Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LErbB_F6b8QlRS2DB5_yuPmQ1Uc.roa
File: LErbB_F6b8QlRS2DB5_yuPmQ1Uc.roa (raw, json)
Hash identifier: Ix1bQbMKdYuRxtlZ+qUpHaOgig0G43EurNyq6Z90+bI=
Subject key identifier: 2C:4A:DB:07:F1:7A:6F:C4:25:45:2D:83:07:9F:F2:B8:F9:90:D5:47
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 199C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LErbB_F6b8QlRS2DB5_yuPmQ1Uc.roa
Signing time: Sat 22 Oct 2022 06:06:44 +0000
ROA not before: Sat 22 Oct 2022 06:06:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6556 (0x199c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2C4ADB07F17A6FC425452D83079FF2B8F990D547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:62:e3:e1:2f:b8:78:23:d7:5c:95:34:08:
5e:29:8b:83:58:4d:52:66:6c:7e:98:4d:e3:0c:d7:
1a:22:0c:13:85:a4:bb:f6:aa:6c:f9:de:65:a1:8e:
4b:a1:5a:ad:24:dd:08:3f:af:7f:4d:16:14:ad:2d:
df:2e:6a:85:fa:e9:b5:31:69:0c:c1:b2:0c:6d:3a:
f3:7a:f1:b3:fb:9d:ef:97:7a:62:65:4f:6e:c2:08:
11:10:a7:b7:9f:d9:a4:ce:b5:7c:50:cd:6f:57:96:
8a:1c:42:77:ad:3f:ee:ea:8f:9d:21:b1:ce:c8:5c:
17:22:6b:17:3f:f0:2b:3f:86:2c:77:47:3b:a8:b6:
03:ad:45:80:10:1d:49:c5:4e:86:a6:95:ef:ca:f9:
40:c8:bb:5c:da:e9:24:c6:db:a3:5c:40:90:52:4a:
fd:bc:8e:04:41:f3:8d:27:57:03:56:de:cc:75:83:
89:ce:f4:d0:cd:4c:0b:04:a4:62:c7:00:56:e1:8f:
5c:0b:f8:7b:1b:4c:fb:da:35:bd:fe:18:16:47:a3:
c3:a1:ad:a1:54:0a:97:4f:1e:d7:3d:dd:43:0a:14:
e5:2f:cc:07:29:e9:d4:a8:b1:09:be:a7:0e:ae:97:
fb:61:be:82:85:97:22:22:42:33:8a:a8:68:fa:87:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4A:DB:07:F1:7A:6F:C4:25:45:2D:83:07:9F:F2:B8:F9:90:D5:47
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LErbB_F6b8QlRS2DB5_yuPmQ1Uc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.160.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:6a:a3:94:a6:d5:c0:54:35:e9:4b:da:57:2c:09:0b:36:fb:
ef:ea:59:58:af:ba:92:82:9c:8c:c8:34:64:25:27:53:d8:56:
6a:e3:67:30:cc:1f:6c:66:4c:db:45:57:10:25:b5:58:98:b7:
42:59:e8:e1:7b:e5:45:17:0d:9e:4a:dd:84:4c:a5:4c:8e:80:
8c:10:fa:b8:fe:54:02:62:be:2c:36:6e:a8:ff:84:b2:c5:73:
03:ae:ca:e4:4c:b8:6e:81:b8:8d:b8:b8:b7:42:44:36:09:15:
fa:cd:13:c9:9a:64:44:2d:ef:e2:53:81:2b:8d:49:84:02:ef:
0e:11:33:eb:b3:f6:be:73:b9:16:f4:cf:52:14:3b:47:50:0c:
15:8b:22:6c:59:0f:d0:5e:0d:22:fd:62:1f:a6:b4:89:36:12:
ae:33:15:61:09:e6:77:b0:8c:a0:22:1c:a9:1e:ca:d2:27:47:
b5:03:98:7f:e0:b2:b9:40:0d:09:fa:e0:43:b5:2e:65:88:de:
5b:e5:43:a6:59:12:97:a1:b7:9d:05:80:8b:91:cc:ea:d7:ee:
50:0f:b2:28:ef:80:01:9f:09:64:fc:8c:02:41:f7:f6:ab:24:
bc:ef:f0:9e:47:db:ab:9a:07:c8:fe:46:98:d2:5f:15:99:82:
c2:9f:14:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org