Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rj2eop8RmogtoL-U3U3pgpglpdE.roa
File: rj2eop8RmogtoL-U3U3pgpglpdE.roa (raw, json)
Hash identifier: kMeH3FyS6FFsLORmLDrh2mU84Xf3XuZPBYxAJYBcWco=
Subject key identifier: AE:3D:9E:A2:9F:11:9A:88:2D:A0:BF:94:DD:4D:E9:82:98:25:A5:D1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12BA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rj2eop8RmogtoL-U3U3pgpglpdE.roa
Signing time: Wed 29 Sep 2021 02:54:53 +0000
ROA not before: Wed 29 Sep 2021 02:54:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 49.159.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4794 (0x12ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:53 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=AE3D9EA29F119A882DA0BF94DD4DE9829825A5D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:5a:4a:51:c0:0d:ea:80:b7:69:1e:ab:53:
b7:8c:f2:51:a2:83:c3:4e:ea:ff:b1:2d:4e:0b:67:
6f:df:c9:02:5e:cd:c3:19:cb:35:41:e1:ca:ea:83:
c3:e6:46:5d:b0:33:8c:0e:7b:e2:c2:d3:8e:6c:ae:
3c:30:93:34:de:a2:9d:83:f4:d0:cb:b6:38:a2:50:
8e:76:1b:63:bf:40:72:1e:b2:40:bf:d8:88:23:2b:
58:fb:7c:ef:84:b4:e9:65:58:ac:d1:cd:fa:fd:30:
5e:1e:a6:a3:32:28:3e:16:8f:a6:5e:51:2c:de:58:
c3:50:27:9f:c2:e7:14:77:be:5b:0a:56:51:5d:29:
23:32:5f:36:7f:75:2a:4e:5f:06:94:1d:31:39:84:
71:60:89:10:9b:0b:c7:04:20:e3:78:b1:43:35:e0:
8c:24:93:82:31:36:ad:05:e7:83:e2:f4:3d:ad:3d:
7c:23:a3:64:6f:15:05:5f:80:85:59:1b:b4:77:60:
3d:d9:9b:4c:05:d8:4d:09:ce:28:07:8f:0b:45:a0:
3d:4e:cf:43:32:88:ac:2d:c2:dd:09:e7:2e:ef:f1:
9a:7f:ec:ee:b0:64:29:0e:6d:f6:b3:35:d9:0c:74:
d7:e3:50:c2:92:75:8e:11:87:6b:30:1a:33:48:23:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3D:9E:A2:9F:11:9A:88:2D:A0:BF:94:DD:4D:E9:82:98:25:A5:D1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rj2eop8RmogtoL-U3U3pgpglpdE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:2c:b1:76:91:03:3c:2c:62:ac:05:ff:3c:1f:09:d7:07:3b:
4c:71:d9:d3:0b:0c:74:d7:aa:5b:3f:69:73:e0:06:08:e7:46:
db:3f:9b:3f:4f:bd:c0:10:57:47:4b:fa:a6:76:4b:8b:ac:66:
2f:e0:e5:9d:3f:a6:69:3b:b3:a2:67:e1:cb:e5:24:e7:bf:16:
95:a5:48:52:31:74:51:fe:7c:6a:ae:ab:fb:70:4d:69:ab:bc:
1a:a8:4f:a4:1e:21:5d:2f:13:de:21:16:49:22:98:ac:85:21:
a0:5e:81:df:73:aa:b0:04:21:a5:87:7b:49:fd:aa:c1:da:b2:
8a:58:83:f9:93:4a:d9:c7:15:7f:05:8c:b6:56:48:20:db:b3:
f2:86:dd:de:30:da:fa:a9:24:38:51:b5:e5:bc:5d:eb:54:50:
69:42:2c:0c:53:90:54:8a:08:f3:08:50:d2:06:9c:ee:25:5d:
c7:52:ee:2c:5c:8a:3e:d5:5f:80:18:39:79:43:a0:de:24:f8:
dd:0a:79:05:00:60:d0:40:bb:e5:96:f2:b2:82:c6:d3:67:0b:
05:78:7f:9e:15:22:6c:60:da:14:72:ae:07:ca:60:e5:93:5b:
90:34:ff:0c:45:01:3f:a8:31:89:89:fe:38:dc:ea:fc:9c:51:
e7:3c:f1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org