Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ml8u4JYFsg2SSQVS2DUAPhCcyOo.roa
File: Ml8u4JYFsg2SSQVS2DUAPhCcyOo.roa (raw, json)
Hash identifier: HmEUnl+/3gYi5lEPDoR49xvbNygx+JMmPQXySFiUjpk=
Subject key identifier: 32:5F:2E:E0:96:05:B2:0D:92:49:05:52:D8:35:00:3E:10:9C:C8:EA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ml8u4JYFsg2SSQVS2DUAPhCcyOo.roa
Signing time: Thu 15 Sep 2022 02:36:43 +0000
ROA not before: Thu 15 Sep 2022 02:36:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24165
IP address blocks: 49.159.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=325F2EE09605B20D92490552D835003E109CC8EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:53:c1:3d:fc:a8:5b:3a:a3:dc:a5:5f:0f:
00:63:47:01:e4:5d:11:53:93:db:bf:75:cc:12:d7:
3c:33:c1:c3:81:53:db:5b:51:2b:0b:ba:9b:ca:cb:
b3:67:ef:e7:33:5b:18:58:28:9b:3a:38:e8:99:1b:
e9:9e:73:39:5f:f3:be:30:cc:f6:16:23:a9:94:69:
73:e3:9c:ec:19:3e:1e:98:96:42:85:c9:2e:f0:a6:
44:8c:a9:ee:a6:ee:14:8a:9c:2f:f4:d1:5e:28:6e:
32:1b:61:74:8a:3d:f5:9c:cd:11:34:ac:d1:c5:3d:
c3:a9:95:6e:28:a6:70:23:31:ca:87:a6:8d:66:cd:
ee:2d:b0:cd:eb:3f:73:aa:b9:fa:12:2c:cb:3c:f0:
06:11:bb:8d:fb:43:ac:b6:7b:d1:9c:ff:00:41:2f:
91:24:59:7a:e5:8b:a1:04:7f:e4:f7:16:3d:d8:ed:
df:3d:e4:73:4e:09:fc:6f:a6:93:20:71:ce:23:77:
8d:40:b0:3e:b3:d6:81:74:1f:cc:d8:37:6f:c9:5a:
af:4c:8d:e8:b9:ac:3b:a2:a9:70:18:d6:c7:e4:3d:
16:05:f8:e4:9c:47:6f:8e:73:1d:1c:08:4b:d7:7f:
a6:59:06:b3:39:fa:58:2d:35:6a:98:0f:4a:b9:3d:
e6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5F:2E:E0:96:05:B2:0D:92:49:05:52:D8:35:00:3E:10:9C:C8:EA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/Ml8u4JYFsg2SSQVS2DUAPhCcyOo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:1e:7b:97:45:1f:7d:14:9c:20:9f:ac:f1:82:7c:89:a4:56:
78:46:41:67:eb:10:14:80:9a:7d:97:53:a5:7b:1f:13:3c:63:
6a:f8:fa:c0:91:01:01:33:ac:06:2b:7f:32:42:7f:fe:31:c1:
1f:43:9e:13:8b:e2:9b:71:1b:e8:71:c9:2e:f3:ec:72:31:d0:
e9:93:dc:b7:a2:12:54:03:b8:48:a8:5e:6c:b1:d5:fb:ae:27:
96:d7:fc:1d:e2:af:fc:62:47:9f:c0:22:34:a2:b7:e0:50:e8:
0b:a2:46:15:09:e4:47:ed:3e:55:31:83:ab:46:0e:da:ab:de:
d2:ce:62:e6:51:41:37:01:43:2c:a0:83:4e:e0:d9:b7:d9:eb:
0f:f1:6d:86:9a:8b:cd:4e:3e:a0:30:ea:88:7b:bf:fd:f2:a7:
d1:4d:e8:f0:54:c2:78:ed:45:40:11:08:fe:bc:81:b0:4e:80:
43:94:78:24:93:d8:8c:02:20:71:9d:7e:eb:4a:30:d2:cd:1a:
76:21:d6:5b:ed:32:eb:80:93:7b:80:78:39:db:9f:39:74:54:
3f:36:f6:94:95:2b:a8:20:57:53:ed:24:16:bc:47:9e:a8:ba:
fa:5f:25:3c:86:35:1b:0c:13:89:8c:4a:85:32:dc:cc:9d:32:
73:f8:4e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org