Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jj4HKh24B0imigGsNRyIRYT-BDY.roa
File: Jj4HKh24B0imigGsNRyIRYT-BDY.roa (raw, json)
Hash identifier: kCyzNEwjxW5u4IpYXsgV7Ixs3/6g5qEbtjGmWG6Hutc=
Subject key identifier: 26:3E:07:2A:1D:B8:07:48:A6:8A:01:AC:35:1C:88:45:84:FE:04:36
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1310
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jj4HKh24B0imigGsNRyIRYT-BDY.roa
Signing time: Wed 29 Sep 2021 02:55:20 +0000
ROA not before: Wed 29 Sep 2021 02:55:20 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4880 (0x1310)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:20 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=263E072A1DB80748A68A01AC351C884584FE0436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:16:77:b2:a7:36:b7:0f:a2:cc:7b:28:b6:e2:
49:01:13:7c:fd:fc:bf:e2:cb:62:b4:15:2f:64:35:
57:e0:00:2c:34:e4:18:3a:35:73:64:0e:68:e5:7f:
9e:8d:f1:a4:40:83:f7:c3:60:82:05:e7:89:7f:25:
d3:23:2f:62:86:1e:e3:f6:2d:71:12:32:9e:80:0a:
36:04:ff:b6:7f:46:41:c4:14:7e:22:79:79:e3:86:
61:ba:48:63:b8:a4:20:04:a5:84:45:de:f3:e8:75:
81:59:e9:ea:95:f8:25:e0:04:02:23:d0:03:43:78:
0c:bd:5e:95:d8:9d:4d:76:89:54:03:44:87:66:95:
89:72:31:cb:8b:68:32:65:30:24:53:19:aa:81:18:
4d:9a:b3:84:70:83:03:27:f4:a4:e5:88:c6:1e:67:
c6:24:23:b1:52:79:f1:b1:45:e9:42:39:58:f7:db:
fc:9c:37:f2:24:a5:f1:55:c4:59:d3:2a:4a:61:43:
43:32:bf:e0:9b:e0:ac:a4:39:80:fa:53:44:3b:5b:
be:c2:b6:3a:61:90:e5:f5:3c:e3:d6:22:6a:5b:84:
cc:05:88:d9:72:a9:d1:67:a2:81:a1:0d:67:01:ca:
3e:2a:29:72:32:7d:5e:54:10:1f:31:42:57:be:73:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3E:07:2A:1D:B8:07:48:A6:8A:01:AC:35:1C:88:45:84:FE:04:36
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Jj4HKh24B0imigGsNRyIRYT-BDY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.80.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ae:3f:4b:f9:2f:36:96:0e:dc:0f:0f:fe:9b:ce:04:2a:a3:
88:6a:82:c2:d4:6c:f3:90:da:e0:01:84:07:91:35:cb:db:33:
41:41:3f:60:c4:0f:80:07:22:b8:93:12:c7:00:4d:40:31:be:
e8:6f:d9:f5:10:d1:8b:81:0f:49:96:59:fb:22:0a:76:3e:7a:
7d:9e:5f:c0:1e:6d:d2:58:a2:dc:a1:b0:24:f5:16:3a:d6:d3:
0e:72:b4:46:27:65:34:fc:7b:28:c2:90:b4:96:05:a7:8d:9b:
42:bc:b4:fa:16:70:60:5e:b2:ae:f3:6e:d8:77:c9:60:54:03:
a3:be:e4:d1:f0:19:c7:c0:c5:e3:3a:08:62:75:3a:2f:47:2a:
18:c5:cd:5b:ea:e7:79:d8:72:34:54:a8:cb:17:95:64:31:ec:
4e:b0:5a:14:e6:e8:c4:a1:d5:32:93:d2:99:50:c2:f4:5c:24:
80:00:33:02:59:93:b8:61:f4:d2:03:c3:7c:90:ca:9d:52:8d:
4b:27:81:29:48:87:4e:b0:29:54:ef:f1:e7:fe:53:82:05:38:
65:68:8a:1c:ff:79:3b:d4:3b:9c:dc:3b:d2:a1:c9:cf:2a:f8:
2d:6e:54:b2:eb:aa:9a:7b:d7:8e:57:30:83:2e:25:25:55:58:
ad:02:6d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org