Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k2obHcQaFkjrE7jiHpkyPfq1FCA.roa
File: k2obHcQaFkjrE7jiHpkyPfq1FCA.roa (raw, json)
Hash identifier: pdWjGqaLzc5ExBWuL3yVh0ykcyi4fObVG1cjjXfNJa4=
Subject key identifier: 93:6A:1B:1D:C4:1A:16:48:EB:13:B8:E2:1E:99:32:3D:FA:B5:14:20
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1440
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k2obHcQaFkjrE7jiHpkyPfq1FCA.roa
Signing time: Wed 04 May 2022 01:49:14 +0000
ROA not before: Wed 04 May 2022 01:49:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.159.80.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5184 (0x1440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: May 4 01:49:14 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=936A1B1DC41A1648EB13B8E21E99323DFAB51420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:da:7c:85:e7:0e:a5:fd:c5:5c:ef:81:0d:25:
ce:f8:84:cb:4d:43:f9:db:94:ab:fd:a3:ab:da:28:
2e:70:24:7d:dc:e8:c6:2c:89:da:cd:7b:ca:84:e0:
cd:1a:ae:ee:ec:c7:b1:a5:39:5c:86:07:86:df:8a:
8c:f0:70:19:ea:85:85:e2:fd:86:31:da:4c:6a:e3:
f2:e5:7a:0f:f1:b8:45:c9:1c:f7:2e:8e:b4:86:f7:
82:36:71:b0:e9:35:d6:5f:9a:9d:69:e7:3a:3c:56:
ec:51:ce:d5:36:0b:1e:19:1a:99:85:98:9a:89:0a:
76:50:81:ad:f1:f9:b8:8d:8d:ad:77:96:7d:0b:79:
d6:25:69:cf:11:ea:a1:7b:14:a1:7f:45:58:54:9f:
41:1a:e7:1f:2b:93:52:26:36:01:ae:fc:ac:fa:c1:
f4:8c:08:21:9a:96:9f:21:c7:ba:cb:60:0d:01:fc:
be:4f:5b:0c:04:64:42:67:67:79:db:e0:d2:cc:fd:
12:d7:38:b8:f4:9c:fb:83:30:43:46:18:e1:30:ad:
a6:b8:b1:73:13:db:fb:ed:12:26:84:48:da:21:10:
41:76:a1:99:5d:c4:c0:5c:69:bd:78:71:d3:3a:1d:
0f:4d:a7:80:ba:3e:ec:91:31:ac:0f:15:bc:ca:05:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6A:1B:1D:C4:1A:16:48:EB:13:B8:E2:1E:99:32:3D:FA:B5:14:20
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/k2obHcQaFkjrE7jiHpkyPfq1FCA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:4b:a6:a0:7c:68:97:dc:e4:bf:72:5b:64:25:ca:e5:fe:81:
01:20:31:4d:f9:c0:95:f2:58:ce:1e:76:9c:cd:e8:1b:33:bf:
36:61:24:25:1b:29:d4:0f:50:68:ee:42:59:9a:c3:a6:b4:18:
37:af:ec:9b:11:b7:e3:9b:52:1b:19:ff:48:cb:30:71:67:42:
69:46:0b:fc:c9:ac:65:f7:23:01:a2:44:6c:6b:ff:33:46:4f:
32:2e:55:e7:ea:d3:aa:be:d8:1f:fb:05:8e:a5:19:1c:b6:ad:
98:ce:49:35:d1:ef:f6:96:34:65:a7:f9:4f:5c:24:9f:77:e2:
20:3a:d1:17:60:aa:c2:03:bf:d4:69:1f:70:19:68:e7:27:3a:
6d:0d:26:87:01:3f:9e:12:1d:bd:63:84:2e:a2:1b:ba:e1:88:
b6:8b:fc:e0:ca:e1:c5:2b:b0:63:34:90:a9:05:ad:e4:32:5e:
f4:9c:4d:bd:48:73:ce:05:60:49:b8:f7:95:59:77:e9:6c:f6:
0e:88:1b:8b:2d:cb:07:d6:4c:b6:a2:e9:4d:90:b0:9e:68:b2:
42:5e:6d:72:b0:d4:cb:81:a1:bd:eb:02:7c:c0:94:64:25:cd:
42:7a:3e:67:e9:8d:5d:2c:d9:e3:f5:8e:1e:86:e2:89:5a:cc:
57:68:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-fra.rpki-client.org