Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x5AD2Iuv3Bz07qe0VFt0Jvv_ahg.roa
File: x5AD2Iuv3Bz07qe0VFt0Jvv_ahg.roa (raw, json)
Hash identifier: e2y1P5EwY4gMpdDRQ23UNc6/hHN/RIqDKhSt+OP+rhI=
Subject key identifier: C7:90:03:D8:8B:AF:DC:1C:F4:EE:A7:B4:54:5B:74:26:FB:FF:6A:18
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1105
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x5AD2Iuv3Bz07qe0VFt0Jvv_ahg.roa
Signing time: Sun 07 Feb 2021 13:03:06 +0000
ROA not before: Sun 07 Feb 2021 13:03:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4357 (0x1105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 13:03:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C79003D88BAFDC1CF4EEA7B4545B7426FBFF6A18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:31:8c:18:ce:69:eb:68:8e:d8:a0:53:3d:
61:c4:f5:51:55:05:c1:10:79:91:af:c3:a9:79:4d:
5a:2f:76:73:fd:a4:90:54:8d:b4:83:ff:dc:c4:4a:
77:d6:7b:39:ac:d2:cd:37:d0:ba:99:29:c2:90:18:
9e:63:54:8f:7c:13:40:53:2d:eb:2b:de:b3:a8:7e:
e6:83:f7:86:31:95:89:14:f2:13:48:6b:c3:9e:0e:
69:b0:1a:18:4e:2a:a9:9a:fa:94:4f:ff:0e:a5:c6:
07:09:bf:28:68:fb:b9:7c:8f:3c:a9:7e:d6:39:69:
93:ae:49:4d:02:1f:cb:6e:36:03:4b:4b:9a:f0:7d:
4e:fa:ed:2a:15:c0:33:c6:bc:99:56:c1:58:29:05:
66:ab:69:69:b6:8a:7c:4b:7e:cb:16:03:81:43:09:
47:c4:5f:88:5f:21:4a:e6:0f:9d:95:79:e9:6d:0c:
e9:8f:4a:f7:a3:f1:8a:40:04:cb:30:c1:06:76:ea:
a9:05:e7:ab:62:33:1a:4d:79:d4:78:09:86:d9:34:
17:fa:cd:99:2d:22:09:d5:93:e5:ca:3a:87:c2:6a:
8f:9a:4b:3b:63:9b:27:01:5e:f4:28:29:3c:98:e8:
c7:9d:d1:ef:58:99:83:56:fc:9c:20:c7:76:46:9f:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:90:03:D8:8B:AF:DC:1C:F4:EE:A7:B4:54:5B:74:26:FB:FF:6A:18
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x5AD2Iuv3Bz07qe0VFt0Jvv_ahg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.4.0/22
Signature Algorithm: sha256WithRSAEncryption
92:c3:a2:82:29:00:33:df:8f:00:44:4f:bc:8c:fe:06:b1:75:
aa:55:1a:5a:82:7a:49:35:71:1a:2b:d3:67:c3:41:1b:60:de:
d2:b4:e2:09:7a:cb:66:4b:c7:72:2d:80:ff:f5:90:6c:e2:64:
e4:3e:9e:4e:7a:a0:d3:f4:33:32:1c:08:17:0f:c1:99:ed:92:
15:97:d4:1a:0f:82:9c:12:95:c9:1f:02:68:7b:f9:41:64:74:
f5:14:16:fd:45:34:4c:ef:e8:32:7a:f1:28:a3:bd:29:cb:34:
62:cf:c4:f2:a8:17:39:bb:ea:21:74:90:89:ab:f7:7f:ea:1a:
d3:f2:4d:cd:28:7e:07:df:50:5b:da:73:85:d4:4b:a9:40:54:
f3:7c:97:3a:30:dc:b3:42:0c:06:5a:6b:f2:07:3b:14:b9:f1:
05:b1:7a:b3:39:cc:85:51:6f:ff:24:81:60:46:ed:13:df:8a:
4c:c8:be:18:b2:74:26:71:17:48:42:70:14:9e:b1:74:e7:b6:
a1:8d:9e:e5:19:9c:1c:cf:c2:7f:c9:64:8c:af:fe:1a:51:2b:
64:4e:2c:6c:b4:c1:11:2e:71:69:25:c5:04:aa:97:c6:cc:8a:
5c:73:b9:de:a8:89:03:2d:db:9b:74:2b:42:d5:a6:91:d1:63:
c5:2f:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:53 2023 by rpki-client on console-fra.rpki-client.org