Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fXbcF7y--fk6iWscLVDxfmqoZRY.roa
File: fXbcF7y--fk6iWscLVDxfmqoZRY.roa (raw, json)
Hash identifier: 0BmE5GsOLK/FAn6rMzCY8CTEAIKXY4BspR6/bv6kxiU=
Subject key identifier: 7D:76:DC:17:BC:BE:F9:F9:3A:89:6B:1C:2D:50:F1:7E:6A:A8:65:16
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1878
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fXbcF7y--fk6iWscLVDxfmqoZRY.roa
Signing time: Sat 22 Oct 2022 05:57:50 +0000
ROA not before: Sat 22 Oct 2022 05:57:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.158.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6264 (0x1878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:57:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7D76DC17BCBEF9F93A896B1C2D50F17E6AA86516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:7c:4a:d9:82:74:4a:63:cb:5d:e9:ef:0e:
05:b5:4b:20:0c:23:f4:2a:0d:d7:1a:16:ba:06:b1:
17:00:40:e6:03:da:13:08:54:b2:c5:2f:4f:6a:87:
68:56:60:be:9e:bf:de:27:f1:b6:72:b7:e1:86:d8:
be:06:69:c7:a6:4b:aa:d7:29:1b:8a:03:46:88:5c:
94:b2:6f:b8:f3:48:14:39:87:f7:43:cf:19:33:79:
34:d6:3c:a0:cf:39:8a:b0:4f:62:f7:0c:be:6d:b9:
12:e1:12:d2:df:92:90:36:7c:7e:6c:17:ec:e9:19:
6e:c2:c7:9b:9a:c4:98:59:14:4a:fe:82:a7:c3:b4:
9c:e0:b4:1a:d2:7b:02:2b:c5:7e:44:61:24:00:c0:
a5:4e:c4:6b:20:04:52:fc:4a:dc:dc:d6:55:67:c4:
56:5c:58:bd:52:33:c2:77:2f:57:ee:4f:8d:5d:4c:
22:03:f7:46:11:ef:cb:b6:86:ca:1b:58:14:29:3c:
a7:75:3b:c6:5b:ec:af:98:ae:27:8b:43:c8:83:dc:
a9:f3:7f:22:c1:38:b1:03:66:85:44:dc:3c:27:63:
4f:63:44:ed:6f:93:0e:71:e3:0d:44:d5:63:23:3c:
49:12:6f:f3:40:4c:9f:e1:da:87:61:a7:80:4b:6c:
7c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:76:DC:17:BC:BE:F9:F9:3A:89:6B:1C:2D:50:F1:7E:6A:A8:65:16
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fXbcF7y--fk6iWscLVDxfmqoZRY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.196.0/22
Signature Algorithm: sha256WithRSAEncryption
33:d8:60:43:f6:9d:18:7d:71:ea:89:bc:13:61:c1:9d:f0:c3:
20:a8:c7:b3:85:23:7b:e5:6c:47:b9:7e:fd:23:f1:98:29:1d:
3e:7a:a7:b0:92:eb:8e:c4:36:c8:3b:c9:bc:b7:8e:1f:ef:5e:
41:3d:b7:cd:8c:94:15:e6:f5:39:e2:19:75:11:ec:82:94:a4:
b0:b6:04:d6:09:e0:43:d3:ad:9f:c2:87:a5:5a:e9:a9:b7:3d:
58:8e:ff:cd:26:32:f7:f4:c3:c8:eb:e3:b8:dc:8e:c5:16:1d:
45:ca:3e:5a:70:65:fe:d8:c8:7f:04:78:71:d0:b8:5d:94:7a:
d3:3c:9a:7a:b6:8f:f3:7e:3c:83:09:65:90:b6:30:0b:85:b1:
2a:34:76:12:7b:bc:e3:8a:82:c0:da:d1:de:df:2c:2f:d7:79:
47:9e:a4:e7:2a:40:09:80:28:a7:36:ee:d4:b6:00:d9:6d:33:
09:05:6c:ed:d6:56:ca:09:17:97:06:5d:00:40:14:c9:e7:05:
2f:6b:14:b4:ce:65:b0:ac:1c:9b:a2:34:60:48:f5:07:6e:48:
17:75:e3:1a:e4:57:4b:98:de:82:f5:89:2e:a4:98:40:6b:90:
ad:f8:4a:65:70:2b:a4:66:bc:b5:56:5d:97:fa:01:0b:99:24:
1d:ff:13:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org