Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Fn6OF6pEtb0GEJ0h9BcdwjPU8YE.roa
File: Fn6OF6pEtb0GEJ0h9BcdwjPU8YE.roa (raw, json)
Hash identifier: 9rvMSREk9k3RaEfW9DkQgBJCe8HZZOqkF2d8xY/jbZs=
Subject key identifier: 16:7E:8E:17:AA:44:B5:BD:06:10:9D:21:F4:17:1D:C2:33:D4:F1:81
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 18E6
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Fn6OF6pEtb0GEJ0h9BcdwjPU8YE.roa
Signing time: Sat 22 Oct 2022 06:05:50 +0000
ROA not before: Sat 22 Oct 2022 06:05:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6374 (0x18e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:05:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=167E8E17AA44B5BD06109D21F4171DC233D4F181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:f7:c1:45:b2:67:df:42:cc:f8:e7:ee:0e:
3f:14:83:f0:f9:37:06:4c:b8:82:88:03:22:97:73:
ab:bf:99:5c:bc:fc:54:72:91:1b:30:67:a2:d5:ac:
41:bf:c7:1c:7b:74:b9:27:09:f4:82:31:b0:41:5b:
3d:8b:2d:54:69:7a:ab:c0:a6:f7:2d:b6:7c:50:cd:
82:93:5c:04:63:a7:c2:de:16:b1:37:47:3b:c0:fe:
5d:e8:e9:2d:12:a6:72:d8:1e:53:4d:56:85:2c:57:
3d:eb:cf:1a:cb:53:3c:a4:8f:0b:19:2f:75:41:03:
2e:c0:8c:7e:da:bb:2a:27:7d:c6:5a:4b:ef:92:3d:
90:99:73:47:08:89:16:86:e5:ed:80:f6:ba:f2:23:
b8:e6:3c:60:bf:54:cc:39:20:39:92:1d:7c:0d:e5:
3d:55:a5:20:f8:85:46:3b:80:53:3a:8b:44:bb:78:
3e:ab:38:11:dc:30:6a:e0:38:71:aa:da:b8:9e:75:
4a:ca:74:5f:3b:df:54:b3:7a:c7:55:c5:26:03:06:
7f:2c:db:19:b1:c7:e9:71:5c:90:32:e1:ae:ba:63:
1b:34:b6:5a:c1:c3:24:72:d2:22:73:76:a9:3d:8e:
cc:f8:21:30:58:0d:3c:2a:f9:56:f9:5f:31:94:8e:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7E:8E:17:AA:44:B5:BD:06:10:9D:21:F4:17:1D:C2:33:D4:F1:81
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Fn6OF6pEtb0GEJ0h9BcdwjPU8YE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.144.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:04:56:5f:c8:e3:23:e4:97:11:bb:0f:a7:45:3d:c4:41:7d:
ff:c2:80:40:ff:14:22:9c:a5:06:df:b3:92:1a:32:ed:74:8c:
a5:2e:d6:e4:fb:9b:79:55:07:e3:c2:f9:9b:8b:64:e3:1c:5c:
3a:71:8b:56:34:9c:85:e5:26:6f:73:a5:6a:b3:47:b8:fa:ae:
d3:ad:8b:34:56:20:66:78:b3:d0:aa:d0:34:15:1f:85:9d:7d:
8e:57:d6:85:51:5f:ac:67:54:05:92:e9:d7:0a:32:27:32:53:
3d:31:c0:37:d0:d1:6b:47:80:d2:b7:cd:1f:67:ea:df:a1:e1:
cb:09:ea:10:ee:a9:31:c6:f2:90:b3:4d:b1:76:f2:c7:7c:12:
6c:c1:b7:d0:72:6b:54:a7:eb:fd:f7:44:94:79:6b:14:6c:fc:
65:67:ae:1d:3f:64:ee:be:16:f9:bd:64:da:fe:b3:a9:09:73:
bd:ce:d2:b7:e5:ea:6e:ef:b7:06:e7:77:b4:37:3f:bb:f9:3f:
57:5b:2c:46:5f:a2:7d:d5:0a:a2:23:b4:ad:6b:ca:66:03:8f:
d6:08:d0:f6:9a:b9:7e:57:c9:06:52:54:81:47:47:55:85:c9:
c3:c8:9b:41:33:49:6e:41:80:fa:9d:53:08:61:e8:8f:76:c4:
90:fa:79:c4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA1NTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE2N0U4RTE3QUE0NEI1
QkQwNjEwOUQyMUY0MTcxREMyMzNENEYxODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDACvfBRbJn30LM+OfuDj8Ug/D5NwZMuIKIAyKXc6u/mVy8/FRy
kRswZ6LVrEG/xxx7dLknCfSCMbBBWz2LLVRpeqvApvcttnxQzYKTXARjp8LeFrE3
RzvA/l3o6S0SpnLYHlNNVoUsVz3rzxrLUzykjwsZL3VBAy7AjH7auyonfcZaS++S
PZCZc0cIiRaG5e2A9rryI7jmPGC/VMw5IDmSHXwN5T1VpSD4hUY7gFM6i0S7eD6r
OBHcMGrgOHGq2riedUrKdF8731SzesdVxSYDBn8s2xmxx+lxXJAy4a66Yxs0tlrB
wyRy0iJzdqk9jsz4ITBYDTwq+Vb5XzGUjj3ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFn6OF6pEtb0GEJ0h9BcdwjPU8YEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0ZuNk9GNnBFdGIwR0VKMGg5
QmNkd2pQVThZRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
npAwDQYJKoZIhvcNAQELBQADggEBAEoEVl/I4yPklxG7D6dFPcRBff/CgED/FCKc
pQbfs5IaMu10jKUu1uT7m3lVB+PC+ZuLZOMcXDpxi1Y0nIXlJm9zpWqzR7j6rtOt
izRWIGZ4s9Cq0DQVH4WdfY5X1oVRX6xnVAWS6dcKMicyUz0xwDfQ0WtHgNK3zR9n
6t+h4csJ6hDuqTHG8pCzTbF28sd8EmzBt9Bya1Sn6/33RJR5axRs/GVnrh0/ZO6+
Fvm9ZNr+s6kJc73O0rfl6m7vtwbnd7Q3P7v5P1dbLEZfon3VCqIjtK1rymYDj9YI
0PaauX5XyQZSVIFHR1WFycPIm0EzSW5BgPqdUwhh6I92xJD6ecQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org