Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lZV7rWE1ey5YgxcJ3jcD_3pzbVk.roa
File: lZV7rWE1ey5YgxcJ3jcD_3pzbVk.roa (raw, json)
Hash identifier: u9fxOkBAdId5bjLiRVLHVvRAgHH4uF75d+Ls3Trs+LA=
Subject key identifier: 95:95:7B:AD:61:35:7B:2E:58:83:17:09:DE:37:03:FF:7A:73:6D:59
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1923
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lZV7rWE1ey5YgxcJ3jcD_3pzbVk.roa
Signing time: Sat 22 Oct 2022 06:06:08 +0000
ROA not before: Sat 22 Oct 2022 06:06:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6435 (0x1923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=95957BAD61357B2E58831709DE3703FF7A736D59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:99:67:89:20:98:a2:27:35:8b:00:81:78:
8c:16:2a:78:78:8a:72:28:02:76:8c:07:86:15:f8:
43:9d:c9:29:b8:4c:19:91:49:70:db:66:ad:42:ba:
f8:c6:dc:a9:a8:ef:d3:62:52:5c:04:1a:84:c3:d8:
cf:44:31:82:5a:d2:88:d3:8d:ec:bd:8e:c3:f6:ed:
37:40:66:a7:b4:b9:7e:c6:4f:a3:e4:54:f1:5a:da:
53:e5:be:d5:6e:c5:90:3a:b6:eb:36:2d:82:37:d9:
a4:5d:dc:54:f4:b3:73:b0:7c:b1:f6:ef:f7:bc:96:
ca:21:0a:93:00:bc:32:84:e5:54:f0:ef:35:cd:9d:
93:9e:33:a8:5d:d2:13:73:27:65:91:48:58:be:f6:
c4:84:da:7a:8e:66:ae:03:d4:6d:f5:3f:4c:8e:44:
2c:63:e3:eb:84:3f:18:bb:59:0d:51:3e:7a:50:85:
6f:49:7b:ae:9b:ef:83:46:e1:e8:7b:c6:c7:7c:22:
d2:c4:9e:f7:14:00:6e:18:b0:b2:2f:4b:13:9f:0e:
d0:7a:31:be:4d:07:1b:4b:71:f1:51:24:cd:41:28:
7b:ba:b1:fd:9b:a4:3f:85:7f:b7:e6:30:20:fd:2a:
c3:37:a9:36:d0:b8:45:a4:0d:d4:55:1a:4c:49:d8:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:95:7B:AD:61:35:7B:2E:58:83:17:09:DE:37:03:FF:7A:73:6D:59
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/lZV7rWE1ey5YgxcJ3jcD_3pzbVk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/20
Signature Algorithm: sha256WithRSAEncryption
51:c2:91:18:e0:6f:ae:ab:22:98:88:6a:6b:28:24:3c:49:21:
8b:0e:53:fe:40:e7:2a:b8:72:d9:a7:e3:ea:5e:80:e7:0f:38:
bb:90:b9:22:97:dd:d9:dd:da:c0:1a:ca:f2:9c:5f:92:24:82:
2f:b3:f4:51:44:0e:56:e7:1e:d3:26:71:7a:5f:2e:15:1f:86:
33:af:b5:33:8d:73:66:44:f4:7b:9e:5f:27:5c:72:d2:47:59:
fd:e4:95:54:b2:62:df:35:a8:79:ea:55:64:7b:71:0f:23:dc:
0c:2d:bd:3a:6b:0b:65:d0:70:bc:7f:8d:38:63:75:b2:a2:bb:
c3:47:7f:4a:72:b3:c5:71:58:0b:b7:0a:01:ba:f6:c5:73:2c:
37:6a:db:c2:2c:6e:8e:f4:50:39:3e:17:0b:69:da:c4:d5:cd:
5e:4e:0d:46:54:78:c2:a0:49:47:09:f9:f0:c1:cb:b4:b4:6e:
77:d6:98:e0:a3:b7:3c:9a:d1:3d:21:d7:5f:42:9a:df:f9:f9:
b2:0e:34:a3:c9:f9:17:56:97:27:73:b0:53:be:24:a5:91:ed:
24:75:2a:97:b9:89:64:64:48:c7:40:04:20:0e:71:b5:ad:48:
60:77:61:77:37:11:5b:77:28:b5:fb:a6:10:e8:24:6e:d5:e3:
95:bd:ab:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org