Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d-WK5H5Q4MuZGCLnIKNLsZwN3IQ.roa
File: d-WK5H5Q4MuZGCLnIKNLsZwN3IQ.roa (raw, json)
Hash identifier: rAb5Niuyb5VuNECq80vz0fl4qCZVGJKp68f2cr6+Xm8=
Subject key identifier: 77:E5:8A:E4:7E:50:E0:CB:99:18:22:E7:20:A3:4B:B1:9C:0D:DC:84
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1001
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d-WK5H5Q4MuZGCLnIKNLsZwN3IQ.roa
Signing time: Sun 07 Feb 2021 12:37:04 +0000
ROA not before: Sun 07 Feb 2021 12:37:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4097 (0x1001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:37:04 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=77E58AE47E50E0CB991822E720A34BB19C0DDC84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:b5:31:71:d3:18:39:1b:3d:c5:d4:1c:68:
42:8b:6e:05:4d:73:f1:bf:1f:ea:28:b9:27:bf:be:
8c:66:04:77:59:2c:f0:8e:f6:d5:72:f0:bd:0c:e0:
0a:10:d8:82:db:a3:eb:be:22:da:8b:b5:22:f3:94:
f4:06:9e:51:91:ec:35:8f:3f:1e:c1:29:56:33:91:
8f:99:1d:35:5c:60:0e:97:6e:52:09:1f:be:ea:51:
bd:d5:bb:b4:e1:75:76:c4:fe:b3:af:9e:0a:cc:ca:
24:67:73:a0:6d:61:12:6c:fb:74:31:ca:77:90:c3:
1d:9e:39:5e:ee:2c:f7:97:b7:5f:66:50:80:6c:37:
3c:31:46:53:f6:ae:9f:fa:d5:48:bc:61:87:70:af:
67:15:2f:ca:90:57:a4:74:81:57:57:dc:4a:ed:17:
06:c6:cc:c3:80:aa:54:58:8c:01:f4:ec:da:27:ae:
a8:47:a8:1d:e7:ec:c4:be:4b:24:4b:f4:43:e5:64:
24:0c:c4:ce:5b:3d:67:4b:3b:3d:c9:6c:c9:3e:e6:
88:ea:4a:5f:59:df:b4:93:f6:56:ae:4a:ad:df:cd:
35:e4:3e:c1:a5:b7:dc:9f:ca:5b:13:7f:73:f1:7d:
48:25:e6:5c:f0:ea:80:d4:30:3a:28:61:ab:4c:c8:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E5:8A:E4:7E:50:E0:CB:99:18:22:E7:20:A3:4B:B1:9C:0D:DC:84
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/d-WK5H5Q4MuZGCLnIKNLsZwN3IQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.240.0/21
Signature Algorithm: sha256WithRSAEncryption
16:d2:39:7f:b3:77:f0:ad:80:6a:cd:9e:eb:85:57:04:9a:11:
9e:c4:98:26:bf:a5:a6:64:fb:9d:90:c7:7a:cb:ac:39:00:21:
49:f6:7d:57:18:fc:7d:72:07:28:06:e9:4e:1a:67:ce:53:6d:
e1:92:3d:79:92:49:2a:b2:2e:31:a9:e4:28:7d:a8:0a:12:7a:
30:e0:f2:d0:2f:d1:0a:72:33:98:ae:3a:9b:c5:d1:55:90:12:
d1:d1:7d:3c:d1:3d:56:3a:93:0e:eb:08:ea:57:02:b7:71:bf:
e1:58:27:7c:b7:5a:86:b7:66:16:46:ae:c4:55:0a:ef:f0:36:
53:fc:6b:a4:46:60:6d:2e:7e:77:e7:4d:5d:6f:d6:e8:4a:b3:
31:64:ab:b0:df:68:7a:b7:b5:99:89:a3:3c:74:40:42:e2:eb:
ad:78:08:bb:58:26:10:8f:54:33:6f:1d:d7:c6:10:4e:2a:76:
9c:47:a7:dc:ef:88:d1:ae:de:48:e4:b7:f9:44:31:b7:ce:06:
60:07:c8:29:12:f4:6d:6d:c7:44:c3:16:7b:67:a2:84:d9:8a:
dc:70:9d:49:4e:8d:85:90:9d:b8:af:f5:32:e5:6c:45:12:b4:
72:81:8a:3f:27:27:1d:9e:26:f6:bd:2d:eb:05:d2:06:3b:4d:
85:00:83:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org