Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mnbzRk1a9ts9DbDEgI7OM7StcaA.roa
File: mnbzRk1a9ts9DbDEgI7OM7StcaA.roa (raw, json)
Hash identifier: 55AAOh534UpNmMZYDBcs5zZvOkqKFHVAhGZ6hxAx6js=
Subject key identifier: 9A:76:F3:46:4D:5A:F6:DB:3D:0D:B0:C4:80:8E:CE:33:B4:AD:71:A0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 122B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mnbzRk1a9ts9DbDEgI7OM7StcaA.roa
Signing time: Wed 29 Sep 2021 02:54:16 +0000
ROA not before: Wed 29 Sep 2021 02:54:16 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4651 (0x122b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:16 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9A76F3464D5AF6DB3D0DB0C4808ECE33B4AD71A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:f7:32:dc:b3:d3:1d:81:9a:46:cc:8b:88:
a9:76:3f:9a:a4:fe:f6:c4:89:07:2c:a5:f4:7f:77:
13:b1:09:d9:7d:6e:bf:53:97:91:55:dd:4f:8d:7a:
ab:2f:f7:65:48:c4:e7:30:25:ac:8f:ec:ef:87:cb:
9f:e6:99:f6:58:08:15:68:09:14:a5:0e:dd:44:3b:
10:13:87:77:43:f1:4e:ab:f1:51:fe:c2:79:1c:e3:
43:3d:7c:0b:d0:76:ca:0d:bb:b4:49:ed:1e:d0:6f:
8c:7b:e5:1b:46:a1:3c:09:34:12:1a:b6:66:4e:65:
92:ae:a9:24:8f:7d:1e:9e:0b:96:41:5c:3d:ab:4f:
64:bd:1e:ac:de:10:13:98:c4:48:9d:4d:ee:26:93:
c3:0c:18:b7:d8:2e:16:ce:ed:a4:62:e2:60:ef:48:
e0:88:77:43:0e:2b:14:99:b9:a4:f0:c1:2d:2b:5d:
48:1f:9d:3e:be:29:e3:f5:33:88:8a:96:27:61:a0:
dc:bc:7b:47:17:13:6e:7e:3c:ec:33:62:58:59:4f:
d9:99:d1:55:4e:0c:81:24:73:e2:90:66:b0:5a:d1:
74:96:3f:07:6b:36:22:51:89:ac:fd:e5:66:cd:d5:
45:52:25:dd:e5:c7:10:43:9b:fb:e4:30:45:d8:c2:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:76:F3:46:4D:5A:F6:DB:3D:0D:B0:C4:80:8E:CE:33:B4:AD:71:A0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/mnbzRk1a9ts9DbDEgI7OM7StcaA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.40.0/21
Signature Algorithm: sha256WithRSAEncryption
57:8b:e2:15:bb:96:0d:5c:18:5a:20:d9:db:99:d0:3f:96:f6:
96:90:25:85:af:8b:71:1b:20:35:5c:19:69:87:09:6d:a6:a6:
67:5b:46:92:7c:d5:c2:1a:a1:3c:ec:03:18:57:43:be:22:cc:
01:6f:46:3e:12:07:e8:d3:83:cb:c2:17:52:1a:d9:0d:02:96:
22:5d:99:6e:6a:71:43:58:72:fc:e3:e7:e8:ea:41:33:a3:fc:
83:82:c7:41:1f:c8:9b:77:f5:a1:29:c8:72:e3:8d:50:9c:be:
36:1f:0d:96:2c:86:4b:42:75:c3:da:5d:32:e0:19:b1:79:54:
66:66:c1:a9:40:b9:20:58:ba:aa:b9:bc:b3:15:90:aa:71:08:
0f:ee:00:14:73:e1:3d:c9:1a:18:69:3b:81:75:3a:dd:0e:09:
da:d5:23:08:9e:de:d3:0c:88:5f:66:07:d8:30:0c:21:37:ca:
e0:1d:63:61:75:e4:bc:89:9c:0c:1d:23:4d:4c:7b:d8:74:dc:
c0:c3:d5:03:24:72:45:e2:56:9c:80:d7:b2:ef:c0:d9:03:c5:
9f:2d:a6:e3:8a:51:63:0c:f8:31:6f:b6:2c:24:a9:43:bd:1f:
d7:9c:98:ae:40:35:94:43:7b:b5:22:9e:aa:e3:7b:d8:c8:48:
a8:18:84:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:58:30 2025 by rpki-client