Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wJ_lFrddUdHAc3e2XQVVoN8JiTo.roa
File: wJ_lFrddUdHAc3e2XQVVoN8JiTo.roa (raw, json)
Hash identifier: qJ9FaPTUKjwkIt2/dWyCIc/93IPCFY4f4znn5nCG+l4=
Subject key identifier: C0:9F:E5:16:B7:5D:51:D1:C0:73:77:B6:5D:05:55:A0:DF:09:89:3A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1933
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wJ_lFrddUdHAc3e2XQVVoN8JiTo.roa
Signing time: Sat 22 Oct 2022 06:06:13 +0000
ROA not before: Sat 22 Oct 2022 06:06:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.144.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6451 (0x1933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C09FE516B75D51D1C07377B65D0555A0DF09893A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:99:dc:cd:1e:f8:e3:5b:5b:e8:c9:b7:37:
06:ef:94:6b:27:bd:9e:4f:28:be:62:a8:f8:17:de:
30:03:b5:b4:1c:04:38:f1:dc:8d:69:9f:96:8c:aa:
c7:e5:8e:46:14:82:9d:c9:e2:b5:92:6b:5d:37:91:
65:75:84:59:c1:fb:a4:8b:3b:8b:ac:90:40:05:8b:
01:3d:83:38:e8:f9:ca:0c:27:9d:da:13:75:74:68:
98:8e:36:0e:c9:8d:74:1e:01:e7:ba:be:98:93:60:
83:a8:5c:56:87:bc:2d:9d:0e:b0:f0:cf:c6:ac:0e:
86:10:aa:cb:9b:50:f8:fb:c9:e3:94:4d:e2:76:75:
76:8a:34:0b:e1:9f:9b:77:c4:3e:98:a4:d9:28:86:
c1:a1:04:a6:73:01:02:ed:6d:a7:fa:82:49:08:9c:
5e:f2:fa:c2:30:49:da:8a:1d:ad:15:c4:fe:eb:e0:
38:ff:48:7f:2f:f3:90:d0:3c:7d:24:f6:4d:77:48:
35:f6:82:79:d8:0b:7f:0a:91:03:48:a7:77:21:fc:
e6:34:4b:04:e8:55:d8:28:1c:64:9d:51:bd:42:be:
56:1d:cd:70:fe:29:7f:5d:bc:3f:b8:8b:b8:1d:08:
f0:6f:7c:57:47:4c:2f:f2:85:bb:7c:bd:c2:e9:94:
cd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9F:E5:16:B7:5D:51:D1:C0:73:77:B6:5D:05:55:A0:DF:09:89:3A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/wJ_lFrddUdHAc3e2XQVVoN8JiTo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.144.0/21
Signature Algorithm: sha256WithRSAEncryption
72:4f:e8:17:b2:f8:3c:46:f6:9f:2f:6d:f4:21:ec:09:1f:39:
5c:fa:b7:fb:6d:e1:66:f4:73:96:2f:03:e7:4f:69:a8:89:b4:
a7:16:b0:bb:26:98:c4:9a:95:1e:71:b5:c7:8d:bc:7a:ee:6b:
2b:d9:a1:12:37:39:15:5a:70:26:66:a2:25:f8:9d:89:6e:bf:
73:b4:e6:e8:5c:86:ec:30:8c:42:d5:a4:40:4d:e3:94:a7:a6:
ca:41:6e:40:6d:88:00:46:03:0f:20:d8:89:c7:79:bf:95:ff:
9f:14:15:d0:e3:7d:73:c1:d2:5a:16:44:e1:58:85:a4:eb:3f:
40:bb:24:93:3e:62:f8:bd:f3:39:90:be:86:e6:11:6e:8a:15:
c9:45:bc:ce:07:e4:b1:bc:c2:69:3b:cb:69:f3:7f:3d:1a:4f:
9e:32:bc:2a:bb:4b:62:8f:aa:8d:2e:47:77:06:61:7f:a7:44:
83:be:73:4a:d3:98:bf:cd:74:d2:e2:e5:6a:91:c9:18:17:2a:
fc:c4:b8:b1:b5:fc:51:52:c9:cd:36:21:c6:1c:e8:68:e9:60:
80:04:3f:47:af:4f:d6:5d:22:97:a8:b2:2a:cb:4e:d6:e1:c5:
d2:d2:e8:a5:ad:36:47:ba:90:de:05:6a:04:18:10:06:d1:5a:
00:71:99:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org