Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fK36DqQ1HnYZ_51HbBVGhNv8ER8.roa
File: fK36DqQ1HnYZ_51HbBVGhNv8ER8.roa (raw, json)
Hash identifier: l0I8LE6zU2BVn4Qgp5m41odelhrY33VR3vKU8cgc6TU=
Subject key identifier: 7C:AD:FA:0E:A4:35:1E:76:19:FF:9D:47:6C:15:46:84:DB:FC:11:1F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1422
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fK36DqQ1HnYZ_51HbBVGhNv8ER8.roa
Signing time: Fri 29 Apr 2022 10:31:17 +0000
ROA not before: Fri 29 Apr 2022 10:31:17 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.159.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5154 (0x1422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Apr 29 10:31:17 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7CADFA0EA4351E7619FF9D476C154684DBFC111F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:83:95:23:34:83:b5:35:38:e0:3a:8d:dc:
e3:97:b2:4b:1a:9b:c3:6e:dc:3c:94:86:2a:3f:9d:
65:de:6d:27:d6:20:f6:6f:7d:19:c5:62:9a:7e:71:
f3:66:d9:e1:df:dc:f4:0e:58:85:3f:1a:44:c4:5c:
e5:a6:93:87:c9:5c:b4:60:59:be:e1:98:b9:15:81:
49:f4:a3:4d:07:60:b0:3c:8e:79:d9:ca:77:f7:35:
ab:dd:18:d8:56:de:b9:c8:57:5e:1d:2f:41:48:c1:
2a:eb:02:40:bf:1f:55:b0:95:56:6b:39:47:81:8e:
3d:8d:fd:e2:bb:4d:d6:62:52:4c:9d:01:de:2d:5c:
d3:12:eb:13:f6:87:2d:e3:6d:fc:91:2c:66:39:e8:
ab:8e:bc:36:cd:82:39:1f:b9:af:99:ef:f5:1c:2a:
ec:0f:89:a3:bc:94:3f:15:31:ae:7c:cd:48:76:ec:
16:f5:b8:d5:aa:a5:43:d2:c7:f4:23:90:cb:75:71:
c5:ec:74:74:2c:d9:fb:8d:54:3e:a0:03:2c:a5:55:
ce:d6:d8:cb:df:2c:0f:63:9d:3a:f9:a6:6b:93:bc:
2b:ec:c6:40:9b:d4:bf:27:b2:1b:b9:18:dc:cf:79:
07:30:fe:89:75:ae:5e:e9:45:67:7b:c0:a8:ed:ee:
ea:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AD:FA:0E:A4:35:1E:76:19:FF:9D:47:6C:15:46:84:DB:FC:11:1F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fK36DqQ1HnYZ_51HbBVGhNv8ER8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.216.0/21
Signature Algorithm: sha256WithRSAEncryption
55:10:46:0f:b8:bd:d1:3a:ea:b3:dc:29:28:eb:0c:83:ee:3e:
b6:49:30:7a:e0:52:29:95:8a:b1:0a:00:59:b4:a7:ca:d8:26:
ac:bc:48:6c:dd:2a:48:44:fd:b2:aa:18:89:3b:8a:b9:23:57:
69:0d:6e:b6:8c:68:81:38:f5:a1:73:25:58:22:bc:60:2f:b7:
32:24:04:80:0b:0e:7e:61:cc:23:f3:fe:e5:41:98:ce:b2:33:
4d:89:63:13:c7:a9:e1:b6:04:73:13:35:70:5a:b7:72:4e:91:
64:37:d6:78:d9:3f:c0:f5:a0:73:bc:97:6e:4d:88:a7:10:7c:
0c:ca:2a:39:bf:2a:65:4c:15:fd:83:13:f9:1c:fe:4b:17:e6:
4e:93:86:d2:45:b7:b0:0e:b8:b0:5c:f7:6c:2a:96:d2:22:48:
71:e6:4b:02:80:07:ff:68:b0:c0:df:c6:ab:5c:98:f2:34:2c:
d0:bf:f1:54:67:d2:9b:ac:33:f7:6f:7c:e6:1d:17:9c:fe:d2:
11:88:3c:d9:7f:b7:fb:5e:6d:a4:71:7d:9b:67:f5:d6:f0:52:
77:24:4b:fc:6c:be:2f:bc:3b:15:2c:27:05:d2:ff:34:41:a2:
b6:d2:c8:3a:59:db:22:33:ea:f1:74:d3:c2:56:3e:48:bf:17:
70:72:d8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:27 2025 by rpki-client