Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eX1uOqZ8LKmiuJaGg8g37m6lG1c.roa
File: eX1uOqZ8LKmiuJaGg8g37m6lG1c.roa (raw, json)
Hash identifier: j3i7NorIW0B5SXG0OT2uXp73OV9za3y4UUo3jUT1biM=
Subject key identifier: 79:7D:6E:3A:A6:7C:2C:A9:A2:B8:96:86:83:C8:37:EE:6E:A5:1B:57
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 184A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eX1uOqZ8LKmiuJaGg8g37m6lG1c.roa
Signing time: Sat 22 Oct 2022 05:53:44 +0000
ROA not before: Sat 22 Oct 2022 05:53:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.120.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6218 (0x184a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:53:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=797D6E3AA67C2CA9A2B8968683C837EE6EA51B57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:40:79:4a:08:63:f3:fb:cd:8f:c2:a2:f6:
34:67:c4:2f:a0:dc:7a:e3:e1:e6:aa:6b:ff:24:8a:
08:e3:46:56:f1:bf:ac:a7:af:46:8a:f9:e2:0d:f1:
f2:99:ba:e8:51:61:28:b8:95:9b:3b:20:39:9f:10:
0a:b3:96:ae:f2:00:18:78:5a:39:c7:c2:c6:7d:a9:
d1:f8:33:57:2d:87:dc:b9:ba:86:af:8f:56:be:c1:
cb:89:f2:0d:19:6f:4e:01:f7:85:11:2e:1d:de:44:
4c:a3:83:d4:b7:0e:22:cb:cb:ed:1a:11:89:84:58:
7d:0f:bf:1e:55:c7:6d:14:3c:28:a1:01:96:2a:e6:
ca:e3:3e:91:a1:8d:83:50:e3:08:fa:c4:8d:3e:bd:
85:1f:a4:41:e9:41:56:a6:53:83:3a:4b:60:5c:72:
e4:b3:89:54:a8:ad:f1:cd:e1:b8:6e:44:1b:3c:40:
94:3d:64:6e:3c:d4:66:00:c3:6e:88:b9:7f:cf:73:
61:fb:2c:c7:51:35:b7:71:19:f2:63:7d:86:f6:6b:
ff:e3:b3:93:25:63:ed:44:26:e4:12:7b:e4:ea:32:
ec:bb:c9:88:e7:8d:8d:50:52:9f:80:4b:73:a2:ae:
4c:70:50:b3:64:df:4c:da:66:64:b6:a3:6e:b4:44:
ed:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7D:6E:3A:A6:7C:2C:A9:A2:B8:96:86:83:C8:37:EE:6E:A5:1B:57
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/eX1uOqZ8LKmiuJaGg8g37m6lG1c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.120.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:e4:e3:d6:d5:f3:10:a5:ba:34:c9:53:01:d4:36:b7:38:ef:
d8:0f:35:22:3c:dd:17:c5:09:e8:51:2c:9d:7a:4a:8d:bf:d1:
7e:d5:48:60:49:6f:0a:3d:d5:2e:94:f9:5d:39:7e:cb:6a:da:
40:d4:e3:95:51:0b:79:d3:71:22:5d:84:8c:3f:28:44:12:05:
62:2d:d5:81:fc:51:c7:a0:fa:2c:fe:df:40:eb:4a:11:d0:9c:
26:bf:f6:f1:57:b2:b6:69:93:c0:59:cc:89:24:92:df:af:45:
56:18:a2:e1:9e:af:c6:0b:92:6b:f1:10:c9:ca:38:7c:a4:5d:
0e:a9:df:96:e6:54:44:c9:b9:48:ab:fe:17:10:57:a1:6d:0b:
79:36:aa:4f:a5:df:3a:73:e2:8c:39:47:11:f1:ab:db:21:90:
91:0d:db:b4:7f:5b:55:1e:3d:27:53:55:1d:45:ce:de:b5:a6:
d3:53:2d:1b:b3:16:67:3a:98:0c:3a:5c:74:aa:48:3b:67:ac:
a3:67:15:e2:8f:71:63:d9:f3:7a:28:b5:a4:8e:ab:b4:24:46:
de:f1:a7:56:c7:7e:da:cc:ae:6a:70:de:25:db:d0:7b:9f:f0:
51:27:7a:e3:42:65:18:46:c9:5c:d6:63:8f:5b:b5:9d:fd:07:
66:26:4e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:54:07 2025 by rpki-client