Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oOvYaRVRe1vJ4DWqx01peDSfXxg.roa
File: oOvYaRVRe1vJ4DWqx01peDSfXxg.roa (raw, json)
Hash identifier: 3ylqx8Nj9+MNKy3YBUZRZcK4/lne8sB32v8EwMliim0=
Subject key identifier: A0:EB:D8:69:15:51:7B:5B:C9:E0:35:AA:C7:4D:69:78:34:9F:5F:18
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 10C3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oOvYaRVRe1vJ4DWqx01peDSfXxg.roa
Signing time: Sun 07 Feb 2021 12:48:43 +0000
ROA not before: Sun 07 Feb 2021 12:48:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4291 (0x10c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:48:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A0EBD86915517B5BC9E035AAC74D6978349F5F18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:94:da:8d:8c:71:04:87:4a:b3:50:04:4b:0c:
c7:9d:d8:f1:b6:05:24:2c:2b:c3:17:89:2c:16:48:
09:22:c8:81:5c:12:4d:ad:2f:07:78:4b:c7:18:92:
84:2d:e6:87:b5:06:6a:f5:73:97:0f:76:77:ec:42:
e4:de:db:be:7d:48:2e:85:e5:44:a0:27:16:fe:90:
0f:bd:81:bc:a3:78:85:1b:2f:69:b0:fd:c0:20:f7:
31:8b:9c:23:f8:74:29:a1:e2:dd:15:63:6c:09:56:
d1:9e:5e:ba:8a:b1:74:0d:db:bd:b5:91:08:d6:08:
f6:a7:12:23:37:97:15:84:a4:41:de:db:e2:96:44:
a6:c8:08:5c:0d:1f:f0:f1:01:8d:4d:82:2d:b4:3a:
e0:bb:ac:67:c3:cc:a6:b7:9a:79:57:24:80:b6:cf:
34:9c:f1:39:a0:c2:26:b8:0e:b5:0d:fa:1e:b4:e0:
76:48:4b:25:08:f5:ae:58:44:e6:98:e9:05:b2:69:
fa:3b:ae:26:4e:cb:d0:44:e1:07:15:24:b6:84:28:
f7:4b:15:91:00:b5:94:8c:f2:d9:2a:60:8d:04:99:
de:ad:70:40:c0:e4:03:3f:ab:30:d3:65:74:da:7c:
d1:ac:8b:5b:53:00:42:c5:ba:76:44:e9:da:29:0e:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EB:D8:69:15:51:7B:5B:C9:E0:35:AA:C7:4D:69:78:34:9F:5F:18
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/oOvYaRVRe1vJ4DWqx01peDSfXxg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:9b:c8:fc:5a:5c:8d:f0:3c:e7:8a:1b:05:29:13:26:3c:08:
a9:f6:97:9a:96:a3:b1:b7:c9:c8:65:cd:7d:f6:a8:2c:93:0e:
11:6f:01:64:31:1a:57:a0:5a:2e:9c:f0:5e:d2:af:f6:4b:35:
8b:db:66:ef:2c:99:3d:e8:f4:e8:c9:26:99:04:19:68:14:aa:
f4:e0:16:4d:eb:7c:83:ee:67:de:26:d0:44:61:76:2c:d2:b8:
7a:8c:92:2b:bc:e8:85:ea:a3:38:ad:fc:eb:27:4e:14:d9:6f:
24:20:df:2b:c6:4f:5d:cf:b6:92:0c:09:6b:59:4f:ce:ba:d9:
51:a6:a3:8f:f5:fd:c7:f7:78:ba:5f:85:b6:5e:b3:cf:21:c0:
45:2c:93:df:af:86:86:52:d9:b8:26:60:c3:fa:3d:34:bc:ed:
e0:14:47:8f:20:4b:a9:5d:84:cd:88:05:40:27:c0:a8:99:29:
ea:48:bf:33:ee:b3:6e:f9:0c:91:8b:29:93:b7:99:0c:5c:35:
bb:b8:99:a4:a0:d9:56:a8:e6:af:a8:a4:63:83:c6:8a:23:b1:
5d:fd:27:fa:f0:50:a9:ec:bc:84:6a:c7:20:5c:49:c2:ad:58:
89:1d:6b:4d:d7:bc:2a:34:06:c6:6d:1d:1d:80:28:ac:ca:7f:
d4:47:d7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org