Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H0FwVQh4ABxwsUiLfI91FUXp4O8.roa
File: H0FwVQh4ABxwsUiLfI91FUXp4O8.roa (raw, json)
Hash identifier: 6iV/qkwLKWUzHs2nhpZ+0pafIOQPrEQmuVFR2IvpxmQ=
Subject key identifier: 1F:41:70:55:08:78:00:1C:70:B1:48:8B:7C:8F:75:15:45:E9:E0:EF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1572
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H0FwVQh4ABxwsUiLfI91FUXp4O8.roa
Signing time: Fri 21 Oct 2022 09:52:03 +0000
ROA not before: Fri 21 Oct 2022 09:52:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.159.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5490 (0x1572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 21 09:52:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1F4170550878001C70B1488B7C8F751545E9E0EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fc:f6:07:65:15:19:a3:a5:bc:ea:4f:22:61:
4c:c3:1a:25:c2:7f:78:aa:e7:bc:f6:7c:91:75:08:
ef:5a:b1:b9:c7:19:17:bd:96:da:b5:b4:43:86:37:
76:6d:0e:28:33:9e:e5:f8:16:b8:ca:54:96:7d:4d:
f3:20:d0:01:26:73:b1:fc:69:38:f5:0e:81:fd:49:
ad:9e:9e:af:f5:67:e5:03:fd:3b:9c:ad:96:10:8d:
de:67:57:7c:11:7c:1a:cf:32:3b:a6:3f:3c:d0:36:
eb:50:98:83:c6:dd:d6:a7:42:7f:90:3d:ad:ed:05:
99:b4:81:c0:6e:60:e1:69:8e:ab:0f:b3:73:fa:8e:
23:5f:af:fd:30:18:01:ed:88:4c:b3:02:ef:77:9e:
60:b3:03:67:47:a0:92:79:d9:66:f0:33:96:b0:33:
e7:4c:d8:b9:33:4a:68:56:fe:22:02:02:38:d0:d9:
41:e9:00:a1:59:79:61:47:ad:1f:3b:f6:0a:79:5f:
e4:90:65:8e:94:8c:79:97:ba:c2:bc:b5:42:42:90:
d3:d4:3f:db:07:fc:40:d6:2a:b0:e3:7e:40:d6:a7:
47:3b:aa:17:0f:25:2e:d8:54:b2:3f:14:74:c6:8d:
9e:f3:48:93:d9:9c:7c:ca:46:98:84:a6:13:db:67:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:41:70:55:08:78:00:1C:70:B1:48:8B:7C:8F:75:15:45:E9:E0:EF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/H0FwVQh4ABxwsUiLfI91FUXp4O8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.92.0/22
Signature Algorithm: sha256WithRSAEncryption
50:47:9a:02:fe:73:c6:b5:3f:07:7d:8c:ba:1c:a6:c6:02:b2:
fd:c6:d0:7d:24:67:00:83:b0:4d:fb:0b:37:41:43:5f:c6:8b:
3a:10:b3:23:e6:1b:a5:17:7c:80:ae:21:83:6a:aa:17:49:75:
97:25:c7:75:aa:14:e5:5c:ee:b2:f7:aa:35:02:6f:4d:40:d3:
3f:54:a7:73:03:8e:55:42:4e:0a:fe:4c:7d:d3:29:bb:3d:ad:
81:8b:55:99:65:59:c4:31:c1:14:02:15:ad:2c:38:4c:5f:3e:
94:b2:91:a3:ad:f1:5d:42:0f:77:0c:32:19:49:3c:73:21:da:
8a:c8:39:a8:45:2f:06:dc:15:de:de:c3:29:61:f8:cd:1c:a1:
d8:00:8b:80:08:82:40:8a:13:da:8c:08:53:84:0e:c0:54:18:
3a:92:9d:db:ee:eb:a6:61:16:77:ce:49:e3:20:23:c9:1b:7c:
23:8e:b6:5b:b4:48:57:09:56:e3:92:3c:d9:4b:8a:69:c1:22:
23:49:8f:db:84:aa:02:87:7b:7c:32:ef:d3:63:2f:ac:f9:23:
ba:5d:75:f3:6e:f6:83:10:d8:59:de:8e:d4:9e:1c:2f:77:6f:
16:5c:94:8a:27:a9:86:ca:a0:7b:b7:a1:f9:4b:d9:22:2a:03:
02:d0:c6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org