Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yud5y9G4ZP_N2F6y50gTZrNcwiQ.roa
File: yud5y9G4ZP_N2F6y50gTZrNcwiQ.roa (raw, json)
Hash identifier: B0/xYtL30IqgIZ2hFzvwzAI/6FHHkkTelfpTn9w+e5o=
Subject key identifier: CA:E7:79:CB:D1:B8:64:FF:CD:D8:5E:B2:E7:48:13:66:B3:5C:C2:24
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1071
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yud5y9G4ZP_N2F6y50gTZrNcwiQ.roa
Signing time: Sun 07 Feb 2021 12:45:34 +0000
ROA not before: Sun 07 Feb 2021 12:45:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4209 (0x1071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:45:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CAE779CBD1B864FFCDD85EB2E7481366B35CC224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:68:a9:ac:a5:5f:6e:14:40:c7:95:dc:16:
36:92:f7:a2:5a:18:35:80:39:39:59:4e:09:93:70:
06:e8:d2:89:59:cc:1a:03:df:dc:09:12:99:2f:4d:
8a:10:85:1a:03:9b:bd:db:5f:fe:1c:85:4e:2b:92:
3f:11:b0:52:9b:eb:27:6c:d8:da:c4:2e:0d:01:52:
79:1a:56:21:05:9c:17:5f:4b:ef:01:44:e4:97:7b:
05:66:4d:9c:7b:22:45:1c:8e:d1:8f:5d:e3:de:04:
bd:c0:9d:61:2d:9d:ec:e8:b8:c6:97:5b:ec:2e:f2:
b9:ca:26:74:ed:aa:07:5b:d1:89:6d:a6:19:a5:3a:
4f:62:89:a2:47:86:de:68:1a:b2:0e:16:96:08:35:
af:e5:af:7b:71:e0:bc:0a:c2:ea:6b:fe:f7:fd:7b:
8d:c4:bf:9f:f2:5b:b9:de:5d:a5:ff:12:48:5a:30:
c0:bc:97:2f:87:48:1d:6f:d9:9e:76:93:8e:91:d7:
39:f1:67:3b:88:fb:4f:67:fc:9d:05:61:c2:4f:9c:
a4:a1:3b:e9:9c:cc:30:f4:5f:2c:ae:fb:5a:15:67:
fa:c5:9f:33:57:df:6a:0f:e3:dc:99:71:e0:3b:27:
e6:49:1e:b3:73:7e:30:67:25:77:68:f2:d4:b2:a3:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E7:79:CB:D1:B8:64:FF:CD:D8:5E:B2:E7:48:13:66:B3:5C:C2:24
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yud5y9G4ZP_N2F6y50gTZrNcwiQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.81.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4d:63:99:bb:e4:03:20:8f:59:a6:a7:3e:82:77:f3:25:22:
8a:ba:5d:53:bf:ea:8f:1b:8a:6c:1d:8c:38:32:be:e1:7f:6e:
00:ac:3c:fb:4e:63:83:e8:9d:8e:d4:87:e3:39:62:7b:bb:c6:
0b:b0:01:14:f2:44:83:f2:97:cf:18:38:0b:f9:e5:ad:75:c0:
91:bb:97:c5:36:99:c6:f7:84:8f:4f:9a:5f:c6:df:13:56:00:
17:b6:89:70:de:9b:a3:63:b0:17:be:38:25:a0:32:1a:5a:c8:
51:ed:53:1c:9f:95:f4:97:16:1c:b8:e0:ae:7c:b6:e3:19:1d:
80:db:2b:2d:2b:67:33:40:87:4d:c0:f1:f5:52:9a:cc:db:83:
24:33:93:82:4c:a4:83:08:5a:38:66:9e:86:40:d6:1b:88:4a:
3a:ed:ab:08:ea:e0:b8:63:2e:52:18:9b:3f:ed:f7:62:2c:c5:
8d:0b:4a:93:3a:5d:b9:1b:65:9d:cf:25:2f:fb:8a:59:bd:4d:
9d:eb:c6:a6:57:69:d8:81:04:2f:d4:d4:72:08:9b:94:2b:b2:
cd:ab:34:72:45:24:61:a4:68:a8:c3:09:0b:8f:62:c6:cb:41:
9c:d2:96:4e:9b:34:b9:c4:da:04:fa:38:4f:de:67:44:f2:aa:
e6:a1:c2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org