Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sw_7dKBRkfpsUa3l-oBS4pQdVxA.roa
File: sw_7dKBRkfpsUa3l-oBS4pQdVxA.roa (raw, json)
Hash identifier: xrE22CHQj1bvrjvIsJLXTAXsgRrpCFwSTQaWWMbW5KM=
Subject key identifier: B3:0F:FB:74:A0:51:91:FA:6C:51:AD:E5:FA:80:52:E2:94:1D:57:10
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AE6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sw_7dKBRkfpsUa3l-oBS4pQdVxA.roa
Signing time: Tue 29 Sep 2020 10:07:45 +0000
ROA not before: Tue 29 Sep 2020 10:07:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.159.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2790 (0xae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:45 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B30FFB74A05191FA6C51ADE5FA8052E2941D5710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:58:b2:13:33:43:46:6b:e4:d6:d3:f0:75:
82:bb:09:aa:fd:6f:cd:2c:93:17:0a:98:1b:d1:55:
f7:b4:9f:34:a4:a0:18:1b:2a:62:89:bf:f2:16:0e:
ab:d6:cd:b7:db:64:5b:46:3a:9e:6f:e1:52:37:be:
1e:3f:0f:c3:99:b1:a4:6c:65:28:4a:68:e8:12:d6:
19:51:92:82:13:65:93:61:7d:d5:1d:35:44:ca:d2:
4b:e1:b8:e1:ce:59:33:05:e8:85:45:2e:dd:36:25:
70:04:95:a1:0b:3c:f6:2e:fa:3b:fa:1e:38:13:a2:
5b:7d:fb:1e:b2:1c:84:ef:d1:18:ea:6a:0b:d9:d9:
79:e5:86:2a:85:60:3d:9f:a9:e4:29:27:5d:46:e5:
be:8a:33:92:6d:4f:35:50:10:27:ec:a3:fa:18:61:
d0:33:67:22:07:e0:c1:bf:9c:42:d3:8d:e1:e1:12:
98:d4:0e:a0:38:c6:5e:c4:32:ae:e9:6a:cf:f1:f8:
d4:2d:3d:d9:b4:4b:ec:e5:e1:d9:e6:ca:3e:fc:d3:
8e:28:b3:21:14:c6:f6:e1:25:ae:19:16:42:30:ab:
2c:1b:a5:4d:2d:80:af:70:69:79:0a:74:9c:fc:bb:
e8:87:c4:0b:99:c6:b3:13:c2:e1:b6:a4:44:ae:86:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0F:FB:74:A0:51:91:FA:6C:51:AD:E5:FA:80:52:E2:94:1D:57:10
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sw_7dKBRkfpsUa3l-oBS4pQdVxA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.232.0/21
Signature Algorithm: sha256WithRSAEncryption
13:aa:4f:bf:de:f7:35:1e:0e:aa:19:6b:3f:2a:3e:82:f6:66:
52:37:f0:1b:91:22:37:db:6a:96:6b:db:eb:d7:a0:84:55:31:
62:73:6a:4d:89:51:b7:f3:b4:11:1b:5c:df:41:54:f0:13:c7:
e5:2a:a1:c2:f4:87:26:c2:d5:8d:fa:2a:3f:ec:cd:1b:7b:d1:
d4:7e:d6:97:c3:8d:a0:52:84:70:3c:fc:d3:51:1b:b8:16:a3:
9e:08:d0:25:45:94:0d:c1:d6:a2:be:d8:f7:71:dd:99:8b:f2:
5d:36:03:77:7c:9d:29:99:8e:09:14:fd:d8:63:89:fc:3d:1d:
62:97:38:43:33:c4:5b:4a:14:a7:6e:a0:26:fb:1b:a0:79:8a:
a1:4c:2a:6a:89:a1:50:d6:86:25:da:50:06:a7:9f:47:ee:80:
9c:ed:e6:6c:ae:69:13:41:e6:01:c2:b2:5e:bb:35:32:62:13:
45:0e:32:67:8e:7a:9a:6f:9e:9d:f1:13:7b:64:18:9f:ad:47:
79:44:dc:c1:42:81:b8:5f:b2:03:f5:3d:5e:65:1a:9f:e6:ab:
63:32:56:ea:f1:a2:8e:6a:42:d3:5e:b8:8f:20:c8:ba:f2:a0:
c8:b8:fe:d3:bd:2e:e5:a6:61:57:5a:22:b5:12:ba:c0:5d:23:
8c:48:39:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org