Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WsyQiR-OM3OI87iQt8xUYOK50mo.roa
File: WsyQiR-OM3OI87iQt8xUYOK50mo.roa (raw, json)
Hash identifier: CsdQqTM1XCjLPaASsKmDoucEsdBPIiZFsQuWOoOQLCg=
Subject key identifier: 5A:CC:90:89:1F:8E:33:73:88:F3:B8:90:B7:CC:54:60:E2:B9:D2:6A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 128B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WsyQiR-OM3OI87iQt8xUYOK50mo.roa
Signing time: Wed 29 Sep 2021 02:54:42 +0000
ROA not before: Wed 29 Sep 2021 02:54:42 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4747 (0x128b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:42 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5ACC90891F8E337388F3B890B7CC5460E2B9D26A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:d3:c0:e1:63:8b:b8:1c:2b:15:2d:d3:a3:
c1:2a:49:4b:b1:02:8f:61:16:70:3c:43:20:7d:d4:
e4:0a:22:e2:b7:67:f7:62:8b:8d:62:d8:af:72:5b:
af:1f:86:f2:12:1f:fe:e6:80:8e:8b:9e:e6:31:61:
8a:75:31:04:13:72:35:cd:0d:2f:bc:93:02:01:1e:
b5:39:81:68:47:9b:d2:53:5e:a9:6a:e0:e3:6b:f0:
e1:fb:8e:44:f5:9d:7a:98:7e:33:83:d6:6d:f5:a2:
f2:a4:73:10:73:38:cb:cc:de:db:0a:ff:b9:c6:44:
b8:37:12:c2:03:c3:a9:3d:85:39:2c:d5:31:cb:f9:
4e:84:96:69:63:8b:44:53:d2:65:6e:d8:87:34:ba:
6d:4e:e8:6f:79:2c:46:f4:59:96:b7:a2:9d:e6:1e:
99:21:15:fc:d1:9a:49:73:ae:ac:28:67:63:23:8c:
b8:35:6e:24:f7:80:8b:05:05:f2:96:6f:73:e2:fa:
93:48:3b:3e:77:9e:cf:cf:bd:1e:76:ae:d0:ed:43:
21:bb:d0:80:f0:31:ff:a8:b0:c2:8b:a1:10:d0:b4:
85:bf:98:f0:dd:7d:e7:e0:37:b3:35:78:35:7d:69:
c1:ba:35:03:f0:4a:0c:22:ce:5c:3c:ab:db:0a:d3:
f9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CC:90:89:1F:8E:33:73:88:F3:B8:90:B7:CC:54:60:E2:B9:D2:6A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WsyQiR-OM3OI87iQt8xUYOK50mo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.120.0/22
Signature Algorithm: sha256WithRSAEncryption
72:de:64:51:76:3f:75:23:5d:c4:b4:e7:41:d4:03:07:c6:43:
de:3a:ff:76:ea:f0:f5:9f:30:9d:cf:f6:7e:24:3f:c3:27:3b:
3c:ba:b5:77:99:82:5c:34:b5:d5:c7:f0:cf:32:31:1f:6c:38:
2c:8e:f9:5e:64:1f:76:8f:2a:fd:6d:32:22:6a:ab:52:8a:a5:
8e:ec:bd:26:04:0b:27:e7:db:95:51:86:86:99:c9:02:d5:60:
dd:42:1d:c8:f2:27:cc:57:05:54:15:1e:fe:50:55:c5:ab:da:
8e:4d:2d:bb:35:62:0e:56:c6:57:07:1c:37:4e:c5:da:d1:b8:
d2:c2:d2:c0:28:6e:7a:a1:2e:5b:2c:37:66:8a:dd:29:63:1c:
50:91:cb:d5:58:95:34:49:af:76:f4:3e:da:a3:fd:75:40:bc:
fa:f9:06:12:8e:83:f7:70:1a:f2:b3:84:66:91:c9:3d:6d:b1:
02:37:b2:9c:05:66:d7:b0:41:c0:1d:24:2f:1b:0f:7c:d4:3f:
5c:dd:ac:44:d4:d6:6f:20:51:6d:0b:5f:09:3f:8b:67:e9:5f:
0b:0f:29:78:be:f6:3f:75:ea:47:32:59:35:e3:79:74:5c:c4:
61:ba:c7:58:5c:91:31:3e:06:df:d6:b4:da:c6:85:dc:36:4f:
3d:6d:c7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org