Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g8YY6fNO-mjxAW1Hpm8MERmbXJc.roa
File: g8YY6fNO-mjxAW1Hpm8MERmbXJc.roa (raw, json)
Hash identifier: owpCQn05kNySSv2bFq6capH4rn0FJuk0Iu4uSWQV0tc=
Subject key identifier: 83:C6:18:E9:F3:4E:FA:68:F1:01:6D:47:A6:6F:0C:11:19:9B:5C:97
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B2E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g8YY6fNO-mjxAW1Hpm8MERmbXJc.roa
Signing time: Tue 29 Sep 2020 10:08:06 +0000
ROA not before: Tue 29 Sep 2020 10:08:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2862 (0xb2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:06 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=83C618E9F34EFA68F1016D47A66F0C11199B5C97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c0:03:8a:ab:21:af:9d:51:1c:37:27:cb:b3:
10:0f:b5:77:0c:28:2c:f5:22:a0:c7:d7:2c:53:25:
c4:ff:da:a3:64:d2:19:1b:57:4e:4d:12:43:fe:1b:
bc:d7:f5:0a:f3:1b:50:43:5c:26:01:34:9c:5c:ae:
37:a7:31:cb:87:3e:ae:96:a2:45:38:8a:b0:37:ec:
82:c1:c6:e9:ec:50:58:58:9b:1a:77:3e:58:c7:f0:
ba:e5:a9:77:ed:3d:3d:4d:15:ec:c6:2f:27:a6:9a:
70:6d:47:d8:c4:af:1e:e2:11:50:87:80:b1:a6:57:
af:68:5a:2b:09:ff:48:2e:0a:08:cd:90:91:62:80:
01:94:ba:f3:03:c4:e0:35:fa:26:a2:0c:13:ff:f0:
7a:da:ba:79:82:f5:ae:03:0a:5f:93:af:9f:96:4a:
d7:08:b5:3d:0b:ec:cb:6f:62:b2:0d:ee:9f:08:0a:
89:67:12:5d:bc:75:3e:e3:eb:84:e9:e8:eb:2d:d6:
72:e2:93:05:af:f2:dc:a5:3e:c3:4e:63:66:ef:4a:
a8:41:5d:b9:90:44:4b:40:9d:cf:4d:4c:4e:7b:6c:
52:46:61:0e:df:d1:4f:4c:0b:a7:03:d4:73:88:c0:
9e:a0:55:33:d4:ed:2d:69:50:10:75:82:45:8b:e0:
b2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C6:18:E9:F3:4E:FA:68:F1:01:6D:47:A6:6F:0C:11:19:9B:5C:97
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g8YY6fNO-mjxAW1Hpm8MERmbXJc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.0.0/22
Signature Algorithm: sha256WithRSAEncryption
76:37:a2:3b:71:f5:af:cf:fa:49:c9:05:e6:43:e4:47:4b:1a:
ab:e3:5a:f9:6f:b9:41:04:15:bf:1e:7e:f9:33:9d:42:d3:f8:
78:87:8d:18:d6:8a:d8:71:44:ea:be:28:84:79:b9:6a:4e:11:
bd:51:ff:01:f6:60:90:c4:51:75:8c:d3:aa:88:59:2b:d4:2f:
48:a2:fe:f2:be:7f:df:97:b1:c8:39:ec:e2:51:8a:fe:fc:ba:
b3:39:6f:36:dc:a5:dc:2a:f6:ac:2e:d7:fa:7d:56:67:af:3b:
e1:0c:19:12:71:a3:6f:72:e5:06:97:cf:99:20:0d:de:d4:e2:
a8:6e:80:af:3c:28:78:ad:4d:3e:e3:72:03:50:f8:78:30:f5:
00:64:c7:88:ed:60:46:65:3d:4a:c5:a4:28:d9:6e:3a:4c:ce:
80:78:f0:73:8b:20:f5:37:11:aa:d4:08:4c:e0:38:f6:7d:3c:
01:11:6e:7a:98:22:ee:c3:84:54:b3:1c:de:32:f7:ce:21:fa:
94:bc:76:a2:b2:e9:68:17:1b:12:7c:fd:2e:b1:06:f5:fc:b1:
0c:4d:c4:a1:1f:95:cb:f3:d3:84:d1:78:e4:94:f5:25:91:95:
e8:f7:fb:9a:4e:f6:ef:12:b6:e1:07:53:09:56:f7:69:68:62:
2a:cc:aa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org