Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vvne5KI4quEB5f-zc7QLE99BSyY.roa
File: vvne5KI4quEB5f-zc7QLE99BSyY.roa (raw, json)
Hash identifier: oZSSQQwSY62wsFIWY0b8n5ZjpgL7uQea9KMXVMLNNkI=
Subject key identifier: BE:F9:DE:E4:A2:38:AA:E1:01:E5:FF:B3:73:B4:0B:13:DF:41:4B:26
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 122F
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vvne5KI4quEB5f-zc7QLE99BSyY.roa
Signing time: Wed 29 Sep 2021 02:54:17 +0000
ROA not before: Wed 29 Sep 2021 02:54:17 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4655 (0x122f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:17 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BEF9DEE4A238AAE101E5FFB373B40B13DF414B26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:50:51:b2:fd:89:17:5f:3c:ce:90:16:99:
d2:30:b5:f2:81:14:66:3e:40:6b:90:f3:dc:bd:46:
ea:2d:ab:a2:4a:ce:b2:63:b2:52:61:22:f2:02:87:
54:01:f1:05:1a:57:40:cd:61:f1:60:f8:74:c2:dd:
92:8c:14:93:a6:f9:a1:e0:70:e6:50:6d:cc:b8:9f:
f5:43:db:c0:41:29:2a:26:03:2c:cc:de:fa:1d:8e:
a5:e7:19:86:49:df:8a:93:7a:cb:86:69:23:0b:f4:
07:20:7e:46:4e:52:25:c7:8a:f8:c9:0b:2e:cc:4c:
4f:13:d4:9c:25:d3:9d:fc:d4:3e:bc:88:a2:8a:6c:
8c:63:d0:03:a5:c8:1a:09:40:15:e8:d0:25:bd:ef:
17:c8:de:73:d5:1c:51:54:8c:8c:cf:50:65:b1:52:
ac:72:5e:d4:4b:b9:f0:8f:92:22:d6:d8:05:43:e2:
f6:90:00:e8:18:8a:3d:1f:61:7b:fc:73:c7:9d:1b:
7f:cc:9d:e3:00:2d:22:c0:b9:bf:d2:95:d1:e5:40:
42:1d:72:77:36:74:ac:4f:ff:7f:47:89:a7:91:ee:
37:e3:83:71:fd:cf:24:2f:48:7c:1c:76:0c:a8:64:
24:a5:54:6a:09:e5:d6:e2:6e:f5:1d:73:2f:d2:26:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F9:DE:E4:A2:38:AA:E1:01:E5:FF:B3:73:B4:0B:13:DF:41:4B:26
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/vvne5KI4quEB5f-zc7QLE99BSyY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.57.0/24
Signature Algorithm: sha256WithRSAEncryption
80:de:58:97:64:c0:46:da:a9:43:1a:f8:ea:49:3c:9d:68:ab:
c3:f1:37:ca:10:38:d4:ea:2f:8a:74:1d:d6:29:c6:a7:86:a3:
24:07:31:59:2d:35:19:d2:e2:41:0c:90:ba:e2:ed:36:f1:0d:
cb:da:3b:b9:f3:6a:39:aa:84:a5:53:e3:a3:92:b9:a6:02:62:
b6:08:71:ee:73:67:6e:8f:f0:04:f2:5f:3e:e1:ab:48:54:f8:
5a:44:81:ed:d6:5e:6d:83:1c:5d:53:8a:d0:0f:74:6c:47:ca:
21:dc:40:7b:65:be:e2:69:e1:d9:16:6c:97:9c:23:c2:d5:51:
ec:24:bd:2e:2b:b4:0b:25:c4:aa:b2:ca:7f:61:05:0c:33:63:
f4:04:6d:d6:ee:fa:c8:c8:40:59:a7:56:ce:b0:8f:f3:44:1f:
40:f3:1f:ce:03:92:71:74:9a:a5:c6:ea:1d:67:9e:59:a0:42:
f0:fc:31:af:67:bb:d7:1d:03:e1:a0:ac:d8:f3:ff:77:6d:30:
81:ba:57:81:55:4c:47:84:ac:ae:eb:ef:b5:cd:ad:11:85:94:
db:cf:56:cb:6c:40:e0:3e:4c:1b:d9:01:a5:16:2c:00:5b:04:
db:c3:eb:b1:18:c2:c4:77:d3:f1:ea:cd:a2:89:db:a4:38:d9:
89:da:60:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org