Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c7ivhD8gVBCO9U28osC3bGSs9AE.roa
File: c7ivhD8gVBCO9U28osC3bGSs9AE.roa (raw, json)
Hash identifier: dBM5m83ICXlJ14u79S7v1Bg5llq4xLSC9Gua/iGFIqs=
Subject key identifier: 73:B8:AF:84:3F:20:54:10:8E:F5:4D:BC:A2:C0:B7:6C:64:AC:F4:01
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1288
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c7ivhD8gVBCO9U28osC3bGSs9AE.roa
Signing time: Wed 29 Sep 2021 02:54:41 +0000
ROA not before: Wed 29 Sep 2021 02:54:41 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4744 (0x1288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:41 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=73B8AF843F2054108EF54DBCA2C0B76C64ACF401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:8d:ee:3f:59:82:5b:0c:ea:95:0f:c2:cd:
96:2d:96:e5:f6:cb:44:b6:c3:0e:07:0b:ad:d6:e0:
3a:8f:ae:cd:8b:11:ea:ce:e9:0e:5a:d3:fa:02:e0:
7e:3e:4a:57:93:cd:67:36:24:8f:fa:5d:90:d3:58:
8f:6d:d8:fb:81:67:85:f4:52:4a:e5:74:b7:1c:09:
8c:da:e5:2f:d9:5d:86:41:9e:ea:b7:17:55:ba:8b:
ef:b6:c0:e5:4e:c9:11:e6:9e:2c:bd:91:b8:aa:31:
14:0d:aa:40:1a:11:62:de:21:d1:21:3d:79:fc:06:
68:db:4a:53:48:6c:70:ae:35:02:39:22:3f:ee:e3:
7f:37:c4:e2:14:4c:e4:8a:6e:01:db:35:24:22:68:
60:1c:0e:08:8d:92:46:ba:e0:50:b3:b4:f3:51:03:
ee:f2:5e:96:3b:49:d6:6f:8e:68:6c:86:3a:a8:ca:
68:f6:c1:6c:1a:f6:28:70:ef:a8:03:92:ea:0f:54:
6c:cf:0c:5e:a2:4f:b2:65:cd:fc:9d:4e:24:95:f8:
ad:80:f8:83:55:e7:69:71:ae:e3:1a:92:ae:6d:de:
db:c3:cf:60:70:7f:74:6c:a8:16:6a:0c:07:0c:2a:
f5:c9:8f:a8:9a:b4:0e:38:ef:e0:08:67:23:8a:fa:
eb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B8:AF:84:3F:20:54:10:8E:F5:4D:BC:A2:C0:B7:6C:64:AC:F4:01
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/c7ivhD8gVBCO9U28osC3bGSs9AE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.104.0/21
Signature Algorithm: sha256WithRSAEncryption
45:84:bc:44:75:b2:a7:1e:ac:44:bc:09:fc:11:8e:44:4b:b9:
2a:1c:b9:6c:da:1e:9b:5e:5e:f5:75:31:97:00:24:fd:29:6f:
dd:cc:55:63:af:12:55:ae:82:07:2b:b1:cb:2b:cb:ae:78:0f:
00:32:d9:4f:62:c9:da:02:11:18:96:14:b5:91:df:a5:ea:6a:
8b:80:c4:bc:b0:0f:e4:f8:3e:b2:62:2a:6c:ab:bb:19:2c:d5:
69:48:61:54:fc:90:e0:83:6c:71:10:16:f0:39:a1:69:a5:00:
d1:99:e9:92:15:04:a1:cc:68:af:c6:84:ae:39:be:04:71:86:
ef:0d:19:cf:82:d9:98:99:78:f0:e6:8d:58:38:42:95:38:5e:
54:98:65:e2:27:ee:9e:f2:c5:e4:42:10:4a:87:77:01:9b:e3:
8d:50:c1:e6:28:c3:13:30:3c:87:99:ae:dd:e4:c7:d8:92:1c:
a4:76:b3:09:6f:99:72:61:aa:bd:b3:3e:f5:d4:ac:c6:56:17:
28:c7:d2:d8:24:9c:29:c6:e7:20:4a:9d:9b:70:70:f6:ae:04:
5a:ec:64:4b:d0:9e:d2:b0:8c:f4:bd:ea:a2:6b:f9:a1:4b:cd:
0c:ff:98:a3:b4:17:d8:7d:f3:a9:5a:f0:f4:e2:22:8d:dc:e9:
8b:0a:a5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org