Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XAeJiwstxEEBGOe6k4c-rUD1xOg.roa
File: XAeJiwstxEEBGOe6k4c-rUD1xOg.roa (raw, json)
Hash identifier: hj74xn33AXaDkG+Co7rJu+dUcLBH7nRKw4FlUXMuNSo=
Subject key identifier: 5C:07:89:8B:0B:2D:C4:41:01:18:E7:BA:93:87:3E:AD:40:F5:C4:E8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10C1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XAeJiwstxEEBGOe6k4c-rUD1xOg.roa
Signing time: Sun 07 Feb 2021 12:48:40 +0000
ROA not before: Sun 07 Feb 2021 12:48:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4289 (0x10c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:48:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5C07898B0B2DC4410118E7BA93873EAD40F5C4E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:58:73:7f:32:f9:d0:97:7d:86:f8:6b:b8:
2b:4c:c1:09:78:f0:f2:99:dd:91:87:af:16:d0:27:
4f:47:af:f2:cc:6f:f4:1b:0d:c1:f8:a9:f2:b0:cc:
e6:52:92:e6:78:4f:7a:90:bf:a0:9c:3f:8b:6a:6c:
18:69:45:11:5e:1f:90:3f:18:cc:25:90:57:cb:e2:
98:b5:61:57:3f:4a:87:73:42:4b:06:df:37:4a:76:
63:7b:54:17:35:b0:b9:f3:f3:da:b6:b6:ea:81:1a:
4d:ca:3a:fa:87:75:de:b4:69:05:98:03:8f:fe:8d:
e5:e7:69:15:ae:dc:7e:28:df:e4:58:13:49:c7:1f:
df:9b:58:b5:ef:cd:50:41:32:3d:d0:cf:04:8a:49:
53:c5:0b:e8:1c:5e:33:ca:92:5e:c6:5c:23:57:ba:
d1:2e:05:19:61:59:19:50:09:da:b5:be:46:24:58:
4d:aa:2a:80:d1:f1:6e:da:71:c8:21:56:66:b0:ee:
9b:8f:29:85:58:82:8c:e9:0c:dd:38:63:00:dd:d6:
14:9a:39:f4:45:16:78:02:c0:04:aa:27:65:d6:bb:
ae:58:bb:9c:19:9d:56:d2:2a:10:0e:59:ab:7f:74:
16:26:7d:ab:f1:d5:88:1f:ed:35:15:28:e7:2c:31:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:07:89:8B:0B:2D:C4:41:01:18:E7:BA:93:87:3E:AD:40:F5:C4:E8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/XAeJiwstxEEBGOe6k4c-rUD1xOg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:1e:33:5e:7b:a6:9c:93:10:92:80:8f:31:29:e8:69:84:d0:
e5:04:68:a0:94:e2:ef:9c:24:c5:1a:fe:bb:ff:85:8a:34:fb:
2d:f3:5c:ad:63:17:05:e1:a2:34:6d:9c:d3:01:82:1b:3c:51:
18:43:59:f2:9b:a0:9f:c6:7c:5b:96:e9:49:b5:cc:32:d6:62:
3e:9a:81:1e:6e:e4:b7:89:e5:ea:75:8f:8d:94:c9:d7:87:17:
50:09:13:9c:47:18:20:e7:3a:3f:70:96:31:a7:e2:d2:d9:32:
d4:ad:da:2a:82:34:ad:29:da:3c:a3:c1:60:26:ab:16:a4:3f:
99:c1:cd:77:a5:5b:1f:ee:38:a0:fc:34:50:7c:92:11:7e:a3:
8e:e7:9f:45:93:75:25:e3:ee:1d:9e:c6:6f:bf:e0:bc:f4:b8:
5f:2a:1a:3b:d3:42:5e:dd:7b:5f:f0:91:54:f9:f5:a8:b5:3c:
7d:43:bf:94:7a:7c:97:72:1f:86:71:02:c3:c3:24:81:d2:76:
75:b7:a7:98:2a:9f:7e:c0:93:dd:42:c0:a8:b4:0a:82:3e:f5:
f0:f1:9b:e0:f6:2a:be:b7:dc:8c:3f:1c:ae:d2:21:7c:85:73:
58:eb:8e:4c:f4:f2:90:44:89:3a:a6:48:fc:52:00:ec:df:29:
8c:a1:a9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org