Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-Y8N5HtYr4BZXo1s8yzsEorxnpw.roa
File: -Y8N5HtYr4BZXo1s8yzsEorxnpw.roa (raw, json)
Hash identifier: 051mqW5TocSqJeLAWumHetnvMGv5lY7fvwppx93nKG4=
Subject key identifier: F9:8F:0D:E4:7B:58:AF:80:59:5E:8D:6C:F3:2C:EC:12:8A:F1:9E:9C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FEF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-Y8N5HtYr4BZXo1s8yzsEorxnpw.roa
Signing time: Sun 07 Feb 2021 12:36:43 +0000
ROA not before: Sun 07 Feb 2021 12:36:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 49.159.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4079 (0xfef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:36:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F98F0DE47B58AF80595E8D6CF32CEC128AF19E9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:f4:81:20:fc:c7:e5:f8:06:d6:e3:86:c9:
b5:17:23:52:8d:b0:95:b0:fe:50:70:44:c7:d0:dd:
41:0a:35:12:bc:33:df:b4:8e:e3:d0:b2:17:8d:c7:
82:62:ee:29:b4:e3:16:38:03:53:5c:11:98:3a:a2:
d5:a6:2c:15:3c:7b:11:5c:38:51:30:0a:0b:d9:99:
bb:93:51:14:cd:69:da:4a:ca:48:06:0e:0a:e7:a9:
46:11:96:0c:26:98:d7:d5:db:b8:68:62:e6:f9:51:
74:b5:55:60:0b:9d:a5:0e:30:ca:82:10:da:a5:eb:
97:76:07:e0:22:f7:88:96:9d:34:89:b9:08:0b:a8:
f5:7e:b6:c8:59:c6:ed:60:06:71:0c:26:f1:6e:17:
b1:fa:fa:8f:d2:39:a1:d2:32:50:3f:73:4d:eb:95:
0f:be:63:48:4b:ed:49:92:3d:8c:64:e7:10:9f:85:
89:ca:13:43:03:ce:b8:8e:33:bf:37:6e:f9:c9:c9:
af:f5:cc:33:3a:75:7a:69:22:ac:41:bb:c0:af:16:
77:59:fc:f4:0f:a3:08:08:c9:62:0c:da:9a:09:7e:
e6:6c:7a:89:8c:74:4d:82:2f:ac:8e:71:5e:e4:08:
77:e4:a5:04:ec:53:95:53:ee:37:db:1a:98:18:c0:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8F:0D:E4:7B:58:AF:80:59:5E:8D:6C:F3:2C:EC:12:8A:F1:9E:9C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-Y8N5HtYr4BZXo1s8yzsEorxnpw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.176.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:17:d7:1d:03:62:73:47:af:13:38:df:9b:b6:20:dd:b5:b6:
ac:66:e5:b5:f6:57:1e:76:34:a3:cd:7c:36:27:ee:a8:eb:05:
76:cd:1e:39:75:f9:9c:13:b6:46:36:f9:3d:23:37:5f:9d:31:
aa:10:cf:94:66:30:64:64:61:8a:13:96:3e:42:93:b4:36:b7:
81:41:46:f5:d8:a7:3c:e4:d6:b2:2c:4e:5a:25:ea:05:24:90:
ab:10:b8:af:b6:cb:32:cf:9d:85:91:dc:11:eb:14:c0:fa:93:
ea:d6:16:21:34:93:93:87:c3:29:4d:0d:1d:13:0e:2e:ed:7c:
81:86:f8:d3:94:e2:aa:6b:62:a7:c2:97:52:90:98:8e:2b:4f:
98:a6:82:69:ce:df:e9:75:bb:87:b8:ac:c0:06:a8:85:14:e8:
96:65:e7:9d:6c:b9:2f:53:8a:89:0f:9e:fe:67:ee:6f:f6:ed:
63:89:aa:af:3c:99:d5:c2:74:2d:b3:73:71:b2:99:9c:d1:26:
14:d4:bd:b8:17:5d:8b:38:33:8f:4b:59:f4:fc:71:52:2e:87:
01:98:81:72:75:fa:2a:1b:95:2b:ed:23:c0:d7:f0:41:53:c3:
9d:7e:a7:35:a4:45:17:ad:d8:74:f5:79:5d:06:5b:47:83:2b:
11:3e:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org