Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ehwsLU3bvQzTJgErbKWPpXRXtkc.roa
File: ehwsLU3bvQzTJgErbKWPpXRXtkc.roa (raw, json)
Hash identifier: LsflRbJEUjnD05m/lWfXvzmyr9ga+bXXEumfUv3I1+Q=
Subject key identifier: 7A:1C:2C:2D:4D:DB:BD:0C:D3:26:01:2B:6C:A5:8F:A5:74:57:B6:47
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 135E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ehwsLU3bvQzTJgErbKWPpXRXtkc.roa
Signing time: Wed 29 Sep 2021 02:55:41 +0000
ROA not before: Wed 29 Sep 2021 02:55:41 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 49.158.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4958 (0x135e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:41 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7A1C2C2D4DDBBD0CD326012B6CA58FA57457B647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:df:8b:7e:6a:68:f8:83:c3:2f:16:d6:e7:
34:1f:c5:0d:2c:99:44:8e:56:ae:7b:a8:c2:aa:00:
5f:9a:3c:84:12:b5:4e:de:2f:05:4e:53:c8:fb:2e:
97:d0:d1:f8:4f:df:00:6c:17:3a:b0:a7:f2:1a:5c:
c2:24:c4:be:98:ae:61:98:e7:82:2a:3f:3c:8f:f2:
8e:f7:12:15:11:6b:19:c6:3d:f6:6a:76:f7:cf:60:
36:53:fb:39:1a:dd:58:af:5b:d1:a2:e2:6c:71:6c:
1b:e2:47:25:93:38:c6:02:41:c4:93:33:2c:15:32:
f4:45:d2:e2:84:33:3e:44:65:9c:e3:e1:80:e4:e2:
e1:38:2f:2d:f7:e8:61:04:a8:92:4b:05:e7:77:46:
00:66:63:d1:a0:d5:f3:d8:ee:75:d0:9e:4b:77:e7:
31:4a:7e:a0:46:91:fc:3c:51:2c:14:b0:6a:ea:4f:
da:41:87:cd:08:b1:16:e6:5a:39:9e:96:69:ac:cc:
60:2f:23:c3:7f:61:61:05:6a:55:b5:99:64:38:db:
2c:e0:26:8e:ea:c5:7d:33:43:29:87:94:da:f5:25:
45:c6:84:ec:d5:ee:52:70:cf:df:71:d3:13:de:9b:
0a:77:18:38:f4:fe:dd:c2:88:ad:9b:6b:08:25:5f:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1C:2C:2D:4D:DB:BD:0C:D3:26:01:2B:6C:A5:8F:A5:74:57:B6:47
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ehwsLU3bvQzTJgErbKWPpXRXtkc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.220.0/22
Signature Algorithm: sha256WithRSAEncryption
27:ca:9f:3d:64:35:a3:a6:be:42:cb:77:cc:6a:f5:d6:56:3c:
23:38:0e:a2:38:e3:91:6b:23:c7:36:71:47:31:ab:f2:9a:50:
d2:44:92:f7:c6:d7:45:59:fb:02:6f:f8:8c:66:d4:d8:49:a1:
48:da:d6:09:9d:1c:9a:38:3f:c7:95:03:8f:2b:ec:c8:c1:a2:
93:46:f3:98:a4:54:68:9f:03:d1:06:90:bc:1c:4d:16:07:83:
ae:44:db:de:1f:45:cc:33:7f:ed:37:df:78:4b:c9:a1:5c:10:
be:41:26:09:eb:3a:34:8f:82:b3:fa:cc:76:fe:ea:af:bf:3d:
fd:da:4f:dc:d4:d0:20:04:18:a7:56:51:ed:4b:fa:3d:33:70:
a6:ae:3c:60:d6:8b:04:51:4d:bc:68:f9:7b:30:5c:a6:73:45:
53:68:98:a1:7b:c5:30:4a:0c:b1:38:fa:50:df:dc:f6:bb:08:
98:a7:fd:22:65:f0:9d:85:e1:42:a7:29:a6:69:dc:a1:7d:6c:
f1:d9:4e:ef:86:74:cd:44:40:31:d5:fb:c6:36:6c:6a:46:a9:
8c:3c:a6:18:15:6c:67:35:72:29:e8:f1:ad:21:99:34:6c:4d:
34:5e:f0:bc:a6:e8:6e:cf:f2:7b:1e:b3:7d:c9:ee:58:7c:e3:
b4:eb:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org