Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iO8TafmrQag4JOadswWsllc8830.roa
File: iO8TafmrQag4JOadswWsllc8830.roa (raw, json)
Hash identifier: bsqBI1aSxzf0TVD68vKm3Z4byPao1P8Hbx8M28qmjc0=
Subject key identifier: 88:EF:13:69:F9:AB:41:A8:38:24:E6:9D:B3:05:AC:96:57:3C:F3:7D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12FD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iO8TafmrQag4JOadswWsllc8830.roa
Signing time: Wed 29 Sep 2021 02:55:13 +0000
ROA not before: Wed 29 Sep 2021 02:55:13 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.159.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4861 (0x12fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:13 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=88EF1369F9AB41A83824E69DB305AC96573CF37D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:f6:80:de:04:d0:bc:55:8d:dc:f5:1b:ac:
d3:11:08:55:00:e1:58:fd:60:c8:87:05:2e:a6:d9:
c6:ce:86:39:f8:3b:10:0c:a3:38:73:80:fe:35:a5:
1a:45:37:0e:ed:f6:5d:be:36:71:64:a4:53:33:98:
c3:7b:11:fe:91:71:8c:14:a2:1e:e5:4f:46:af:b5:
e3:98:63:74:b2:d7:b5:d7:67:3d:bb:a9:66:c6:80:
10:3f:b3:63:66:c9:f9:7f:e1:ff:96:d6:40:cb:81:
ae:c6:31:a8:0f:e1:59:45:5b:97:bb:5b:5d:7f:82:
b2:47:2a:98:69:b7:39:58:1e:0c:28:4c:30:95:78:
9a:6a:45:f0:80:0f:d0:06:36:6f:80:da:30:e7:4b:
87:7d:dc:77:b4:53:f7:00:50:ec:15:4b:87:71:9e:
92:64:08:c7:fd:ec:79:a1:4e:c2:5f:41:a1:18:5a:
28:14:9a:fd:65:68:d6:db:06:36:16:23:28:4e:c1:
55:24:30:8f:56:2c:9d:6e:36:2c:b2:e4:d2:03:53:
d8:ad:d4:69:d2:05:ed:d0:5e:73:ed:48:41:83:f9:
9b:ff:b2:76:ab:e2:ae:8b:90:9e:dc:85:f6:61:15:
7d:45:f3:fd:30:13:75:eb:0a:d8:56:4d:80:3d:9e:
10:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EF:13:69:F9:AB:41:A8:38:24:E6:9D:B3:05:AC:96:57:3C:F3:7D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/iO8TafmrQag4JOadswWsllc8830.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.96.0/21
Signature Algorithm: sha256WithRSAEncryption
19:1d:2a:bf:7f:88:8d:e5:39:d8:fa:7c:f5:2c:5b:7b:0a:f3:
4f:19:26:1b:cb:71:2f:33:23:d0:d9:f1:8f:65:20:b3:c6:ed:
7d:fd:6d:2d:d6:82:32:31:c9:d1:e4:db:d5:a9:b6:92:59:c9:
97:a1:2b:94:ac:a8:59:ab:eb:c8:ba:6d:26:e6:f6:04:b8:a9:
39:3d:c5:15:1a:1a:21:90:4f:83:68:47:2e:60:1b:15:fb:42:
e8:13:54:b1:fd:1f:4e:f5:de:5f:8b:87:2d:fb:0b:aa:b9:d9:
eb:79:67:cb:c0:1f:fc:4c:87:df:40:eb:83:a2:60:c3:13:2b:
43:1c:10:2a:2e:32:a7:02:84:ce:09:b1:ae:4b:10:54:6c:30:
f4:5d:98:17:7d:20:0f:c2:21:17:76:23:42:6a:5a:3b:71:9f:
c9:1d:07:90:cc:eb:6e:f8:50:40:42:8e:55:e1:3b:32:e0:ee:
0a:0b:1f:87:a5:3e:a3:0e:52:2e:25:fa:2a:89:18:44:60:32:
41:c3:6c:6f:7e:a0:66:28:a3:1b:0b:b7:2a:1d:3a:44:dc:a5:
eb:2b:d4:7f:06:6e:9d:f9:a0:e4:da:1d:76:95:4b:c5:f6:39:
5f:dc:04:80:80:23:ed:c6:8c:92:95:5a:63:1c:e7:17:4f:e3:
7e:84:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org