Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fuq3zk64-SCW4VQvCQaDTTH0Deo.roa
File: fuq3zk64-SCW4VQvCQaDTTH0Deo.roa (raw, json)
Hash identifier: ztnTyxblX3APOQOD1kYpL+T4sjg4WA6HZsnhs85lF/w=
Subject key identifier: 7E:EA:B7:CE:4E:B8:F9:20:96:E1:54:2F:09:06:83:4D:31:F4:0D:EA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FC3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fuq3zk64-SCW4VQvCQaDTTH0Deo.roa
Signing time: Sun 07 Feb 2021 12:35:56 +0000
ROA not before: Sun 07 Feb 2021 12:35:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 49.158.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4035 (0xfc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:35:56 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7EEAB7CE4EB8F92096E1542F0906834D31F40DEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:23:fd:f3:fc:e5:6a:79:2f:74:9d:bb:1c:
19:20:51:c4:d1:e9:f3:38:16:84:ac:91:26:63:ae:
2f:bf:52:36:09:ed:75:bf:14:c2:75:27:22:7c:f2:
d2:ce:09:00:cc:ef:9d:f8:73:d3:8c:77:9e:7a:38:
47:83:b5:b5:8f:a6:59:fe:0c:dd:6e:7e:4b:9d:8e:
8f:c4:33:13:e5:82:e7:2b:e8:7c:5b:67:f0:03:fe:
d5:d7:20:f7:11:ff:04:5e:54:32:51:49:fa:e8:3c:
e9:ac:6c:f5:a5:97:e3:79:15:d6:e3:50:24:3b:96:
55:ff:f1:72:0e:e1:26:b6:83:dc:c4:ed:bf:87:17:
0d:91:a8:ae:64:14:83:48:91:0e:be:2b:dd:5d:b5:
2c:e1:12:ac:bb:3c:2a:30:96:ae:2c:4b:75:84:3f:
e6:f1:b5:92:96:53:4d:24:57:ca:6d:00:fc:82:64:
b2:31:56:ee:58:b5:31:5b:72:02:7e:c3:c9:7a:97:
2e:fa:fd:dc:91:ce:80:b1:fe:f7:70:15:61:ce:93:
9a:3d:09:56:fd:f4:8b:9c:f5:6c:01:eb:08:1a:33:
03:63:b7:b2:72:ed:1a:f9:04:62:87:65:b8:51:b2:
e4:d4:72:11:b3:db:89:ab:cb:a7:90:93:4f:78:aa:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EA:B7:CE:4E:B8:F9:20:96:E1:54:2F:09:06:83:4D:31:F4:0D:EA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fuq3zk64-SCW4VQvCQaDTTH0Deo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.192.0/22
Signature Algorithm: sha256WithRSAEncryption
31:21:70:d9:08:01:d6:09:d7:c4:65:65:19:d7:87:1d:a0:a1:
4f:1f:88:78:e3:a4:7a:ce:22:ea:2e:eb:94:6c:97:f6:35:6b:
1a:54:2c:60:e4:28:24:23:1a:01:08:6a:aa:40:d6:d6:f4:d6:
92:71:13:2f:b0:5a:f0:ae:cf:d3:10:91:ef:58:7c:b9:c5:d1:
1a:f2:86:c8:5c:aa:c2:58:bf:91:8d:d5:2d:da:c5:df:fa:fc:
db:6f:24:bc:53:7f:79:cf:4a:bb:e6:95:02:4a:8b:a6:20:dc:
dd:56:0f:eb:8c:f9:89:97:4c:8e:1b:c8:79:fd:3f:3f:f6:cc:
cc:75:2c:00:01:24:ea:b1:5d:8d:cb:51:54:ea:cb:ec:34:17:
a9:5b:8d:07:8e:a1:f4:f9:05:1e:be:56:97:82:7f:60:c4:53:
d9:0d:69:ea:1c:73:65:fa:ba:8e:b3:45:e7:53:52:35:2d:c5:
ec:45:60:f4:43:ca:d2:26:b5:ce:00:52:3f:19:db:30:dc:0e:
d4:da:80:14:d2:57:84:77:c6:01:a4:b2:32:73:48:fb:b8:ac:
82:bd:b9:86:c9:a8:9a:05:52:34:36:da:0f:ab:98:68:32:24:
96:60:a5:5c:2d:3d:06:9c:41:3d:2e:12:f4:df:98:fe:24:32:
41:54:2d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org