Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JUBDS0cdtXVKPusIRjxLrOGAYYY.roa
File: JUBDS0cdtXVKPusIRjxLrOGAYYY.roa (raw, json)
Hash identifier: TtbZ1YnrOwapGaqBj5+JzHIWTUHjgJewfqpRkt4T4qw=
Subject key identifier: 25:40:43:4B:47:1D:B5:75:4A:3E:EB:08:46:3C:4B:AC:E1:80:61:86
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JUBDS0cdtXVKPusIRjxLrOGAYYY.roa
Signing time: Thu 15 Sep 2022 02:35:17 +0000
ROA not before: Thu 15 Sep 2022 02:35:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2540434B471DB5754A3EEB08463C4BACE1806186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:b2:e0:ff:91:4a:de:32:64:ab:48:40:b3:
df:e1:c3:8d:e7:be:a9:81:0c:17:2c:c3:37:80:bf:
2c:6d:93:39:54:e5:1a:ae:37:6f:b2:b5:6d:49:fc:
fb:25:33:74:d0:b0:a2:58:27:a1:35:cf:a1:43:7d:
c3:9b:b1:cf:d1:be:a0:6b:2b:0e:98:65:6e:0d:75:
06:68:02:b9:86:6b:7e:04:70:76:14:06:2b:6a:bb:
fa:e8:74:3d:78:c4:82:94:27:c0:f5:06:5b:3a:b5:
ea:18:8f:ca:e0:05:5c:3e:04:13:00:dc:52:bc:c2:
00:fa:e6:71:3c:ae:1c:e8:31:26:03:f4:ff:80:ca:
8d:db:f4:21:13:be:54:d9:0c:53:c8:85:8f:68:3f:
aa:3c:70:ec:7a:3e:7e:e8:89:c8:1c:cb:56:ee:3d:
22:1c:a4:c2:d3:eb:d9:a9:b8:17:2e:89:4f:09:55:
56:15:04:be:38:0e:38:77:ae:ab:c3:d9:8c:17:74:
77:9c:0e:07:f4:27:c9:77:90:f1:25:9c:0f:75:b0:
51:80:9d:49:be:3f:73:61:5a:13:05:d7:2a:e5:b4:
49:2d:f8:e3:7f:32:0b:6c:6c:17:42:30:2e:2c:c6:
a0:4e:cd:ce:ea:20:b2:69:38:4a:82:3f:a2:6d:57:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:40:43:4B:47:1D:B5:75:4A:3E:EB:08:46:3C:4B:AC:E1:80:61:86
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JUBDS0cdtXVKPusIRjxLrOGAYYY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.48.0/21
Signature Algorithm: sha256WithRSAEncryption
25:9f:e8:cb:93:87:c7:d9:dd:02:aa:ea:aa:54:d8:b6:d9:d1:
04:49:8e:39:8b:96:82:ac:99:68:47:bf:76:01:5a:4e:fe:68:
9c:0d:33:fc:05:f9:8f:85:ec:d6:38:c2:e0:6c:08:27:25:f5:
1c:fe:b1:01:0a:8e:ea:b6:d0:aa:da:80:c2:69:58:5e:f5:e6:
2f:d1:20:d0:34:86:de:8f:51:85:d1:09:a9:ce:b5:45:6d:67:
7d:72:4b:ae:42:69:d8:32:5f:90:b3:cb:a0:7e:df:41:c5:c7:
4e:9f:0c:26:73:06:2c:d3:bc:eb:d4:3d:bf:8d:66:a0:56:44:
bc:f4:07:c5:83:ab:c9:7d:bc:0a:20:e9:86:c1:62:14:85:25:
a1:79:33:fb:c4:fb:4f:0c:7d:4c:21:b1:c5:af:f2:f3:d1:1f:
4e:8a:74:9e:96:69:17:e3:85:1b:05:a0:63:72:ac:4f:3a:85:
6a:98:ae:55:e1:47:0e:ee:8f:aa:22:a3:b5:ea:ff:28:c0:27:
f2:c5:e7:56:b4:35:ec:0c:a8:95:17:24:00:23:5e:26:e5:fa:
21:c5:5b:70:e9:e3:1a:e4:de:1a:3a:d2:fa:73:b3:92:9b:f8:
20:3e:dd:32:9f:28:db:ff:80:3b:e1:c5:11:38:61:bc:e3:33:
76:0b:c2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org