Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ya0HIsuUL7pzhEZc_KJazP7gBGs.roa
File: Ya0HIsuUL7pzhEZc_KJazP7gBGs.roa (raw, json)
Hash identifier: LBQ+xpSeiwN8qpv/9JSiFSuWZs/iXAB5FveVXGsly9Y=
Subject key identifier: 61:AD:07:22:CB:94:2F:BA:73:84:46:5C:FC:A2:5A:CC:FE:E0:04:6B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AE5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ya0HIsuUL7pzhEZc_KJazP7gBGs.roa
Signing time: Tue 29 Sep 2020 10:07:45 +0000
ROA not before: Tue 29 Sep 2020 10:07:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.159.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2789 (0xae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=61AD0722CB942FBA7384465CFCA25ACCFEE0046B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:5d:1a:a9:cc:5f:ba:90:bd:9e:d4:10:21:
d8:96:0c:df:70:32:65:73:b9:57:77:31:fa:f3:40:
67:76:f5:83:6e:4e:5b:0a:be:a4:69:55:d2:0c:78:
21:b2:0e:8c:53:3f:bc:49:50:96:3b:40:6f:5d:6a:
b3:55:57:c1:43:78:23:2f:2b:44:79:18:6a:20:48:
aa:c0:7e:6c:a5:aa:f8:ac:60:38:c5:22:bf:bf:35:
cb:88:0a:5d:ac:8b:06:8b:41:cd:33:b4:3f:2e:e3:
85:fe:2b:f2:12:f0:73:5a:3e:0a:11:83:34:3b:1d:
14:fc:1f:3c:67:72:fd:27:b0:fa:d7:f7:ec:67:dc:
b0:be:5b:b1:9d:dc:f1:4e:8f:4a:67:75:21:36:e7:
f4:b0:8f:73:8d:a9:24:83:31:84:6f:ed:30:e4:ec:
6b:60:c4:07:50:69:41:f5:0e:6f:7b:81:d9:51:66:
c2:e9:3d:e6:17:3c:a2:7f:69:3d:6a:dc:8b:e0:cd:
10:7e:d2:e8:36:d1:22:d4:06:19:e8:87:03:9d:56:
ec:94:4f:90:56:4c:35:e0:31:dd:92:97:52:0f:aa:
88:30:89:1c:13:0f:cc:47:2a:27:2f:e1:79:0c:ec:
e4:29:73:29:a1:82:da:99:c3:ae:be:8f:74:a9:0f:
fe:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AD:07:22:CB:94:2F:BA:73:84:46:5C:FC:A2:5A:CC:FE:E0:04:6B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ya0HIsuUL7pzhEZc_KJazP7gBGs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.224.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:66:a0:46:2b:80:a3:a5:bb:56:13:a3:1c:77:81:e0:17:02:
54:05:52:46:f5:84:42:21:38:3b:ca:f5:26:b2:d3:11:12:07:
a0:76:3d:c9:40:1d:a1:b0:bc:93:46:13:66:84:d6:3c:73:5e:
26:a4:62:b9:6e:ae:c5:e3:97:8f:5c:c6:58:e6:5d:60:9d:6c:
5c:5b:40:44:86:e8:18:d1:15:24:d5:33:94:ff:41:3f:a3:c9:
49:e6:c7:eb:79:ad:d5:e6:a3:b9:16:0e:c0:ed:1c:1d:b3:10:
37:16:4d:f4:27:ac:0d:b3:9c:23:bf:d3:05:fa:86:86:2a:50:
59:f9:2f:01:05:6b:81:0c:7e:4a:d8:fe:f5:b2:fd:70:98:21:
0a:94:1d:e4:70:a3:bb:d5:2f:13:17:4b:83:1f:bb:f1:ef:91:
5b:af:e6:84:f0:c5:6b:38:33:8b:6e:17:f0:19:7f:6f:b4:f8:
c2:7a:8c:dc:bf:40:54:2d:c2:f2:b8:71:1a:dc:ec:8b:a8:d9:
47:23:b4:e5:96:8b:9c:54:2b:99:c6:fe:bd:df:b7:3e:9f:53:
5d:e2:3e:65:a6:01:d3:0a:3f:ff:6e:8e:2e:97:d6:e4:7b:2c:
85:37:9a:de:2c:3f:38:9b:d8:72:a2:b2:7c:b5:4d:08:ae:a1:
70:66:e2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org