Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fMtxXND80oQ6yERie8YQsPtxi8Y.roa
File: fMtxXND80oQ6yERie8YQsPtxi8Y.roa (raw, json)
Hash identifier: KPSiOMSz1VnpoDNrL06lbaS675kK1S9Vbyg9DocZowY=
Subject key identifier: 7C:CB:71:5C:D0:FC:D2:84:3A:C8:44:62:7B:C6:10:B0:FB:71:8B:C6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0D1B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fMtxXND80oQ6yERie8YQsPtxi8Y.roa
Signing time: Thu 14 Jan 2021 07:09:59 +0000
ROA not before: Thu 14 Jan 2021 07:09:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3355 (0xd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Jan 14 07:09:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7CCB715CD0FCD2843AC844627BC610B0FB718BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:24:84:b9:fa:0a:9a:d7:a4:f7:90:8c:ad:
a8:37:71:91:38:f3:f1:4f:f4:be:37:b3:15:55:ef:
a5:9b:b7:98:36:c2:51:6c:d0:3a:68:7d:6b:c3:bd:
14:4e:9a:3c:05:98:27:bb:27:9c:e3:7f:f3:ff:cd:
95:70:e7:ce:55:d2:9b:0a:e9:6c:08:22:1d:b7:5f:
7d:d7:d2:9f:e0:c2:7a:33:1f:82:85:48:67:79:56:
a0:a8:56:0f:cd:d6:52:d1:c9:00:f7:ce:9f:89:f7:
8d:7e:ef:bd:08:67:14:b1:31:db:89:1d:58:64:28:
b5:d3:39:70:b6:c7:ce:d3:d5:ec:69:3c:fd:91:5b:
a0:87:a6:2d:51:84:07:37:b3:06:7a:0a:16:5f:90:
de:9e:2c:03:30:26:c0:77:62:72:5c:78:0e:53:5e:
4d:e2:ff:e4:4b:f4:71:41:a1:2c:1a:59:83:47:ab:
88:ed:ba:f2:c1:ef:3f:a0:51:ce:dc:de:fb:a2:12:
31:99:e3:b8:1b:80:cc:22:a1:dd:70:cb:e6:66:5c:
0b:ac:10:e5:dc:f0:49:ed:37:45:e5:fa:d5:2e:27:
51:c3:b3:6f:4b:4b:5a:12:7e:9d:76:a5:ad:41:d4:
14:5c:32:1c:81:81:98:a2:b8:1d:36:30:15:c6:d6:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CB:71:5C:D0:FC:D2:84:3A:C8:44:62:7B:C6:10:B0:FB:71:8B:C6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/fMtxXND80oQ6yERie8YQsPtxi8Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.160.0/21
Signature Algorithm: sha256WithRSAEncryption
82:f6:54:33:2f:68:2b:b4:ce:7f:7b:34:05:41:d4:e2:d1:49:
11:91:0f:12:c4:02:ea:20:81:d2:f9:05:5b:ae:bc:8a:71:73:
fb:e0:bc:22:15:14:27:da:cf:cd:a8:d8:23:f7:3a:3a:fd:21:
57:22:ef:55:36:86:93:7a:af:c1:6f:32:10:3f:0c:4b:69:3f:
a2:71:e5:a2:4f:68:83:36:a2:9d:fb:1e:71:70:d8:07:3b:5c:
af:e6:d5:2c:4e:70:2c:bf:e4:15:2e:f9:19:fc:be:06:34:c0:
ff:7a:91:3c:26:e1:85:cd:64:bd:ef:a4:a8:b2:83:0d:c1:79:
d6:32:c9:e0:c4:06:b8:37:70:46:24:8d:30:6d:09:a7:e2:e7:
02:e0:65:86:20:03:c8:ee:9b:17:dd:fc:8e:00:8e:4e:5f:6e:
ef:0a:f7:27:fa:c8:b9:47:f5:11:48:8d:10:bf:79:f9:67:e0:
69:f6:34:c9:85:b2:d8:09:83:b7:ec:a5:ce:ab:43:60:70:e1:
9b:da:9a:bf:67:d6:eb:bd:9e:b2:21:69:7b:9f:26:8c:6b:2d:
e8:bc:98:68:30:f8:aa:ee:a6:1b:a6:36:d0:b1:d6:4c:39:83:
75:8d:21:7e:0d:33:46:15:0a:75:ca:45:64:29:23:7e:03:da:
2b:02:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org