Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/caY8awDPLzEIFa6ltOO3u-B_VNo.roa
File: caY8awDPLzEIFa6ltOO3u-B_VNo.roa (raw, json)
Hash identifier: GoFXItcfvd3xwTLqzjX3oofvMgEP8QrwOrrujPXtRis=
Subject key identifier: 71:A6:3C:6B:00:CF:2F:31:08:15:AE:A5:B4:E3:B7:BB:E0:7F:54:DA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FD3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/caY8awDPLzEIFa6ltOO3u-B_VNo.roa
Signing time: Sun 07 Feb 2021 12:36:13 +0000
ROA not before: Sun 07 Feb 2021 12:36:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.158.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4051 (0xfd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:36:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=71A63C6B00CF2F310815AEA5B4E3B7BBE07F54DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c4:7f:8f:52:c0:fc:f2:b5:29:c9:a2:49:d6:
4a:fb:ca:1f:56:89:5e:5b:7f:63:13:bd:ba:b3:40:
6b:4b:67:82:c5:b4:7d:70:4b:85:58:a0:cb:c1:64:
58:f4:85:f4:df:1f:59:ff:f6:f9:65:9b:a6:1a:a3:
1e:3d:cc:4b:af:db:79:cc:99:e6:a2:60:7f:af:ea:
1e:4b:43:37:38:fe:85:6f:f6:3b:80:cd:4b:70:b8:
41:38:13:f9:d4:fd:0b:98:24:a8:97:69:d4:92:6a:
d0:42:e6:71:33:ee:22:07:6c:ac:b9:92:e0:4e:63:
5e:4e:d4:68:55:44:20:d7:85:bc:8c:2f:50:1f:3c:
cb:3f:0b:9b:76:74:2e:c2:2e:19:12:e3:c7:74:cc:
83:06:7d:f3:8a:21:42:d7:c0:2c:46:1a:98:51:64:
a2:3e:6c:a8:d9:d3:1d:30:e8:9b:74:2a:db:12:7a:
35:c2:7a:a7:5d:a0:54:2c:c7:8e:05:79:12:b3:e3:
2e:6d:94:1e:f8:93:46:24:67:db:5b:0b:bb:75:7e:
dd:f9:52:50:88:41:77:ef:f1:0b:73:db:da:2a:b6:
6d:0b:34:16:58:51:a1:26:22:61:35:91:33:1c:48:
bd:2d:05:30:88:f1:5d:5b:d2:51:21:e9:c7:eb:94:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A6:3C:6B:00:CF:2F:31:08:15:AE:A5:B4:E3:B7:BB:E0:7F:54:DA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/caY8awDPLzEIFa6ltOO3u-B_VNo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.232.0/23
Signature Algorithm: sha256WithRSAEncryption
64:27:99:14:ee:7d:c2:1b:f5:00:a0:40:36:f5:c8:13:42:be:
cf:e0:6b:76:0b:ef:ba:e1:1c:3f:12:db:9f:ad:82:b6:7e:90:
23:ad:2c:c1:23:6a:c4:c8:e5:00:fb:25:20:16:2d:c4:1e:f2:
e1:be:fa:14:1d:c6:07:49:de:79:37:37:ab:af:bb:08:db:75:
87:fa:c6:66:2f:02:62:79:85:56:0b:7a:88:ae:e0:94:8a:bb:
b1:c9:cc:82:b4:ce:73:c4:2c:fd:fd:4a:07:6b:a8:0c:f7:25:
07:eb:23:0c:f9:d3:5e:a7:44:22:29:08:8c:a7:8c:fa:1d:99:
05:96:b1:cf:ad:7e:e0:e0:f7:ef:98:ee:71:1b:d8:54:c1:e8:
ae:b4:49:78:aa:66:88:9b:28:fc:9b:9e:11:d0:76:d7:34:ca:
cb:1a:1d:a1:08:df:86:b4:be:1b:90:3d:e9:bc:db:17:10:a1:
be:cc:1b:09:19:1b:e3:16:3f:a7:b1:95:d6:8c:51:29:e0:ec:
0d:b7:c7:eb:eb:f8:6e:a5:e2:82:22:df:9d:db:83:70:a0:50:
77:84:c1:ff:84:55:f8:f4:e0:69:32:3a:36:b2:c5:ef:13:b8:
24:45:f4:4b:24:95:eb:a2:c3:73:ca:cd:23:15:e3:fe:6a:3c:
97:26:4c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org