Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xd8Bn29YklkPpWhQLQXOX4MdpkE.roa
File: xd8Bn29YklkPpWhQLQXOX4MdpkE.roa (raw, json)
Hash identifier: l8C0pVy4Dclkgpn8d51BBjHdrqhepi6d7QgBu06nVwE=
Subject key identifier: C5:DF:01:9F:6F:58:92:59:0F:A5:68:50:2D:05:CE:5F:83:1D:A6:41
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AE8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xd8Bn29YklkPpWhQLQXOX4MdpkE.roa
Signing time: Tue 29 Sep 2020 10:07:46 +0000
ROA not before: Tue 29 Sep 2020 10:07:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.159.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2792 (0xae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C5DF019F6F5892590FA568502D05CE5F831DA641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:57:22:52:18:95:0d:4f:58:00:3e:be:27:
c6:00:4c:35:46:ff:16:1b:60:9c:c6:91:49:b5:38:
21:71:d7:1f:bb:a8:7e:19:59:02:5f:1b:e5:78:f8:
75:1b:f6:7f:c3:18:88:4b:3a:ca:11:45:ed:04:43:
6a:a2:b4:4a:19:fb:1d:6f:4f:d9:b7:95:3d:8c:56:
36:1e:cd:33:5d:29:6a:fc:57:dd:a8:64:fb:e0:f8:
80:45:32:50:d3:b0:bc:10:87:79:84:bf:ae:38:32:
b2:9d:c7:7f:0e:69:18:f2:9b:c8:85:43:b9:c3:35:
d7:b9:9f:db:4e:96:ca:e2:4c:21:fc:3e:f0:53:56:
dc:b7:60:65:50:0f:86:6d:09:e1:68:e8:d6:c4:7e:
18:c7:3d:43:ee:7a:a3:a5:c7:5a:e8:b4:89:69:b9:
13:4a:a9:08:b2:c6:b1:e7:fd:ad:23:eb:f2:39:0f:
ed:d8:5d:a5:72:9d:a7:a5:07:7a:8b:0e:c1:21:f6:
70:14:2f:9d:20:92:66:e2:72:ae:0c:b3:7a:70:49:
33:28:f2:2c:71:18:29:45:df:be:dc:76:b7:a0:37:
4b:e1:b0:6d:b7:49:e0:4b:20:a7:c1:bf:71:4b:2e:
44:37:bc:2f:a0:c2:76:28:8c:09:08:85:03:c1:f9:
a0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DF:01:9F:6F:58:92:59:0F:A5:68:50:2D:05:CE:5F:83:1D:A6:41
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xd8Bn29YklkPpWhQLQXOX4MdpkE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.244.0/22
Signature Algorithm: sha256WithRSAEncryption
42:ba:72:81:86:f3:a3:8d:7e:88:ee:ec:46:62:d5:70:76:be:
c9:9b:42:b0:84:dc:7a:96:75:11:b4:5c:9c:f4:a5:a6:83:f0:
f3:1d:6b:f8:9a:ee:91:fc:70:f3:5a:79:d0:ec:18:2f:2d:bb:
1d:be:04:2a:07:41:6a:05:9c:03:ab:3e:77:18:17:1a:98:57:
d9:c9:32:ab:4f:4a:4d:5c:81:64:85:8b:64:78:9f:9e:79:30:
76:11:b8:af:35:19:48:ce:2e:77:cb:91:38:9b:26:8d:0a:8b:
3e:0b:29:5e:6c:a0:69:08:bc:8b:f3:05:2a:6a:3d:ac:75:da:
a4:6b:64:b5:f4:b6:26:e5:21:e5:2c:34:4e:cd:94:79:87:cc:
ee:fd:e0:44:c9:39:b1:bd:11:4e:0e:19:a9:2e:9f:a5:51:52:
bb:86:b7:c4:18:7e:0e:05:02:21:c6:7f:ec:df:97:e0:36:e1:
78:c3:42:a6:65:16:5e:e0:ea:b8:2d:28:e4:80:bc:bb:54:7b:
36:9f:04:3e:5e:d8:35:a5:c6:0d:05:3d:87:0d:8d:76:99:b5:
50:80:74:95:96:c8:ad:d2:e9:5e:d7:ed:6d:75:5f:4c:48:b1:
5d:af:d3:86:d2:4b:bd:88:b9:92:2d:8a:7f:de:28:2e:3a:fd:
ac:9a:25:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org