Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WSuRn7QV0vfcpSwp2pHVn17D240.roa
File: WSuRn7QV0vfcpSwp2pHVn17D240.roa (raw, json)
Hash identifier: A8YtYakkzXMljoytJ5I3g7beNplk9vtAo4YqRkWcKVI=
Subject key identifier: 59:2B:91:9F:B4:15:D2:F7:DC:A5:2C:29:DA:91:D5:9F:5E:C3:DB:8D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B17
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WSuRn7QV0vfcpSwp2pHVn17D240.roa
Signing time: Thu 02 Feb 2023 06:50:44 +0000
ROA not before: Thu 02 Feb 2023 06:50:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.158.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6935 (0x1b17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 2 06:50:44 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=592B919FB415D2F7DCA52C29DA91D59F5EC3DB8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c1:0d:d6:63:9e:4f:8e:d0:db:d8:e1:20:da:
9f:d4:1b:1c:ec:d2:d7:37:69:84:7c:18:e5:7f:8c:
22:04:90:01:40:35:31:c2:9f:79:20:66:8c:eb:f9:
41:26:d5:c6:56:6f:99:8c:4b:8a:ae:96:6d:64:a0:
cb:03:c2:25:79:9d:e9:01:29:bb:12:5e:35:6c:1d:
95:30:8c:1a:1a:db:82:cd:62:04:56:f2:49:5d:cb:
c3:93:d0:b7:43:22:50:17:7b:d6:89:33:b3:5e:19:
67:75:12:d4:d5:8c:cd:4e:31:3b:c5:95:d2:54:4d:
b4:b7:4b:e1:8b:81:99:85:c2:a7:24:72:43:e7:61:
39:c0:f1:3a:35:6b:54:94:2e:6c:ce:7a:29:62:89:
fc:17:32:39:8c:ed:ab:f2:c4:b0:4f:ce:4b:af:3e:
de:d2:6b:5d:ed:8c:3b:f4:81:8a:4f:f1:27:43:0f:
6f:63:cf:ff:5d:e2:e6:1e:80:5b:15:1d:2e:35:65:
92:f5:5f:3b:c8:e3:b6:c2:5e:99:93:bd:26:6b:18:
12:3c:31:f9:71:b2:b4:cc:46:b5:02:18:1a:8d:94:
e1:38:9b:76:ab:a7:62:eb:81:d3:75:88:75:e1:0d:
bf:e6:a3:76:97:3d:59:ce:61:33:9f:ac:d7:37:e2:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2B:91:9F:B4:15:D2:F7:DC:A5:2C:29:DA:91:D5:9F:5E:C3:DB:8D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WSuRn7QV0vfcpSwp2pHVn17D240.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/15
Signature Algorithm: sha256WithRSAEncryption
6b:8a:77:23:d6:19:e5:98:51:64:ad:84:9a:13:26:21:98:a7:
3c:23:ba:ae:09:a1:3a:3b:ba:19:9b:6c:05:33:c8:9d:ef:16:
a4:87:d7:24:d0:a1:ef:d3:74:4a:66:bd:37:9a:13:76:12:ad:
14:68:b0:b2:bb:ff:40:1f:3a:5b:76:95:94:40:2c:7b:f5:97:
9c:23:d2:9e:0c:14:c5:78:a9:30:eb:30:2f:26:b0:79:ce:73:
00:27:7f:3e:79:a2:24:f9:54:38:b1:4c:a8:2d:d8:11:fc:d9:
8b:cb:90:c8:84:23:d4:69:f3:e0:c9:2b:e7:b7:eb:dc:b3:5d:
a4:79:a2:7b:97:c0:9b:52:94:fe:92:f5:88:b9:1b:08:e3:32:
58:a7:1d:8d:4c:a8:c3:03:f8:a3:c7:9d:80:49:5d:03:a4:2a:
71:42:6a:ac:b6:8b:6b:63:99:84:6c:73:eb:e2:50:c5:f1:19:
f0:ca:51:0a:45:56:e8:5f:87:ef:6e:85:3f:16:8c:6f:cc:2e:
96:51:34:55:81:8c:b9:99:29:fc:c4:f8:67:8e:d4:4b:5a:57:
72:87:41:33:01:eb:e0:07:0c:a9:59:6d:ae:0d:33:15:94:73:
4f:8e:63:be:1d:2b:9b:fe:0a:9f:db:3e:b0:2d:85:cd:4a:49:
e3:30:a3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org