Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zllR05HR1JEXAC1B9yWTCckmEus.roa
File: zllR05HR1JEXAC1B9yWTCckmEus.roa (raw, json)
Hash identifier: u0NKIO/fQznVIuaqDjXfb16Gi6Qy+CRbKEWLI6cSR/M=
Subject key identifier: CE:59:51:D3:91:D1:D4:91:17:00:2D:41:F7:25:93:09:C9:26:12:EB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zllR05HR1JEXAC1B9yWTCckmEus.roa
Signing time: Thu 15 Sep 2022 02:36:09 +0000
ROA not before: Thu 15 Sep 2022 02:36:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CE5951D391D1D49117002D41F7259309C92612EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:33:15:ba:ad:fe:7a:f0:c6:d5:5b:d8:2e:
ce:59:9e:1e:c3:43:17:23:92:21:3a:dd:13:9c:05:
38:ec:73:97:d6:35:3b:a5:e5:4a:a1:2c:42:e3:8b:
d1:95:88:90:40:5d:8a:cc:e5:8b:1e:54:6e:35:1d:
6e:6b:57:2c:3a:c6:c9:c8:a8:a2:f8:10:e8:65:d8:
8d:30:af:9b:3f:23:fe:e1:c4:8b:26:49:20:6c:47:
cc:9f:c9:ce:a2:51:72:84:30:6a:b4:dc:42:b2:c4:
b9:58:6f:b5:a7:eb:52:0f:d4:54:17:04:b2:aa:f1:
e6:f3:cc:76:a0:b4:f9:f0:76:c6:98:11:4f:23:5e:
bf:7c:48:63:4e:3e:13:ff:6f:da:ae:5f:42:30:30:
0a:85:57:08:0d:2a:52:63:56:a6:89:90:83:97:cb:
da:95:7c:04:23:4f:b1:c1:24:e6:9e:c0:89:fe:5b:
7f:2e:e0:14:5d:de:51:cf:fb:e3:09:76:72:de:f2:
12:e1:84:f6:fe:44:a3:c6:95:8e:79:b1:26:40:82:
eb:41:6e:d3:bf:a3:46:d4:dd:07:a5:74:17:13:44:
ee:dc:77:fc:21:21:d1:ca:9e:4c:ac:14:21:59:be:
6c:cc:7e:33:c6:d7:58:20:2d:53:d0:69:c6:78:4a:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:59:51:D3:91:D1:D4:91:17:00:2D:41:F7:25:93:09:C9:26:12:EB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zllR05HR1JEXAC1B9yWTCckmEus.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.168.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:52:77:69:29:52:ff:91:56:36:10:df:ec:36:cd:69:7f:ae:
e0:38:16:2b:54:01:2f:1c:1e:df:e9:5d:43:70:4b:06:12:28:
bf:dd:bc:b7:6b:67:1a:83:c8:21:bb:0e:a8:e3:16:6b:2c:89:
5e:14:5e:61:42:04:72:77:30:79:8a:62:1f:32:1e:43:0d:c6:
d8:75:83:67:2f:56:2a:6b:34:d9:7b:2a:94:81:a0:77:23:b4:
d5:08:cc:a0:81:bf:22:05:7a:d2:08:c7:d0:02:a9:39:05:00:
4a:e5:d2:ec:60:35:c2:69:7a:2f:ab:7f:58:8d:c4:32:38:94:
2c:ac:09:20:6a:64:59:ff:38:8a:1c:a1:d5:4d:d9:d9:8b:18:
85:8b:09:a3:d0:53:60:92:4c:af:9b:81:b7:f3:65:48:a6:00:
a6:28:2f:fb:ae:bd:76:8d:f4:55:d2:99:0f:d0:dc:9a:98:1f:
24:cd:c4:66:5e:c8:c1:f7:1f:2b:82:1e:2c:13:dd:ea:11:94:
ce:24:86:68:02:40:97:39:df:fd:94:54:47:9a:64:81:77:1a:
94:8d:fc:fe:52:31:9a:65:74:14:3a:35:a2:97:c3:d8:72:b2:
c3:46:bc:c3:81:b4:fe:94:a5:cb:9d:0f:65:69:38:9d:0e:af:
79:53:60:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org