Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qdmrqZVFN354rTUhBcBhVJXWjaQ.roa
File: qdmrqZVFN354rTUhBcBhVJXWjaQ.roa (raw, json)
Hash identifier: NkSi5/6lAfex0afWmVdWTFYOq1HMcwXQPIORYbHNsPc=
Subject key identifier: A9:D9:AB:A9:95:45:37:7E:78:AD:35:21:05:C0:61:54:95:D6:8D:A4
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 120F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qdmrqZVFN354rTUhBcBhVJXWjaQ.roa
Signing time: Wed 29 Sep 2021 02:54:09 +0000
ROA not before: Wed 29 Sep 2021 02:54:09 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4623 (0x120f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:09 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A9D9ABA99545377E78AD352105C0615495D68DA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:59:be:02:52:2d:a0:3d:1e:f3:ce:ee:48:
24:33:0f:2f:de:81:08:05:7b:8f:f9:80:19:1a:a0:
69:99:85:eb:40:17:04:3d:c2:25:c1:b5:d2:1f:b3:
ad:f5:29:6a:04:82:97:8c:1e:42:70:56:76:1c:a4:
c3:97:d8:4f:f7:78:88:c3:6f:40:22:ff:9e:ac:ea:
92:ab:12:06:80:38:61:70:31:1f:9a:b6:b3:82:5d:
ae:36:97:91:d1:73:80:a2:24:db:40:37:4b:73:db:
f3:c7:b1:d6:4d:34:b9:e0:03:88:4e:be:68:21:fa:
7b:5d:82:fd:fe:98:9a:cc:cb:18:d9:fd:fd:5e:87:
90:59:7e:55:c1:07:bd:ce:0c:43:06:84:ab:61:49:
d9:df:ea:76:d1:91:5d:30:65:73:3e:1e:bb:ed:19:
09:c6:fd:7d:f6:81:d0:7b:6f:48:55:ab:1e:ab:5d:
35:3d:99:1b:4b:b4:43:7e:ab:43:79:5e:65:23:f2:
f0:c2:93:4b:59:81:f4:82:3f:89:ac:f7:3e:bd:e7:
1e:cd:ba:79:35:48:91:64:de:36:b8:c1:8a:14:25:
4f:04:22:25:82:2c:35:19:11:3e:85:ab:d9:72:b9:
22:95:67:3a:80:a8:73:8c:a4:e3:43:9b:30:e1:6e:
d7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D9:AB:A9:95:45:37:7E:78:AD:35:21:05:C0:61:54:95:D6:8D:A4
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/qdmrqZVFN354rTUhBcBhVJXWjaQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.216.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:2f:97:b0:33:17:8a:89:20:3a:14:83:85:86:7c:19:b6:f2:
f4:22:72:3a:05:0e:b6:3d:70:4f:f8:4a:43:82:2b:cc:83:25:
1a:13:ce:7d:d9:70:68:c6:3c:29:f8:81:50:6b:38:4d:2d:20:
56:29:3f:cc:e3:00:8a:e7:28:5f:db:f7:27:ed:23:d0:27:c2:
1a:52:52:eb:71:af:a8:8c:84:3b:38:14:e9:f5:34:6e:6e:93:
2c:5f:23:5b:9d:04:76:7f:f2:17:30:d1:70:91:a1:81:ef:1b:
14:b3:55:11:fa:f3:28:7e:75:0b:7d:4c:d5:56:a2:fd:6a:c3:
06:5a:2d:5a:22:e2:44:e3:f2:93:81:59:16:d3:a9:16:c9:8f:
ca:f1:70:a3:49:78:1b:bf:a3:8c:ab:9a:57:88:f3:c8:3d:2b:
d9:a3:c4:9e:6d:a1:fe:3b:85:a9:ef:ea:84:3b:b0:bd:56:9c:
10:44:cc:68:16:3b:ab:a5:bc:5f:b7:15:a9:7f:df:fe:ff:70:
9e:59:41:e5:f3:a4:f1:52:9f:8e:26:e4:4e:99:a9:f9:29:d8:
9c:64:93:bf:da:6f:21:62:19:3e:d2:24:bb:d3:41:57:ad:74:
fd:c0:c3:bf:6f:be:9f:fb:bb:e2:c6:37:aa:50:e9:5b:3c:2a:
9f:92:cd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org