Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/K4eUc_GwgOayVjaQmWAIaAhWcZo.roa
File: K4eUc_GwgOayVjaQmWAIaAhWcZo.roa (raw, json)
Hash identifier: NES47mngcsXa5JTrc/xZe9xoz3qHEFFs5fTMLJChwx4=
Subject key identifier: 2B:87:94:73:F1:B0:80:E6:B2:56:36:90:99:60:08:68:08:56:71:9A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/K4eUc_GwgOayVjaQmWAIaAhWcZo.roa
Signing time: Thu 15 Sep 2022 02:36:46 +0000
ROA not before: Thu 15 Sep 2022 02:36:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2B879473F1B080E6B2563690996008680856719A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:26:cc:32:c6:69:6b:14:16:5a:be:56:a7:ad:
a8:25:d0:01:05:12:c2:4f:86:b4:ca:5d:08:d1:f5:
ba:7e:28:45:02:8f:8b:46:b7:37:2d:6b:0f:89:a4:
9a:f6:36:fe:08:bb:19:bb:9e:02:bb:83:d2:40:da:
3f:4f:86:54:98:8d:1a:31:09:bd:fb:04:78:a9:83:
ef:a2:be:2b:65:df:73:06:2d:3f:bc:bf:62:ee:36:
e5:70:16:fb:70:e6:64:be:d8:c0:5a:e4:e5:ee:7c:
32:ff:4d:a2:d5:26:c3:c8:13:56:f9:8b:d7:db:e8:
65:34:e5:27:e8:26:28:6b:e5:33:18:7a:d2:ee:ba:
c3:09:2e:9b:18:dd:f8:3a:cd:db:13:07:ff:90:b4:
94:d8:ce:40:9e:73:d1:30:51:06:23:9c:22:27:2c:
90:58:f1:d7:5c:c6:16:be:ec:c2:66:8b:7d:0a:db:
5a:93:90:57:c8:fe:4d:66:2b:77:88:b2:77:ab:b7:
c5:6a:06:4c:45:e6:f2:67:24:2a:bc:4c:0f:9d:e2:
59:a3:55:a4:70:bb:de:15:74:97:68:d5:29:d4:37:
9f:d2:fe:59:dd:c9:9b:a9:cd:01:e0:d5:0b:d6:8d:
0c:7d:0b:14:34:37:8a:73:ed:95:ad:15:62:fe:4d:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:87:94:73:F1:B0:80:E6:B2:56:36:90:99:60:08:68:08:56:71:9A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/K4eUc_GwgOayVjaQmWAIaAhWcZo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.168.0/21
Signature Algorithm: sha256WithRSAEncryption
96:ca:53:38:63:fe:47:c8:bd:3b:a8:a9:7d:ce:99:62:af:2b:
31:38:b2:d8:bd:c1:f7:ff:6f:5b:a0:4d:c3:6f:8f:78:b6:75:
a9:b6:21:47:02:f4:ed:67:89:e1:6c:72:2c:3a:99:8f:b7:1e:
12:ec:21:34:3b:f8:2b:f8:e3:aa:f2:b7:d1:f9:29:e4:d2:19:
4a:9b:12:6b:75:2f:e4:01:37:1f:df:96:eb:4d:e9:d1:8d:21:
be:99:c2:8b:3a:f5:27:7e:20:68:f5:bb:87:82:40:b3:db:37:
e9:31:ac:f6:fc:3d:4c:0b:8a:f6:83:9d:6b:77:9e:d6:15:ed:
57:8a:52:15:b8:c4:29:e2:84:c9:2c:39:9e:a6:f6:5f:ee:dd:
f7:6e:a9:d1:03:fb:6d:78:be:08:9c:0e:85:e9:b9:aa:30:50:
de:98:0f:ce:11:ae:ca:f3:d3:77:d8:e7:45:0c:d7:ad:fe:ea:
6f:99:70:d2:5f:99:36:ed:19:42:0b:ef:8a:37:01:87:13:51:
81:a3:c2:dc:f7:37:d8:48:f4:77:da:6c:9b:0f:69:dc:86:2d:
5e:42:46:42:0f:34:6f:67:30:3c:b6:7f:eb:b5:22:2b:0c:8a:
8a:af:84:e7:e7:3e:31:a9:40:3f:46:ec:9e:8f:8f:53:b5:9d:
8d:e1:56:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org