Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dJcYjBRwVoSA-Y5li34hWaoTTRE.roa
File: dJcYjBRwVoSA-Y5li34hWaoTTRE.roa (raw, json)
Hash identifier: +NwVEJRIKaQLl+R7gQ+oCDsrwxh16lnob/j2If99LIo=
Subject key identifier: 74:97:18:8C:14:70:56:84:80:F9:8E:65:8B:7E:21:59:AA:13:4D:11
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1966
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dJcYjBRwVoSA-Y5li34hWaoTTRE.roa
Signing time: Sat 22 Oct 2022 06:06:29 +0000
ROA not before: Sat 22 Oct 2022 06:06:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6502 (0x1966)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7497188C1470568480F98E658B7E2159AA134D11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:41:38:d0:e7:de:ed:61:c0:a0:d9:e4:84:
cc:a1:6f:f3:4a:cf:fd:45:70:28:57:14:05:3f:a6:
ec:89:71:30:18:32:ee:12:05:5e:f8:fc:7f:ef:01:
74:f3:96:7f:ef:ef:58:ef:06:a3:82:13:0c:0d:e9:
1d:5f:f2:43:b3:9c:e8:3c:55:ac:79:6c:dd:df:0c:
b2:6f:04:bc:d4:51:5e:20:ac:b9:91:15:73:25:e0:
1d:cf:09:e3:03:2d:36:97:05:06:bc:ee:c6:e3:33:
2d:23:d4:1d:c1:f4:d0:c1:08:ef:6e:d3:af:71:c8:
2c:ca:9e:be:b7:2c:63:69:f3:44:a3:7e:88:da:65:
97:eb:77:2f:0d:0a:f9:ad:f8:32:b7:f8:48:b5:d2:
59:c7:95:61:61:a9:96:ed:cc:25:c3:ad:29:38:56:
7e:3c:61:04:75:e6:3d:4e:6e:d8:d9:83:bd:09:88:
9e:fd:f9:6e:87:c9:87:8e:12:f7:e3:de:3b:25:1e:
1c:14:bf:5c:6f:d7:40:eb:54:63:ea:78:97:02:32:
8d:27:93:47:93:8e:db:54:af:e8:f6:6b:59:f6:80:
a7:87:27:04:5a:60:1e:38:83:a8:8e:57:64:2a:65:
3e:a8:8c:54:8c:b9:dd:2a:42:3b:44:ad:cc:f1:5a:
e6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:97:18:8C:14:70:56:84:80:F9:8E:65:8B:7E:21:59:AA:13:4D:11
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/dJcYjBRwVoSA-Y5li34hWaoTTRE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.152.0/21
Signature Algorithm: sha256WithRSAEncryption
56:48:bd:e5:4f:7a:77:f6:d8:1b:32:b9:c9:33:c1:b6:f1:b2:
39:78:50:3b:25:49:08:16:d6:47:d6:eb:d5:4f:9b:ef:0c:f7:
e6:2e:a2:8c:d7:6a:3f:2f:65:95:31:dd:29:21:ef:bd:03:30:
3a:29:81:65:a9:4f:a8:23:e4:77:0f:b8:da:06:e1:9f:ba:e4:
cb:a5:5c:65:15:0c:b9:ab:9c:50:ad:71:01:09:4f:89:7a:0e:
5e:7e:c2:28:15:16:76:e5:03:5c:b8:34:08:d2:c8:9e:53:dc:
2a:cb:e6:df:bf:db:a4:32:2b:6c:f4:03:28:ce:af:72:9e:d1:
29:8c:54:a6:1d:53:ae:03:0b:6f:a7:1a:9d:64:7a:9b:66:fe:
cc:a0:f9:2e:e7:c8:6f:fc:a9:7a:fb:bc:ee:23:e9:5b:56:dc:
46:3d:ab:9b:a9:d7:c5:a5:a5:2d:98:23:ab:77:d6:41:7b:4d:
d4:df:08:87:36:8a:db:5d:5a:88:75:56:68:61:85:ab:f7:77:
85:4c:a3:b6:32:bc:3b:5b:fe:51:e4:da:b6:51:20:de:8e:43:
cb:8f:7d:6a:89:9d:df:8f:6c:6e:96:f1:1e:ba:94:fe:f1:15:
cc:b5:91:fd:1d:77:e6:ae:01:63:3c:b3:07:8d:cb:eb:2f:c9:
73:57:85:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org