Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kv-LOOpfzEIVl6e8mLWUDOT5SdA.roa
File: kv-LOOpfzEIVl6e8mLWUDOT5SdA.roa (raw, json)
Hash identifier: KGNhNIjXcRyqnYp5iGbijBY3HgnxvHItDkvDslm86B8=
Subject key identifier: 92:FF:8B:38:EA:5F:CC:42:15:97:A7:BC:98:B5:94:0C:E4:F9:49:D0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19E0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kv-LOOpfzEIVl6e8mLWUDOT5SdA.roa
Signing time: Sat 22 Oct 2022 06:12:19 +0000
ROA not before: Sat 22 Oct 2022 06:12:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.80.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6624 (0x19e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:12:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=92FF8B38EA5FCC421597A7BC98B5940CE4F949D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:ef:3f:5c:8a:60:8e:54:79:37:98:7f:63:
3c:69:3b:b5:39:86:9d:0a:9e:49:73:47:e0:6a:58:
95:c5:12:47:1c:10:f6:a3:6c:5a:2f:e4:0d:e0:a3:
0f:4a:b0:2c:82:ea:d5:7e:44:04:aa:4a:08:60:ff:
49:6f:6e:75:05:20:8c:b5:0e:5e:75:e8:78:fd:e2:
49:26:7e:7d:f3:88:c9:a5:d5:da:d6:fd:73:ae:85:
d3:da:e4:94:20:62:bd:7f:b1:e5:77:b9:64:fd:35:
2e:14:fb:f8:3c:da:de:a1:ad:91:0b:3f:b2:3c:7e:
04:b7:26:c8:65:b5:2c:7a:88:50:22:70:7b:61:aa:
18:f9:b4:fd:54:2c:d1:b1:cf:25:74:7c:50:33:e0:
03:32:93:49:a7:4e:f1:d6:66:90:79:d6:1f:95:90:
54:dc:ab:7e:93:66:a1:e4:db:91:d3:ac:84:85:05:
43:a7:37:f0:bd:a8:7d:48:9f:e3:29:48:fb:04:aa:
67:41:cb:4b:e6:a8:29:91:69:97:b7:fa:d3:e1:7e:
41:8d:52:3e:25:bd:f9:58:e3:70:43:f2:33:7f:ce:
2e:c7:dd:aa:53:71:a9:1a:ee:76:53:8b:94:20:02:
d8:f4:32:cd:67:9b:34:7a:6c:22:f1:b4:b4:5a:bc:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FF:8B:38:EA:5F:CC:42:15:97:A7:BC:98:B5:94:0C:E4:F9:49:D0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/kv-LOOpfzEIVl6e8mLWUDOT5SdA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.80.0/20
Signature Algorithm: sha256WithRSAEncryption
90:23:ce:a2:48:e0:ee:59:29:7b:78:59:94:23:1c:e2:85:23:
dc:ec:0b:a2:02:77:e4:c9:6e:8c:e8:a9:b0:ad:0c:76:86:5a:
b3:04:10:1f:28:94:c4:0f:65:a5:3b:dc:86:e9:12:1b:bb:f6:
80:72:b7:90:8b:d3:0e:1f:3b:e8:53:6a:56:ee:29:c9:03:cb:
6f:d1:77:99:99:b2:e8:0f:b1:d8:9d:b0:cf:25:0c:a9:2e:06:
e4:96:ed:35:d8:6b:45:d9:f9:95:93:ea:97:9b:dc:fa:6f:ab:
a3:8d:41:95:7a:e3:77:7b:10:7a:90:c1:b0:10:6d:04:84:7b:
a5:7a:0a:0f:b7:5d:ad:ef:2c:fa:47:0b:22:82:dc:8f:f2:39:
e7:84:91:64:61:52:df:f4:8f:7d:e1:d8:05:fa:95:29:e8:38:
90:46:68:73:6b:43:d0:31:5e:73:3a:ba:8b:51:88:1a:00:e7:
7a:c1:cd:5d:d4:20:0b:6e:ae:a6:d1:bc:aa:aa:83:a8:57:c4:
2d:30:49:ff:57:ab:ed:49:65:a6:e6:80:86:c0:b2:0a:72:8a:
e0:7c:a5:3e:b4:c3:dc:6a:e0:5a:53:1b:34:b4:34:d0:b6:aa:
54:79:20:43:c7:3b:6a:2d:de:62:4d:05:58:99:0c:51:e1:29:
08:e0:b3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org