Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jgEuLPX0ooQkqFcPBtjHwmtzYsQ.roa
File: jgEuLPX0ooQkqFcPBtjHwmtzYsQ.roa (raw, json)
Hash identifier: OaMOW1Gu9398q7tVnbXwjo0IwXAu0M7GqgCO8OXxP/c=
Subject key identifier: 8E:01:2E:2C:F5:F4:A2:84:24:A8:57:0F:06:D8:C7:C2:6B:73:62:C4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0ADA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jgEuLPX0ooQkqFcPBtjHwmtzYsQ.roa
Signing time: Tue 29 Sep 2020 10:07:42 +0000
ROA not before: Tue 29 Sep 2020 10:07:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2778 (0xada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8E012E2CF5F4A28424A8570F06D8C7C26B7362C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:7b:4e:4f:b8:35:7a:f6:09:6d:40:1b:35:
ab:d2:73:34:82:a2:cb:ce:10:f3:fb:f6:75:e5:5c:
7f:d3:9c:c1:9a:54:8e:57:da:75:48:9b:6e:2f:82:
4b:c0:32:4d:24:37:e1:8f:87:42:09:30:39:fa:90:
90:57:9c:5a:16:e4:cf:4c:ff:9a:bd:a4:20:f3:75:
78:68:13:d3:23:39:05:8c:2a:2a:67:0e:2c:42:2c:
42:7b:8d:0b:29:8c:ad:43:4a:cf:a1:82:ff:f1:ca:
be:82:88:45:1c:50:3d:53:7b:13:4f:f2:0c:f5:34:
d3:ec:d6:46:d0:12:38:94:ee:fe:8c:19:d1:07:04:
7b:cb:4a:3b:c1:09:4f:71:2e:8a:c8:16:5b:bf:f2:
49:f7:b6:ab:9c:ba:8e:11:53:9b:d7:9f:9d:da:8b:
55:a3:e3:d2:c8:66:30:60:54:a0:f8:dc:d7:c5:cb:
f1:c0:2b:f5:5d:5a:96:56:86:4d:b7:ea:f0:6d:21:
a2:dc:a4:63:79:98:dd:06:a8:fb:a4:3f:94:83:27:
53:8a:f7:8d:df:53:3d:10:fb:e6:d7:8d:cf:79:83:
18:5b:29:b9:b4:13:9d:e6:5c:78:cc:70:13:fd:61:
17:7f:08:fd:79:bb:ff:b5:ec:04:38:82:a1:25:cc:
e9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:01:2E:2C:F5:F4:A2:84:24:A8:57:0F:06:D8:C7:C2:6B:73:62:C4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/jgEuLPX0ooQkqFcPBtjHwmtzYsQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.160.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:04:48:a0:57:eb:1e:e4:0b:0c:48:cd:3e:5d:5f:6d:e2:a0:
84:ca:41:c2:ce:1f:9b:84:28:9a:94:eb:bf:13:1b:dc:29:82:
24:8b:91:60:53:42:52:38:2d:52:86:33:a9:ea:5d:39:e3:84:
71:3f:ec:e3:7e:01:d7:44:a3:97:b6:e4:7e:5d:89:6c:25:21:
78:23:89:51:e1:07:d6:e4:50:74:1f:af:b4:a5:77:bd:53:e7:
3b:9a:16:13:b3:ea:62:f5:ca:12:80:6f:86:81:ed:50:a1:59:
4a:bf:fc:06:da:cf:72:51:d0:f9:fc:26:07:9b:db:75:d5:ac:
30:4b:78:52:71:10:ad:db:d5:fc:76:84:cd:38:3e:a9:c4:b0:
1d:60:7b:df:f6:93:8c:a2:dc:47:55:fe:e7:10:bf:54:43:21:
8d:3b:43:b1:c6:58:b5:31:e2:3f:87:91:d9:59:0c:36:c1:80:
18:b2:16:2b:8d:a3:04:e1:02:43:47:97:9d:72:c3:cb:52:40:
a5:40:92:22:4e:ad:a7:10:f9:12:4e:42:a6:63:f3:24:a4:d0:
8c:97:2f:90:bd:87:37:a3:84:b1:25:23:d3:73:8d:79:b3:6c:
52:e8:7f:20:c4:ea:e2:ba:ce:07:7c:3d:bf:56:ae:4d:16:8b:
77:06:7a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org