Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qdbxDVuTATUUI9fgoK9kcRGH28w.roa
File: qdbxDVuTATUUI9fgoK9kcRGH28w.roa (raw, json)
Hash identifier: s9oH5yXyYsHA03adWJM86gC0erj7IIUAKK5xYbU66/M=
Subject key identifier: A9:D6:F1:0D:5B:93:01:35:14:23:D7:E0:A0:AF:64:71:11:87:DB:CC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1075
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qdbxDVuTATUUI9fgoK9kcRGH28w.roa
Signing time: Sun 07 Feb 2021 12:45:39 +0000
ROA not before: Sun 07 Feb 2021 12:45:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4213 (0x1075)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:45:39 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A9D6F10D5B9301351423D7E0A0AF64711187DBCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:ec:ef:21:66:58:8e:06:bf:a9:21:c9:9b:
5a:34:a0:38:c3:a7:cb:a9:75:a7:4a:f3:e9:ec:1e:
9e:a0:e4:50:9c:2d:2a:9d:45:6e:92:22:ff:ca:fe:
48:db:59:8d:a6:ac:04:32:22:98:06:43:59:93:af:
87:8a:e3:1d:e6:13:9c:bc:b9:83:21:9f:c1:84:f8:
56:d5:d7:95:1d:b7:96:f3:ab:a5:36:0d:f6:9a:01:
79:da:25:14:9b:fc:16:92:3d:5f:7a:66:40:bf:f6:
b7:ea:aa:12:c1:1b:88:7d:f1:2b:de:c2:d8:a9:c0:
9b:dc:5d:9c:65:ac:ad:db:58:0d:f4:de:78:5d:6e:
9a:3a:24:44:77:12:f4:31:aa:cf:a8:08:dd:50:8b:
aa:2d:df:38:93:c4:e1:bc:02:10:15:7b:fb:fd:3a:
5e:c4:5f:d4:18:51:13:65:b5:94:c9:c6:9a:6c:76:
d9:0b:db:7b:56:3d:d0:97:2e:99:d8:37:f2:ef:d1:
71:f5:8d:b1:4f:73:f1:c0:c3:ff:67:02:eb:01:b6:
ed:5c:21:67:5d:de:c7:dc:04:ef:37:d6:7f:ba:97:
a8:a7:ba:10:98:dc:46:8c:ba:f0:96:1b:2f:50:2b:
62:50:c1:4b:c0:9c:fc:c2:b5:b1:17:bf:85:26:58:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D6:F1:0D:5B:93:01:35:14:23:D7:E0:A0:AF:64:71:11:87:DB:CC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qdbxDVuTATUUI9fgoK9kcRGH28w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.96.0/21
Signature Algorithm: sha256WithRSAEncryption
36:29:b4:89:6e:f0:42:16:45:02:81:cb:76:a5:33:65:51:3a:
5e:2b:ad:7c:b4:26:9a:b4:45:36:5c:04:cf:71:24:ec:fb:4c:
8f:76:01:b0:6a:9d:6a:96:d8:c7:e5:e1:db:fb:94:6e:3d:61:
50:52:03:2d:c5:a0:0d:3e:84:27:bb:18:ef:64:9f:a2:8f:d4:
0d:6d:2b:5f:ab:af:d2:f2:2a:92:56:6e:ba:87:ec:d5:3a:1d:
c8:4f:42:97:38:cd:10:9a:9a:49:c3:f8:b8:e6:11:d4:ca:c7:
62:7e:f0:86:f6:ee:4a:dd:75:2e:21:ab:1e:38:32:28:b0:9d:
a2:a5:9b:4e:df:80:f7:d2:a9:68:2f:2d:f6:2d:97:c2:a5:bc:
0b:96:6f:d9:e8:7d:57:b7:cd:6e:65:19:00:ab:8e:14:bd:61:
7d:31:ca:99:f0:75:9f:36:9e:3d:eb:16:95:90:59:ce:09:6e:
8b:22:71:5d:49:52:5d:bc:3b:6a:22:d3:d7:78:26:0e:c8:8b:
3f:ef:3c:6b:2c:6d:f1:3b:c2:94:47:e7:7b:f8:99:75:da:3b:
1e:d3:cb:19:fd:12:52:2f:ce:6a:da:89:47:2b:04:86:16:e4:
42:76:d1:18:15:2d:d4:e3:a7:08:8f:3d:cf:45:6a:32:ac:65:
75:d2:29:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org