Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VWIP7U-mo8lIU3e0FKZBbU8EJfA.roa
File: VWIP7U-mo8lIU3e0FKZBbU8EJfA.roa (raw, json)
Hash identifier: nJNwvT73nRZJ/rH4lzVK/ihSFGzyNY2zV0TJCneAzvM=
Subject key identifier: 55:62:0F:ED:4F:A6:A3:C9:48:53:77:B4:14:A6:41:6D:4F:04:25:F0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19AE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VWIP7U-mo8lIU3e0FKZBbU8EJfA.roa
Signing time: Sat 22 Oct 2022 06:07:53 +0000
ROA not before: Sat 22 Oct 2022 06:07:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.159.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6574 (0x19ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:07:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=55620FED4FA6A3C9485377B414A6416D4F0425F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:52:88:90:76:31:86:84:d5:2a:a8:39:87:
fc:a8:9e:9a:67:81:2d:be:f3:95:88:92:5c:9d:1f:
9f:50:14:77:9e:7c:40:36:39:eb:52:a2:49:30:95:
50:80:43:dd:a4:4b:02:51:d8:ba:90:22:aa:89:0d:
c4:09:71:b8:2b:d2:b2:5e:1e:a0:5b:c4:14:4f:52:
92:e5:e6:67:db:53:50:44:f0:45:bf:a0:42:08:0a:
6f:7e:4e:00:c9:56:01:a5:01:b1:00:d8:b0:73:0d:
6c:93:7d:48:48:d8:f6:b2:99:1f:16:7f:55:17:e8:
17:4b:d9:4d:2f:98:1d:db:2d:a9:35:bc:17:22:2e:
9f:d3:fc:de:71:e8:10:c5:d0:70:9c:fe:54:c6:aa:
40:16:cf:39:7f:59:44:af:a8:05:c4:3f:7f:ad:25:
14:c3:cd:d7:f9:c9:19:a7:7d:ab:db:70:4e:64:b8:
72:a9:9a:dc:5d:81:29:67:0e:e1:7d:1e:87:f1:a1:
a5:2e:8c:a6:84:61:64:b1:04:7b:19:3e:14:54:c7:
5f:65:6a:6f:f8:9f:b4:e9:b4:7f:63:8b:d8:ee:3b:
82:6a:d0:dc:05:74:f9:47:e4:f9:bf:b7:b5:68:05:
06:45:be:0e:86:45:ac:0b:8c:c6:2d:38:83:3d:3c:
8f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:62:0F:ED:4F:A6:A3:C9:48:53:77:B4:14:A6:41:6D:4F:04:25:F0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VWIP7U-mo8lIU3e0FKZBbU8EJfA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.208.0/22
Signature Algorithm: sha256WithRSAEncryption
28:9f:21:5d:96:21:59:fa:4f:b2:2d:a8:92:d6:c1:fe:97:3e:
df:0a:35:4d:fc:f3:ff:05:88:fc:7a:b6:cf:79:81:8b:10:8c:
ad:9d:33:1d:b3:6e:a3:1c:2b:fe:76:1e:4a:78:2a:ad:2c:c4:
0c:e0:8d:dc:27:06:4b:10:0f:7e:64:23:c9:8f:dd:d9:6b:4a:
a5:93:2b:41:3b:da:a8:c5:89:5d:9d:bd:97:16:06:24:66:92:
78:b5:4d:4d:d7:79:82:82:7c:f7:26:e3:50:b7:6a:8c:20:65:
64:a1:ac:41:da:36:94:a0:48:92:77:91:5d:0c:10:da:a3:04:
7d:30:e0:17:13:a3:76:6b:f0:7a:7c:08:20:7c:3a:c0:c7:c6:
83:4f:0b:ba:6f:5f:75:c0:b1:bf:ac:b8:b4:68:78:ec:69:27:
48:73:83:21:35:c2:06:85:69:4f:60:d8:3f:a2:78:de:0c:9b:
e3:1a:3b:99:bd:07:b9:32:59:bd:00:6d:97:7f:9b:8d:e2:9a:
a3:cd:fe:46:19:7f:8b:b2:2e:83:a2:5d:e2:45:3f:5d:7e:d5:
46:79:a4:3b:75:d6:73:6c:77:51:e4:c7:bd:89:5a:e6:49:f0:
cb:b7:19:43:fe:70:94:52:7e:2c:f9:e5:0c:b6:07:46:af:c4:
c6:81:d8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org