Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FtK3FIVc7ns132XfZ952yHDgJg8.roa
File: FtK3FIVc7ns132XfZ952yHDgJg8.roa (raw, json)
Hash identifier: 7LrlnAA5ECBadLV0OMwVYub8WZhGxZURxTOgFnKMI7o=
Subject key identifier: 16:D2:B7:14:85:5C:EE:7B:35:DF:65:DF:67:DE:76:C8:70:E0:26:0F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19B8
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FtK3FIVc7ns132XfZ952yHDgJg8.roa
Signing time: Sat 22 Oct 2022 06:08:26 +0000
ROA not before: Sat 22 Oct 2022 06:08:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6584 (0x19b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:08:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=16D2B714855CEE7B35DF65DF67DE76C870E0260F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:46:17:12:8e:03:8c:62:de:6b:85:67:08:
0d:9a:5a:8e:03:1c:d8:29:be:fd:49:cb:c0:55:8c:
bf:13:2c:39:dd:ab:4c:d5:64:fd:05:d0:27:c5:fd:
8b:20:90:b7:94:dc:cf:86:3d:c0:d3:52:3d:c1:99:
6f:d0:cf:6c:fc:4d:8d:61:f1:dd:d9:38:08:c3:c0:
c6:61:a3:c5:d1:b9:e6:b4:e8:f1:04:52:8b:28:9e:
94:5e:55:3f:84:7b:c5:6a:96:a2:d1:3e:41:e5:92:
d4:67:8e:7c:fe:bf:eb:60:87:18:57:d6:c2:9a:5b:
1d:4b:77:17:0c:4e:05:2b:9d:d0:5a:41:21:92:ac:
fc:6d:d3:b6:43:e8:b9:b4:ce:0c:63:33:66:5a:53:
4a:e0:76:53:c3:61:a8:b9:f9:26:d9:7e:30:5d:bf:
39:ad:c9:80:48:e4:b7:f1:20:56:99:94:ea:35:06:
4f:4e:9d:54:dd:45:d5:f8:18:06:2e:d0:ec:ee:7d:
b7:81:01:0b:fa:ea:82:48:12:ab:5d:b8:8e:28:7a:
61:19:4b:7d:5b:14:cd:c1:38:d1:9a:d0:b0:91:1c:
46:94:16:0d:63:bf:17:a2:bf:d6:67:dc:06:b5:40:
20:68:38:43:36:fa:c8:ec:b2:e2:49:1a:4c:4d:ee:
df:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D2:B7:14:85:5C:EE:7B:35:DF:65:DF:67:DE:76:C8:70:E0:26:0F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/FtK3FIVc7ns132XfZ952yHDgJg8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.224.0/21
Signature Algorithm: sha256WithRSAEncryption
89:83:57:58:ef:80:15:55:fa:9b:81:36:98:ba:cd:07:fc:91:
77:69:01:9c:16:36:a5:e2:91:3b:cd:7a:02:85:8e:41:f3:b3:
14:3a:17:bd:31:39:97:b1:88:c3:6f:4d:f5:e1:5d:bf:4d:19:
16:50:c8:f9:fe:f7:53:9c:6a:40:dd:50:84:43:0d:9b:57:01:
e1:0e:ee:d1:31:62:d0:0f:d4:09:45:0d:3b:84:f3:3e:65:e9:
fc:f8:89:5e:05:7b:0c:9e:86:a4:66:10:cc:00:87:25:82:a7:
c8:d5:ee:63:23:d4:39:1e:2e:9e:69:53:c0:c7:6f:80:a4:28:
6c:7f:a3:48:7e:8d:5a:0b:14:aa:44:e4:e1:3b:ea:75:49:0b:
07:42:dd:fd:1b:bd:1b:e6:07:fb:7b:e1:9b:59:d3:95:55:85:
b9:b0:52:96:b8:1f:3d:55:c7:46:a6:19:48:2f:ad:5d:86:d2:
e9:0e:ee:1c:26:76:2d:79:fb:0e:a6:d1:ae:88:88:9d:37:25:
6c:a9:cb:55:dd:e4:55:cb:3e:13:d0:6a:87:10:7b:78:54:b4:
3d:2d:a1:43:77:bf:bf:e5:16:03:7d:6e:ce:7e:63:33:65:0a:
19:cd:f6:5f:04:f1:14:0d:7e:4f:d3:d5:81:94:23:1e:24:ce:
e6:a8:0c:4f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NjA4MjZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE2RDJCNzE0ODU1Q0VF
N0IzNURGNjVERjY3REU3NkM4NzBFMDI2MEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvtEYXEo4DjGLea4VnCA2aWo4DHNgpvv1Jy8BVjL8TLDndq0zV
ZP0F0CfF/YsgkLeU3M+GPcDTUj3BmW/Qz2z8TY1h8d3ZOAjDwMZho8XRuea06PEE
UosonpReVT+Ee8VqlqLRPkHlktRnjnz+v+tghxhX1sKaWx1LdxcMTgUrndBaQSGS
rPxt07ZD6Lm0zgxjM2ZaU0rgdlPDYai5+SbZfjBdvzmtyYBI5LfxIFaZlOo1Bk9O
nVTdRdX4GAYu0OzufbeBAQv66oJIEqtduI4oemEZS31bFM3BONGa0LCRHEaUFg1j
vxeiv9Zn3Aa1QCBoOEM2+sjssuJJGkxN7t+zAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUFtK3FIVc7ns132XfZ952yHDgJg8wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0Z0SzNGSVZjN25zMTMyWGZa
OTUyeUhEZ0pnOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
n+AwDQYJKoZIhvcNAQELBQADggEBAImDV1jvgBVV+puBNpi6zQf8kXdpAZwWNqXi
kTvNegKFjkHzsxQ6F70xOZexiMNvTfXhXb9NGRZQyPn+91OcakDdUIRDDZtXAeEO
7tExYtAP1AlFDTuE8z5l6fz4iV4FewyehqRmEMwAhyWCp8jV7mMj1DkeLp5pU8DH
b4CkKGx/o0h+jVoLFKpE5OE76nVJCwdC3f0bvRvmB/t74ZtZ05VVhbmwUpa4Hz1V
x0amGUgvrV2G0ukO7hwmdi15+w6m0a6IiJ03JWypy1Xd5FXLPhPQaocQe3hUtD0t
oUN3v7/lFgN9bs5+YzNlChnN9l8E8RQNfk/T1YGUIx4kzuaoDE8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org