Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zV0K__qTSc2BQ1x442FAG_0Uy2s.roa
File: zV0K__qTSc2BQ1x442FAG_0Uy2s.roa (raw, json)
Hash identifier: U1aLMuqL/he8Jt7McYBq0cQ+elOeh8DE604/SqYH51Q=
Subject key identifier: CD:5D:0A:FF:FA:93:49:CD:81:43:5C:78:E3:61:40:1B:FD:14:CB:6B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zV0K__qTSc2BQ1x442FAG_0Uy2s.roa
Signing time: Thu 15 Sep 2022 02:35:44 +0000
ROA not before: Thu 15 Sep 2022 02:35:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CD5D0AFFFA9349CD81435C78E361401BFD14CB6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:e8:e0:96:5f:24:7e:94:27:81:67:ae:09:
5e:cd:39:1c:5f:d0:60:74:ab:f7:91:64:ad:50:51:
c0:29:f7:30:03:b9:67:da:89:b3:cf:2d:63:af:56:
ee:63:90:2e:16:dd:35:6a:cf:53:26:5d:46:a1:1b:
5f:8c:1c:7a:a5:6d:7e:1b:35:69:40:6c:fb:9b:dc:
2f:08:8f:68:86:ec:ee:17:46:1f:22:f0:b4:9f:4c:
cf:0c:56:05:dc:ee:07:67:37:c2:5f:fd:a4:74:05:
8a:ca:1c:35:05:4b:59:6a:eb:6d:4b:59:1b:f6:7a:
d0:61:1b:ab:8c:ac:39:c3:80:c8:c0:a1:3d:16:5c:
e7:3d:4d:23:7f:85:02:fc:07:4a:b0:37:f3:29:8a:
97:4f:77:a1:3a:b8:26:01:cf:fd:73:c6:eb:7b:96:
ff:31:45:a4:80:5b:8d:3b:9a:f9:d1:41:2d:bd:ca:
c3:b3:ee:6d:fe:f1:a7:64:c9:7a:bc:6d:55:a9:04:
49:0c:6a:fd:46:cd:d9:e6:54:d8:20:ee:6f:a8:49:
78:57:31:d3:d5:34:49:30:46:bf:07:10:72:fc:fa:
e3:c9:e2:a1:75:0c:63:19:45:b8:8a:64:6b:90:0a:
58:8f:ae:90:52:4d:84:87:ac:e5:8f:b6:49:4d:3e:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5D:0A:FF:FA:93:49:CD:81:43:5C:78:E3:61:40:1B:FD:14:CB:6B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zV0K__qTSc2BQ1x442FAG_0Uy2s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.40.0/21
Signature Algorithm: sha256WithRSAEncryption
7f:f7:f2:2c:f6:70:a1:2e:cf:b1:b5:ed:6a:c8:bb:ff:5c:38:
64:ee:80:13:e4:30:51:60:65:1b:3d:cd:00:11:98:3c:73:a2:
31:b9:de:95:16:ab:f4:e7:ff:5f:cd:0c:22:7f:94:37:d4:41:
3c:0e:d8:17:25:65:f8:2b:23:aa:ec:de:d8:95:d4:b7:98:ab:
04:86:98:56:25:de:78:cd:ff:58:bc:3c:8b:5f:01:c3:0b:26:
a5:10:dc:24:3e:ca:ba:f8:81:08:47:b4:6d:5b:48:d7:b7:ff:
9a:12:eb:24:99:e0:4d:73:6d:e6:43:b4:9e:a9:8a:68:f2:db:
f1:a4:3f:8e:f0:ba:d6:21:ae:59:f6:b6:8c:d4:c9:92:1d:8f:
77:ed:b2:a3:83:7c:31:b3:e7:ac:25:9b:26:78:8e:e0:aa:81:
88:24:18:c4:9a:e2:74:1c:cf:37:73:b3:e8:70:4c:65:fb:c1:
44:d7:92:c2:9c:d6:9d:90:79:6e:b5:02:70:63:de:62:b3:76:
5a:0e:77:15:09:d5:1f:33:76:b3:d4:62:6d:75:50:04:ac:08:
38:63:3c:36:2b:d4:1e:56:db:ab:2d:75:77:d6:ab:d7:a2:c7:
07:d0:83:26:05:d0:86:c5:2b:dc:da:19:0a:96:fc:00:97:2a:
8c:12:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org