Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t-WM040hN3S4dR8a7Oo2dUgrg8Y.roa
File: t-WM040hN3S4dR8a7Oo2dUgrg8Y.roa (raw, json)
Hash identifier: pBGq99cZdMKCT49xVunT0o63O7eoUR+LmJZbaLco9jw=
Subject key identifier: B7:E5:8C:D3:8D:21:37:74:B8:75:1F:1A:EC:EA:36:75:48:2B:83:C6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t-WM040hN3S4dR8a7Oo2dUgrg8Y.roa
Signing time: Thu 15 Sep 2022 02:35:21 +0000
ROA not before: Thu 15 Sep 2022 02:35:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B7E58CD38D213774B8751F1AECEA3675482B83C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:1e:18:b1:fe:ca:dc:c7:62:25:5a:ae:52:
5f:84:61:45:dc:f9:05:de:55:15:bb:05:65:bc:2b:
e1:59:f8:90:e5:a7:6a:bf:a5:af:d3:47:7d:1c:25:
3b:14:52:94:d5:36:61:69:2a:3a:d2:66:22:17:68:
78:3d:04:0c:cb:3c:3a:e3:74:69:3f:b9:ef:d8:fb:
c6:92:d0:56:9a:7f:e0:a2:f7:9a:be:ca:9d:20:5c:
94:4b:c2:97:1f:46:c6:cf:1c:57:bb:cd:a2:4f:1c:
94:1c:50:66:ff:49:a8:f8:0c:97:81:48:21:5d:ce:
19:ca:e2:f8:c1:10:c7:f6:aa:e5:80:6c:99:cb:a3:
d6:47:58:b6:1a:5d:0a:88:10:01:22:69:1a:bc:40:
75:31:be:01:20:96:20:43:b1:70:0c:b1:11:6e:ae:
7e:84:fb:f9:46:98:b0:f8:63:8f:a0:2a:7b:92:b7:
58:24:aa:5a:c6:82:48:07:e5:9d:f5:a0:cb:0b:7f:
68:5f:c6:1c:27:ab:2c:7c:b5:e5:53:bf:c7:b6:40:
b9:f4:67:68:d8:a5:71:02:b2:59:a6:36:6a:db:42:
31:77:00:56:07:78:a4:02:88:2e:b8:0b:6b:59:21:
0e:17:b4:5b:40:4c:65:a4:25:c9:5b:de:7f:d2:80:
a1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E5:8C:D3:8D:21:37:74:B8:75:1F:1A:EC:EA:36:75:48:2B:83:C6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/t-WM040hN3S4dR8a7Oo2dUgrg8Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.40.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:8d:3c:ef:29:6a:44:db:00:62:cf:23:57:8a:4d:54:37:ee:
fd:88:5a:26:bb:5c:06:57:cb:ef:44:05:fe:7a:18:80:c1:5b:
12:5d:42:56:ba:82:08:be:31:30:f5:3f:79:40:4c:c2:d8:e5:
86:cd:5a:cd:40:2a:59:74:52:ef:c7:91:53:5f:33:74:dd:e6:
cb:2c:3a:95:bc:f3:6b:cf:b1:e7:ac:a3:cd:80:b5:4f:57:b6:
79:e7:b3:f0:88:c6:7f:3e:73:09:1f:df:40:47:41:7c:07:52:
3f:45:8b:99:6c:4b:af:ff:c2:aa:21:ae:7b:39:78:b5:35:82:
2f:a0:09:75:35:2f:53:9c:71:8e:69:d2:96:6a:da:04:86:3d:
8b:75:8f:33:a7:77:32:3a:93:e9:ea:8d:1a:86:a9:f8:30:63:
91:3b:52:8c:8f:6b:e2:d7:8d:e4:5c:24:d4:80:b2:c9:6e:25:
13:53:0f:eb:bc:6f:bb:a2:a4:63:86:f2:2f:e6:aa:b9:72:8d:
fc:f0:21:0b:a7:a2:23:01:b1:55:7d:3f:f5:ac:8b:2a:17:3f:
75:d6:da:f5:49:5a:2d:06:0d:3f:51:f7:41:3e:01:db:8c:bd:
d2:50:84:8f:a6:5b:3a:70:29:4b:7a:df:42:5c:f1:0d:e2:e7:
92:9e:93:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org