Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_jOKSlA04-edrDw0hYQn33N32bA.roa
File: _jOKSlA04-edrDw0hYQn33N32bA.roa (raw, json)
Hash identifier: FZfI+sDnFJSQNwzDRQNox7VGWfdKWwlwm3dlRrUV40g=
Subject key identifier: FE:33:8A:4A:50:34:E3:E7:9D:AC:3C:34:85:84:27:DF:73:77:D9:B0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_jOKSlA04-edrDw0hYQn33N32bA.roa
Signing time: Thu 15 Sep 2022 02:35:44 +0000
ROA not before: Thu 15 Sep 2022 02:35:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FE338A4A5034E3E79DAC3C34858427DF7377D9B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:22:a8:67:8d:5d:5e:ee:df:03:1d:84:66:
e2:4d:72:4a:d4:d0:5b:86:bf:3e:ab:f2:86:d3:d6:
86:73:72:72:14:72:b7:07:66:7a:a7:e6:ca:9d:b9:
e8:63:3c:6b:b3:32:60:ec:7e:fc:ee:63:3e:b6:66:
d0:e2:b3:af:3d:16:52:29:7c:33:2f:15:0c:f7:3b:
3d:2a:d6:e1:12:a8:40:98:e5:6d:31:b8:b3:07:f2:
a8:d3:57:82:9d:c1:32:18:f7:45:59:c4:75:28:41:
aa:9d:d4:e0:68:7e:41:fe:a0:22:b8:44:d3:05:ae:
d3:0c:ea:46:6e:91:da:fa:35:6f:b6:3e:a0:b4:dc:
01:ea:e9:88:e4:fb:45:ca:bd:e4:63:29:22:9a:d6:
12:eb:18:55:4d:bf:b0:aa:17:cc:53:91:be:13:91:
92:d0:7f:9a:3c:61:b1:c6:fd:ed:15:a8:0f:bd:6b:
47:c6:05:f5:f4:fb:e3:73:14:c7:93:1a:a9:64:dd:
4e:20:4f:97:58:62:09:40:a1:64:6d:9a:f9:7b:82:
84:cd:96:64:77:3b:ae:51:18:ce:59:e8:e2:12:e5:
38:eb:cb:21:ad:a7:29:71:4b:46:97:41:2e:b1:d7:
7c:d1:43:48:80:2c:3b:f4:d1:c0:4c:95:ca:f4:71:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:33:8A:4A:50:34:E3:E7:9D:AC:3C:34:85:84:27:DF:73:77:D9:B0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/_jOKSlA04-edrDw0hYQn33N32bA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.16.0/21
Signature Algorithm: sha256WithRSAEncryption
32:43:2a:8d:80:9a:20:6f:ec:ef:bb:d3:f6:41:b6:0f:3b:bc:
7e:82:55:95:56:f2:c4:96:a0:5e:8e:80:10:72:c2:16:23:4f:
aa:d8:4a:31:d7:62:1e:c5:3a:d6:da:78:36:4c:da:6c:2a:16:
29:14:dc:39:4a:73:68:c7:c0:fd:32:72:c8:ae:6c:96:6b:78:
88:de:5a:58:2c:9c:27:79:6b:cd:48:8a:4c:65:07:cd:7c:f2:
6c:8e:46:31:60:9c:9f:9b:42:d1:a4:54:a7:5e:89:70:d5:9a:
7a:43:55:05:bf:57:1e:f6:b2:01:da:23:56:44:66:5c:b9:7c:
90:15:94:48:9b:c4:67:d7:62:e9:53:b7:76:f7:87:94:a5:26:
ba:ec:59:96:5b:59:b4:b6:fe:87:13:6d:ec:71:96:9e:3e:55:
05:3e:bc:e4:d2:f1:fa:78:17:bb:fc:e3:83:a1:89:83:f0:eb:
df:01:a9:bd:b6:af:93:19:d8:9f:f1:7f:bb:3c:bb:f1:dc:b0:
01:50:a1:4f:d5:25:f7:8f:fc:26:00:63:46:da:ed:3f:13:32:
50:b3:64:50:82:29:bc:1c:77:69:df:fd:49:1f:b7:6d:86:46:
ae:07:4c:7e:ac:6b:fe:eb:a4:1e:9c:73:e3:64:6a:fe:da:ca:
9f:60:ed:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org