Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/X_tdd-fEc9f5jijR3CSZJsZ8UN8.roa
File: X_tdd-fEc9f5jijR3CSZJsZ8UN8.roa (raw, json)
Hash identifier: KpeJ19Xu9mwBNZjGQHWWDMTxn78QINvg7aIBBoLJnSw=
Subject key identifier: 5F:FB:5D:77:E7:C4:73:D7:F9:8E:28:D1:DC:24:99:26:C6:7C:50:DF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 128E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/X_tdd-fEc9f5jijR3CSZJsZ8UN8.roa
Signing time: Wed 29 Sep 2021 02:54:43 +0000
ROA not before: Wed 29 Sep 2021 02:54:43 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 49.158.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4750 (0x128e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:43 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5FFB5D77E7C473D7F98E28D1DC249926C67C50DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bf:85:18:8b:4c:7d:f7:67:d1:09:f7:05:66:
a8:97:46:60:16:f8:1b:18:c1:9b:7c:67:a3:95:8d:
34:94:eb:15:60:3c:85:8a:49:d9:a6:98:04:9f:d3:
f1:ef:39:1b:64:bc:4c:8a:47:55:19:c2:00:fc:f4:
0b:56:fa:7c:51:26:d8:1f:92:17:99:a4:41:dd:48:
78:50:1c:2f:d7:e1:98:89:02:8a:30:7c:7e:b8:a1:
99:a9:c1:cb:d6:f1:a4:87:30:cc:1f:87:5c:c7:60:
e0:97:79:93:25:fc:89:57:8f:e4:d5:3e:88:45:52:
d1:04:00:38:68:84:0f:45:21:ac:13:13:13:2e:d1:
0e:ad:ae:8e:34:66:89:b8:21:2c:7f:5a:b9:d4:89:
f4:93:4e:18:c7:51:a1:08:bf:0c:5f:85:99:b3:90:
36:92:58:a7:38:f1:aa:1f:8e:85:72:5b:be:65:62:
77:f3:fc:5b:94:9b:c6:43:84:ee:1c:c4:aa:b3:2a:
cf:87:ae:8f:86:1a:ba:04:04:3b:69:1a:37:ec:93:
e3:f4:85:7e:e5:3d:cb:3c:ea:23:33:97:00:d1:ee:
f2:a4:09:a4:33:fd:d4:6b:a3:c6:d6:64:44:0d:00:
aa:21:43:96:3f:51:92:50:41:6f:aa:dc:3d:5e:ff:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FB:5D:77:E7:C4:73:D7:F9:8E:28:D1:DC:24:99:26:C6:7C:50:DF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/X_tdd-fEc9f5jijR3CSZJsZ8UN8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.132.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:dd:8e:db:7a:2f:a8:71:96:94:43:41:e7:3a:d9:d0:80:3a:
d6:ae:1b:93:a5:94:4a:0c:78:a7:f7:6b:8f:09:b2:55:3e:f0:
b3:9f:87:db:97:1d:51:d6:a9:43:b6:27:5b:09:38:11:a2:b8:
b2:64:c5:df:5a:44:cd:db:ba:ba:33:6a:63:61:4f:e2:a6:21:
9b:8f:e9:13:0f:a4:af:b4:6d:f0:2c:95:e0:07:96:8e:e8:fd:
bb:25:39:41:d4:dd:0f:b7:11:8e:28:e8:f4:4f:59:03:49:a6:
06:2e:5e:a2:ab:23:d6:ee:b6:03:79:23:4d:4b:df:a0:5a:2f:
63:af:60:3e:14:d8:eb:73:99:5e:0a:7d:a5:f4:32:0f:9f:e9:
3c:de:d8:16:12:bb:6b:07:b7:4e:a4:35:85:e9:2c:e3:dd:4e:
34:ed:d6:72:98:25:55:eb:fa:51:28:f4:c6:74:48:0f:12:ff:
81:cf:ef:48:1b:b0:31:fd:f1:e0:da:ee:2e:c2:fd:b1:20:42:
be:0f:95:69:50:3d:7b:c4:bc:63:c2:90:f7:de:c4:ca:16:85:
9d:0f:12:d0:cf:8c:49:54:23:27:97:2a:c9:56:62:d1:e7:77:
ce:52:17:24:8b:98:24:0d:93:f7:64:50:0c:fa:4c:20:49:fc:
c0:95:4c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org