Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vh34OCV60j0gjP0__V5f2bCXpnM.roa
File: Vh34OCV60j0gjP0__V5f2bCXpnM.roa (raw, json)
Hash identifier: kkkez0/sitATWeqSg+v/UUZK7Wso9hUZhWh7wYApCg8=
Subject key identifier: 56:1D:F8:38:25:7A:D2:3D:20:8C:FD:3F:FD:5E:5F:D9:B0:97:A6:73
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 190F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vh34OCV60j0gjP0__V5f2bCXpnM.roa
Signing time: Sat 22 Oct 2022 06:06:03 +0000
ROA not before: Sat 22 Oct 2022 06:06:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6415 (0x190f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=561DF838257AD23D208CFD3FFD5E5FD9B097A673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:2c:c5:6c:5f:32:e5:44:01:24:b8:7c:fe:
62:db:06:1d:54:88:29:6b:1b:07:66:18:02:d9:74:
40:65:df:8b:c2:1e:64:ad:6c:63:fd:9b:8f:2e:52:
ee:e3:c1:24:e0:89:fa:97:87:b7:57:0a:50:aa:67:
bd:54:0c:b9:19:ac:55:ac:cc:0a:92:f8:a1:a9:4f:
91:fc:1e:b0:fe:90:c3:41:f1:1d:77:4d:dd:0f:c0:
93:e9:cf:62:b1:37:1c:d2:4e:08:47:13:2c:79:c3:
ef:97:7c:71:4d:c8:f6:41:ec:7e:12:f5:29:48:d1:
8c:d1:c1:5d:e4:3a:ae:e7:fa:36:47:ba:e3:af:fb:
95:b0:8c:59:5d:59:a9:d8:97:1f:93:bb:8d:45:02:
22:15:0a:b8:b6:94:5f:a5:99:d2:e6:12:dd:92:d2:
5b:7d:67:5a:b3:88:75:19:00:15:82:24:00:d6:95:
44:6d:47:80:c5:fb:be:ec:dc:2d:ae:52:c5:c9:22:
a2:dd:44:28:61:9b:d6:57:58:d0:8e:9c:9c:0d:59:
10:37:de:d3:4e:7a:f0:17:55:e8:19:a0:b3:9a:77:
df:20:27:93:a0:c5:82:6e:da:b7:77:93:ab:79:2f:
fd:e8:2d:e6:97:af:f8:83:c0:b0:09:15:57:b4:98:
6d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1D:F8:38:25:7A:D2:3D:20:8C:FD:3F:FD:5E:5F:D9:B0:97:A6:73
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Vh34OCV60j0gjP0__V5f2bCXpnM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.16.0/21
Signature Algorithm: sha256WithRSAEncryption
82:dc:d9:d5:57:fa:89:e7:86:c8:77:da:31:26:53:05:ec:a9:
39:7e:dc:f9:47:26:7d:85:a8:2f:42:15:df:29:59:44:09:cc:
d8:b4:ae:cb:70:03:ef:83:c3:24:91:25:85:56:29:3c:4e:18:
40:6c:e8:89:4a:19:94:62:22:0c:cf:0b:48:3b:f8:83:81:12:
55:cb:df:44:f3:99:82:5b:2f:c8:b9:89:0d:c7:76:4d:7f:94:
f0:e8:a8:38:cd:d0:c5:58:45:ea:aa:8d:0a:93:3c:7a:b6:10:
e5:2e:55:43:d0:00:4f:b3:90:9b:53:9e:81:85:b0:f4:65:b5:
75:cf:0a:c2:3a:91:7f:9b:c9:89:cb:78:e0:07:3f:82:73:0d:
f7:20:af:c8:c0:00:57:7c:9d:fb:ac:37:ad:73:0c:12:da:35:
ba:f4:44:ea:e1:0d:50:96:52:02:b1:d1:f0:1a:ae:f0:8c:12:
60:d9:9c:1c:97:49:67:90:4c:3d:95:e3:6c:f9:15:5d:e7:35:
c4:44:d0:f4:60:ad:ff:39:d2:db:b7:3d:5e:e2:34:b2:c7:43:
3b:f6:cf:de:83:7e:74:8f:f9:6b:27:04:1e:95:3d:93:dc:40:
fa:ae:fe:a8:e3:39:a9:5d:c5:4d:8f:80:74:a8:6d:11:31:1f:
e0:71:fa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org