Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b9GzEHhjAa8Ixu92svfENIGtgt0.roa
File: b9GzEHhjAa8Ixu92svfENIGtgt0.roa (raw, json)
Hash identifier: SnHR2+afPa/bCBG5Od5gevRJOO+V6BtvPd/xrQZqr3s=
Subject key identifier: 6F:D1:B3:10:78:63:01:AF:08:C6:EF:76:B2:F7:C4:34:81:AD:82:DD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1A4C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b9GzEHhjAa8Ixu92svfENIGtgt0.roa
Signing time: Thu 27 Oct 2022 02:42:24 +0000
ROA not before: Thu 27 Oct 2022 02:42:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6732 (0x1a4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 27 02:42:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6FD1B310786301AF08C6EF76B2F7C43481AD82DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:aa:62:fd:52:9f:db:26:65:3a:fd:0e:5f:20:
78:92:bc:92:06:45:cc:75:6e:6b:76:54:12:b4:0b:
11:45:6c:56:96:07:bf:21:61:7e:db:cd:28:73:8a:
64:1a:9e:e9:d8:fa:be:18:d0:9e:68:87:33:95:18:
31:22:de:5d:75:d4:b2:4f:3a:c9:33:2d:75:8d:d6:
96:cb:2c:40:1c:fd:16:ab:09:43:d2:58:07:26:96:
8d:f6:e4:cf:66:85:64:82:94:6a:5b:82:ba:90:7a:
6b:0f:ae:33:26:62:a8:db:17:77:22:60:7f:95:57:
65:36:26:eb:ec:70:ca:3f:dc:8e:d9:13:0a:ed:0c:
da:94:8a:e2:7c:9a:64:f8:8f:f1:22:a0:69:a4:6b:
3d:76:8b:b1:f6:e9:ef:69:e6:18:f6:1b:58:34:28:
c9:60:36:68:38:0b:f8:95:21:5d:c7:c7:04:a7:21:
4e:5b:10:ac:c5:ee:bc:aa:c5:61:e0:23:5d:43:f5:
aa:63:fb:a5:42:7e:3a:50:03:7f:4d:1b:a5:e2:06:
eb:9c:62:e3:33:ab:c0:af:c8:78:75:2b:cf:65:13:
ff:00:0f:5d:45:16:e5:99:8d:be:a6:6a:91:45:04:
7f:f7:d8:32:0e:9f:ab:fa:30:3d:8f:98:d7:4f:3d:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D1:B3:10:78:63:01:AF:08:C6:EF:76:B2:F7:C4:34:81:AD:82:DD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/b9GzEHhjAa8Ixu92svfENIGtgt0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.128.0/22
Signature Algorithm: sha256WithRSAEncryption
57:64:0c:3b:d6:35:bd:28:10:a0:9a:60:c3:f3:26:67:4a:1d:
ac:56:53:ea:0b:19:de:34:7f:d9:6b:bb:db:01:90:22:93:c9:
bf:51:49:5a:f4:1e:69:41:4c:01:62:21:f4:b4:e4:7d:4c:11:
b9:ed:b1:b8:77:87:53:ea:ec:2c:98:d7:5f:00:5b:87:9e:c5:
d2:8a:bd:ee:71:7b:5e:ed:b7:3f:1e:d2:8c:46:cc:f5:f7:fc:
84:2e:cd:db:e5:ae:30:37:70:2b:cf:be:72:0f:7c:47:3b:38:
a3:21:40:22:4d:67:1f:cc:c8:59:29:fb:ce:26:d3:37:c5:38:
54:c8:b9:43:f4:1e:bb:b4:60:5c:f5:37:99:7d:db:7c:45:ac:
ee:c2:5a:12:21:8f:f9:36:f1:fd:31:3c:ab:23:76:4a:de:9a:
dd:b1:18:b4:82:04:bc:8b:5a:1e:9c:26:2f:fe:8b:04:d3:b1:
e4:d9:26:c0:75:71:48:78:61:d3:d8:f0:ef:1f:be:a5:ad:2c:
c2:27:c8:0f:cf:b0:45:c1:d0:5d:b8:a0:eb:47:87:b7:f6:a3:
ca:f6:dd:0b:d2:7e:cb:c4:e7:39:db:a3:3d:f0:ee:3c:57:83:
46:76:e0:75:3f:10:f2:a0:2d:97:73:f6:d4:06:18:be:e9:d5:
2b:9f:6d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org