Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WxvZo625xQmErU5L-9HG0gIIeXw.roa
File: WxvZo625xQmErU5L-9HG0gIIeXw.roa (raw, json)
Hash identifier: Oo6AhDdemIi6wpedgf/ulcb1vj0kz4X9FMn25mjjt8c=
Subject key identifier: 5B:1B:D9:A3:AD:B9:C5:09:84:AD:4E:4B:FB:D1:C6:D2:02:08:79:7C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AE0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WxvZo625xQmErU5L-9HG0gIIeXw.roa
Signing time: Tue 29 Sep 2020 10:07:44 +0000
ROA not before: Tue 29 Sep 2020 10:07:44 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.159.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2784 (0xae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:44 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5B1BD9A3ADB9C50984AD4E4BFBD1C6D20208797C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:5a:7b:86:85:f4:95:9d:0b:58:df:40:4a:
b0:e1:28:f1:f3:6d:6e:27:fe:e8:1a:67:e1:9c:b5:
d8:15:fb:fb:93:29:c5:3f:b1:07:8f:71:5c:c7:41:
69:e4:49:b1:78:c9:84:5b:31:c4:27:f8:14:33:14:
0c:d5:0d:e0:17:b4:b3:13:ea:39:81:e0:f5:7b:b1:
c7:e2:e6:71:12:ae:3a:8c:ee:41:a0:15:c2:e7:de:
90:f0:d6:a7:99:6c:a8:6d:be:f2:e5:06:fc:1b:bc:
4a:05:37:49:d4:1a:18:eb:4d:c7:19:f9:c6:67:fb:
1b:c6:79:7c:b2:5b:a3:8c:0f:ad:f5:51:3b:0a:87:
c0:0f:e5:39:ea:1c:06:77:a3:a6:0b:1f:3e:01:0f:
32:4c:c6:69:af:04:a5:10:21:a6:a3:d1:3f:de:c3:
31:e5:26:26:38:80:c4:9d:fb:6f:0f:a1:1d:db:2e:
c4:35:6b:7b:4d:7f:cc:88:5a:d5:37:77:a6:e9:0d:
50:ff:69:c8:a2:35:30:73:50:1c:ee:1e:4b:e5:d8:
e0:87:1c:1c:a3:97:ca:38:34:39:94:1e:5a:24:1e:
1b:12:f7:30:59:96:d0:b9:3e:df:40:b8:e9:45:fe:
d5:95:aa:df:43:c2:58:c7:23:8a:bc:ba:a5:3c:16:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1B:D9:A3:AD:B9:C5:09:84:AD:4E:4B:FB:D1:C6:D2:02:08:79:7C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/WxvZo625xQmErU5L-9HG0gIIeXw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.212.0/22
Signature Algorithm: sha256WithRSAEncryption
77:d3:58:3e:83:49:d4:cf:2c:8c:47:2b:aa:87:9a:07:e7:22:
5b:cc:a0:22:e7:a4:11:7f:bc:62:4a:1d:7f:e7:74:d7:ab:18:
84:5f:15:43:04:a9:f4:08:0f:8f:32:3a:82:fc:db:56:e4:47:
55:8a:60:44:54:fb:c8:0c:ee:f0:27:92:f4:c9:f6:cb:d7:bc:
e9:09:03:bd:8d:aa:95:6c:ee:f5:2b:fb:23:65:3f:da:eb:30:
a2:c0:3a:5e:67:f5:93:b8:b6:d2:fd:8e:13:b4:24:be:e5:8b:
12:49:c6:6e:17:09:24:8e:24:72:c0:9f:6d:f9:76:af:af:00:
55:d7:e0:9a:5c:35:a4:38:40:5a:3c:71:44:15:1a:bd:d8:25:
2a:04:86:05:66:bf:a1:dc:96:08:ba:f6:4f:69:98:02:0e:a6:
4d:2e:24:9f:ef:52:9e:e3:ea:04:d5:51:f9:71:c8:48:7d:05:
a5:7f:d9:47:e8:04:52:ae:f8:8f:3e:e3:8e:ed:94:0e:de:5f:
ef:c8:b6:63:62:b6:d8:4f:dc:2e:78:b2:98:e7:2d:07:d3:56:
34:be:6f:3c:cd:e9:3e:18:1d:5a:e6:df:26:c1:91:f4:3c:7b:
81:3e:2a:37:b0:d5:d1:85:29:fb:72:da:02:ff:0e:93:a1:75:
9d:b0:18:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org