Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vF3ezj0OkORCTT2EVC44a5ELWZM.roa
File: vF3ezj0OkORCTT2EVC44a5ELWZM.roa (raw, json)
Hash identifier: ZidfJ6YTTc1qbbblfWDFvfpbMsBF26AkoqALw10KhcY=
Subject key identifier: BC:5D:DE:CE:3D:0E:90:E4:42:4D:3D:84:54:2E:38:6B:91:0B:59:93
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12A7
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vF3ezj0OkORCTT2EVC44a5ELWZM.roa
Signing time: Wed 29 Sep 2021 02:54:50 +0000
ROA not before: Wed 29 Sep 2021 02:54:50 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 49.158.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4775 (0x12a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:50 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BC5DDECE3D0E90E4424D3D84542E386B910B5993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:69:d2:f6:8b:f0:b6:70:ba:ca:ef:e0:87:
e2:73:32:15:25:41:f6:b5:f0:c9:37:31:53:94:d2:
a4:da:15:af:49:6e:99:22:15:a0:09:59:36:3f:86:
8b:9b:21:28:80:9f:55:a3:da:3e:14:fc:8c:1d:aa:
28:ef:c0:90:fb:59:2c:3f:b9:e1:c3:a6:3e:8b:be:
29:04:1b:56:01:98:e2:86:2c:83:28:19:d4:f2:0a:
01:e2:21:2e:c1:01:39:29:7c:00:54:02:eb:73:d7:
a4:7f:7d:f3:98:01:b1:77:13:51:de:ae:c7:25:42:
86:90:3e:6e:37:cb:74:cb:84:b6:87:e7:72:b8:39:
61:b6:e8:ca:2f:75:44:c3:f6:58:4f:0c:94:c7:cf:
37:c5:bf:7b:41:02:2a:46:f3:2f:54:20:65:08:3f:
22:a9:d6:c6:e3:9e:5b:b8:ab:b4:e0:81:5f:fa:ae:
07:db:6d:c2:77:52:d6:51:bc:aa:0f:1d:69:55:6a:
6c:15:b5:30:43:2f:89:70:bb:e1:8f:72:17:0f:df:
46:88:2d:52:fe:c4:6c:17:17:ce:0e:40:b8:22:0e:
c4:3a:02:aa:e2:78:43:2c:9e:89:21:70:48:30:47:
20:fa:86:ab:b3:80:f8:84:12:50:e7:0b:4b:1c:0d:
2b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5D:DE:CE:3D:0E:90:E4:42:4D:3D:84:54:2E:38:6B:91:0B:59:93
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vF3ezj0OkORCTT2EVC44a5ELWZM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.224.0/21
Signature Algorithm: sha256WithRSAEncryption
80:9f:e8:bf:c3:5a:f9:26:9e:4c:76:75:68:70:6a:12:ae:80:
22:7d:22:ac:be:cf:82:66:de:4e:72:b7:f3:68:33:70:64:5a:
98:df:8c:89:92:bf:a6:0f:41:ea:d2:97:75:88:94:35:81:8d:
22:80:60:fb:c1:77:56:07:33:14:68:3c:22:12:e0:fe:83:3a:
c9:b5:86:f0:22:ee:7f:0d:03:d6:fa:82:12:aa:c6:eb:e9:24:
b7:eb:72:86:63:75:97:bf:c3:fc:ec:76:c6:ab:56:93:10:2a:
be:7d:0d:8a:9f:e9:a1:c4:41:3a:9a:49:e4:78:7e:71:f4:da:
f5:ed:00:01:01:a8:9a:62:9b:63:16:33:f0:8c:b3:b7:d0:ee:
8e:ec:00:ce:13:11:4e:9a:80:06:8c:1a:59:80:29:df:ce:52:
f0:fb:0e:6b:1d:e6:13:f3:64:60:4b:08:24:5a:f8:c5:26:cc:
a5:f9:b9:48:9e:17:f1:77:49:37:c7:cb:43:ab:9d:7d:2f:f1:
f9:b7:3a:52:e6:22:4b:f4:14:bf:09:a7:44:60:a2:46:ea:b1:
01:b4:bd:67:a0:ff:d2:49:bc:9b:1d:70:78:53:94:40:ca:5d:
5b:39:b5:ea:93:c1:e3:b1:17:2b:17:83:2e:f5:dc:ce:da:87:
95:6c:38:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org