:d2:ae:39:
cd:d8:02:f7:82:82:6b:65:10:f1:15:89:6d:83:9a:18:7e:ac:
6b:b4:62:64:20:d4:73:8b:48:5d:98:e4:79:c4:ff:93:96:6c:
b5:72:70:78:c1:a0:c4:75:1f:2b:bb:00:5f:b7:b2:08:27:04:
0f:5e:61:e5:eb:6d:2a:2f:86:b5:f2:73:d3:e3:2a:15:13:12:
c5:df:8a:cc:85:41:12:66:29:e7:5e:2b:0b:86:91:ab:b1:d6:
e9:49:7b:3c:03:9b:ca:4e:86:69:3a:65:09:b9:30:bc:1c:1e:
94:91:c3:f6:6e:c7:fc:56:7d:fd:97:9c:27:54:82:e7:dc:54:
6f:50:af:e7:10:b5:c4:3f:30:32:e4:f3:51:d8:02:18:ac:5d:
2f:3f:b5:b9:a1:c8:1f:91:5f:08:2e:c6:13:8b:31:aa:b3:ce:
6c:c3:32:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org