Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/C8GIOa-KiEMnmMYp6jKcmHLdxyY.roa
File: C8GIOa-KiEMnmMYp6jKcmHLdxyY.roa (raw, json)
Hash identifier: 6DDQp+VMQfRSmwoR3zFblhZK+PZzW5vqY5kBLnKE2U0=
Subject key identifier: 0B:C1:88:39:AF:8A:88:43:27:98:C6:29:EA:32:9C:98:72:DD:C7:26
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AE9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/C8GIOa-KiEMnmMYp6jKcmHLdxyY.roa
Signing time: Tue 29 Sep 2020 10:07:46 +0000
ROA not before: Tue 29 Sep 2020 10:07:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.159.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2793 (0xae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0BC18839AF8A88432798C629EA329C9872DDC726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:1c:cc:87:87:6b:07:c3:86:88:d5:37:ee:
38:76:e1:4e:b6:c3:18:18:ed:0a:bc:7d:55:dc:7b:
70:f5:58:41:12:c8:9d:21:42:ff:1c:b6:91:d3:d1:
26:ff:e7:59:3d:f5:ea:25:ec:2a:d5:f4:85:7c:e5:
d0:0b:b4:3e:2d:58:65:11:1f:5d:33:18:cc:37:72:
a3:cd:e8:6f:da:bd:79:e6:dd:fb:7d:41:14:4b:23:
52:68:9e:e4:9f:4d:f7:0c:79:2d:56:60:98:22:30:
82:c7:e5:18:ff:78:67:cc:0e:44:23:3c:01:c7:74:
5d:f6:eb:68:33:4a:37:9c:88:a8:f3:53:66:b0:8e:
84:8b:d4:2e:3b:b6:88:d5:59:6c:3f:d4:48:ac:23:
af:6b:4c:1d:3e:29:36:9f:c1:7e:c7:f5:f2:50:de:
6a:fe:38:e5:ab:bd:a4:20:d9:7f:1f:ec:00:fe:35:
d0:3c:64:d4:3d:7e:c4:00:8f:d2:d4:e1:a0:9f:06:
c8:bb:39:0b:1b:f2:67:44:69:eb:b5:09:23:3d:65:
ba:b0:05:4e:da:71:69:df:09:d3:51:35:33:c7:28:
b8:9e:6c:7f:aa:0d:0b:60:e8:96:3a:a2:7a:01:80:
95:91:40:3c:b5:11:12:49:70:25:c4:ce:62:af:63:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C1:88:39:AF:8A:88:43:27:98:C6:29:EA:32:9C:98:72:DD:C7:26
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/C8GIOa-KiEMnmMYp6jKcmHLdxyY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.248.0/22
Signature Algorithm: sha256WithRSAEncryption
50:0d:30:38:e5:1c:ea:5c:55:92:0c:f6:26:06:1e:29:f1:14:
77:9c:4e:8f:20:de:93:f3:61:de:37:de:a1:b5:06:61:50:11:
10:c3:8c:27:2f:c2:fd:d6:95:da:56:0a:a0:ea:b7:58:b5:1d:
af:ea:a0:e4:ce:2c:b5:ca:3d:97:08:72:0e:ae:a8:7d:3a:a5:
be:53:83:df:82:59:69:79:44:cc:58:66:8b:a3:b9:54:8a:6a:
ba:63:20:f1:7c:54:5b:70:5d:6a:55:bc:b6:e1:cb:e7:f2:c9:
e1:b7:72:4d:cf:b7:11:53:88:c1:8f:da:b1:56:8e:b8:42:cb:
bf:91:04:b5:e4:2c:19:ba:a0:49:0e:99:3e:1f:e9:9a:87:fd:
0f:f4:bc:78:25:9c:e5:b7:10:b7:72:ee:61:4c:e5:a0:8f:47:
90:c7:f6:a1:aa:c8:92:0c:04:8c:fd:83:36:3e:73:a7:85:90:
55:41:ed:ef:1a:df:9f:6f:c9:06:1b:65:dc:12:76:52:04:77:
1b:43:3f:05:4b:5f:cd:01:47:91:f8:dd:90:8e:9d:eb:4f:06:
dc:67:61:45:6b:09:22:ae:36:76:6a:ae:b7:fd:bd:a1:07:b8:
6d:fb:59:3a:ea:64:75:3c:43:54:c9:32:d6:44:da:d7:da:f5:
f8:a6:19:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org