Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c4OLfvVuq6_MNOPD51TndxJKKtE.roa
File: c4OLfvVuq6_MNOPD51TndxJKKtE.roa (raw, json)
Hash identifier: aNoWoFy9KvKiBiVSdpuSDX25MYSkUjox83h+XHK1cjA=
Subject key identifier: 73:83:8B:7E:F5:6E:AB:AF:CC:34:E3:C3:E7:54:E7:77:12:4A:2A:D1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12A8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c4OLfvVuq6_MNOPD51TndxJKKtE.roa
Signing time: Wed 29 Sep 2021 02:54:50 +0000
ROA not before: Wed 29 Sep 2021 02:54:50 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.239.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4776 (0x12a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:50 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=73838B7EF56EABAFCC34E3C3E754E777124A2AD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:09:70:37:06:f2:21:ba:72:a0:3b:9a:0d:7e:
f6:5e:cf:3a:0b:93:83:55:79:5d:f5:8e:57:61:09:
44:cc:0e:8f:fb:31:5a:51:41:97:98:a2:e9:e5:bb:
31:45:b4:b5:aa:1f:24:d0:12:ce:d8:90:28:65:29:
c6:7f:80:1a:20:17:6e:e9:08:b3:0e:92:ec:1b:23:
65:a1:c5:75:e5:f0:3c:f4:8c:73:8e:f9:85:ba:89:
8f:68:34:88:fc:a0:88:31:8b:62:df:b0:b0:5b:dc:
df:35:0e:dc:d6:23:58:72:0c:66:0a:a5:d1:12:7f:
be:57:72:9b:28:f6:d6:04:ef:e5:3c:76:c8:17:c6:
2b:e7:0b:8f:2d:c2:55:56:b1:24:c7:53:4f:19:73:
b0:de:5c:86:70:02:65:76:0c:13:5a:09:2b:13:2c:
ef:e8:ae:be:ff:06:28:75:65:15:20:93:39:a4:17:
75:7c:8d:df:09:27:3f:34:3b:04:f5:ba:9e:f1:28:
b4:0c:40:ad:43:61:2c:4c:d6:59:91:e0:65:a6:6f:
06:c8:40:83:c8:ed:ee:1f:50:e4:e8:e2:ed:41:8f:
72:d4:6a:88:ef:ad:8f:6a:f8:e8:19:21:24:e9:39:
3b:90:7b:13:03:10:4d:29:1c:1e:98:cd:57:57:e7:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:83:8B:7E:F5:6E:AB:AF:CC:34:E3:C3:E7:54:E7:77:12:4A:2A:D1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c4OLfvVuq6_MNOPD51TndxJKKtE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.239.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:41:47:ec:20:b2:68:5f:65:90:c9:ff:50:1a:a7:b2:c7:09:
3c:90:04:a8:cc:ab:84:ad:8b:65:6c:e3:ef:a7:48:52:6b:e4:
83:77:ec:e8:e0:eb:9d:f3:80:41:ca:5d:45:3e:13:2e:7a:54:
27:3a:ab:1b:e0:56:3a:48:fd:32:53:d5:95:a0:6a:60:2c:7e:
29:79:1b:a0:66:97:11:c0:a7:d2:57:96:69:cf:de:16:f9:e0:
82:7d:ed:1f:e2:7f:5a:10:8f:b3:f8:eb:5a:f8:f2:fb:dc:ec:
1e:ab:39:e2:d3:2d:80:e5:5f:e4:b5:12:bf:4e:46:24:d3:fe:
ab:21:cc:f3:4b:ce:79:75:e7:81:50:ca:14:a4:0e:fc:62:1c:
b4:0a:a1:c8:bb:6a:9a:3e:87:9d:ef:69:95:e2:24:e7:50:b9:
8f:50:08:06:8a:89:66:24:a1:13:be:f3:4f:6a:b2:bc:53:17:
69:92:83:5d:f9:37:d9:4a:27:44:37:0c:f2:3e:92:3c:cd:f9:
2c:cb:3f:76:51:72:e2:f8:a0:d7:c9:f2:40:05:21:92:c1:8b:
4d:ac:02:67:59:48:b6:90:bf:aa:d2:30:f7:25:42:cf:96:fb:
d3:63:cb:cd:c2:04:41:82:7f:c7:31:11:cd:72:1b:b5:a4:c3:
79:27:e4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:50 2023 by rpki-client on console-fra.rpki-client.org