Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l_p0pGYTygZ3NmmqaY24cmfWxIU.roa
File: l_p0pGYTygZ3NmmqaY24cmfWxIU.roa (raw, json)
Hash identifier: qpJ8P2+N9T1T+iBdKJPfjKk3X3zQBxyirTMJW8zKxok=
Subject key identifier: 97:FA:74:A4:66:13:CA:06:77:36:69:AA:69:8D:B8:72:67:D6:C4:85
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FDF
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l_p0pGYTygZ3NmmqaY24cmfWxIU.roa
Signing time: Sun 07 Feb 2021 12:36:27 +0000
ROA not before: Sun 07 Feb 2021 12:36:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4063 (0xfdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:36:27 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=97FA74A46613CA06773669AA698DB87267D6C485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:3a:2e:7f:17:0f:e5:89:2a:c4:b4:c1:73:
74:54:8e:31:0b:66:62:6e:48:db:78:d4:14:80:b1:
c3:8e:81:c5:76:79:a3:0f:cc:f1:dd:9e:28:a9:42:
8a:54:c2:9f:43:9f:9d:2c:bd:0b:d7:a8:96:e1:ea:
5b:9d:59:dc:63:7f:80:4e:39:4e:24:2b:ea:96:b1:
af:b0:a3:2b:5c:9a:c5:39:2e:37:f3:ff:16:87:71:
0f:07:1b:9f:96:05:79:59:f4:15:c1:18:d8:34:bd:
03:0d:49:fc:f0:93:b6:50:2f:9d:b0:ef:0a:ea:5e:
51:bf:a2:f1:d4:81:2e:88:d6:e4:16:21:8b:25:45:
8a:02:34:a1:18:cf:1e:b9:c4:7a:64:49:c7:b6:b3:
ca:f7:92:f4:6e:dd:cb:93:62:b0:b4:0f:38:2e:ec:
be:2e:e4:46:ac:62:6e:d3:90:7b:17:c3:51:f0:02:
24:33:5c:a4:7f:2f:7c:16:4a:23:41:24:c4:77:e2:
72:41:6d:b5:3c:e1:54:76:58:55:8b:0c:d3:80:96:
3e:4a:eb:4d:b2:7b:b9:4f:75:99:a3:69:ec:62:35:
a0:cb:4d:91:db:37:8a:4a:a0:55:ea:78:e6:06:38:
14:98:7f:1c:37:0a:20:97:98:bc:ec:a7:52:31:ec:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FA:74:A4:66:13:CA:06:77:36:69:AA:69:8D:B8:72:67:D6:C4:85
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/l_p0pGYTygZ3NmmqaY24cmfWxIU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.112.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:7b:54:59:4a:d3:06:34:4e:7b:cc:2e:cd:c4:65:49:8a:f5:
ef:07:d5:79:e7:8f:0f:57:1f:d9:93:35:d3:a5:61:6b:9e:e9:
e0:e7:26:e3:75:04:95:f6:c7:74:f1:f1:16:d6:d8:0c:80:bb:
0e:cb:07:47:0b:10:c5:f8:cd:7d:1d:b9:19:e5:5a:b4:af:56:
a1:83:6d:83:a9:fb:4d:92:c7:04:c6:11:7a:fc:75:26:83:50:
d7:c5:9f:cd:f2:7e:71:47:fb:af:34:ab:30:1d:03:b4:ee:46:
d6:e4:d5:d5:17:b3:2c:51:25:10:58:2a:e9:44:88:1c:99:51:
cd:bb:06:86:d6:ec:b3:41:a4:b7:0b:66:2b:f9:e9:06:3d:c5:
f0:b2:9a:5b:56:fb:5c:7d:48:91:1f:f4:c2:bc:0e:09:b7:50:
f7:0f:6b:a0:8c:6c:cb:06:9b:a6:09:bb:ee:51:29:b9:72:45:
19:ff:b1:18:d4:e9:6b:b2:d1:80:2f:fb:61:26:47:58:38:3d:
58:60:1e:dd:29:a6:cd:92:d2:c0:a7:c7:f2:43:63:2d:b8:eb:
30:69:8b:0a:12:90:f3:56:ed:d0:5b:c9:e4:78:05:f7:7b:d9:
a1:d0:ed:af:d7:a9:58:6b:41:a1:d4:89:48:5c:66:f5:91:e4:
05:1e:0a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org