Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/m5o6TZ3A8WKLdBPWTp96Z9E5xNw.roa
File: m5o6TZ3A8WKLdBPWTp96Z9E5xNw.roa (raw, json)
Hash identifier: 6ITB3ViOj8Af6K7coDD1XVHhEhQvvXECwLS2EOrAdzw=
Subject key identifier: 9B:9A:3A:4D:9D:C0:F1:62:8B:74:13:D6:4E:9F:7A:67:D1:39:C4:DC
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/m5o6TZ3A8WKLdBPWTp96Z9E5xNw.roa
Signing time: Thu 15 Sep 2022 02:36:42 +0000
ROA not before: Thu 15 Sep 2022 02:36:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9B9A3A4D9DC0F1628B7413D64E9F7A67D139C4DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:88:6c:0d:3f:8c:ab:69:ef:6d:a1:92:5e:f5:
d4:1f:41:90:f1:a2:12:e5:47:50:e0:fc:54:61:48:
78:1e:b7:21:06:79:67:ee:d3:5c:1d:89:f9:56:5e:
c9:18:78:b1:a0:e3:bf:14:6e:a4:95:3f:04:ff:fa:
41:87:8c:fe:6e:87:ca:ca:66:c5:0d:4c:cc:61:dc:
8b:e2:0b:96:ac:39:0c:60:1e:d9:b6:5a:74:8b:e7:
6e:a1:8b:53:52:c9:82:1a:ae:e8:5a:1b:48:f4:cb:
51:33:ad:10:4a:1d:f7:d8:6f:cd:93:8e:4d:d0:bf:
c5:af:f5:99:ae:34:b2:4e:64:1c:cb:f6:b7:2c:58:
58:63:92:57:11:30:32:c9:0f:54:89:e3:6f:cd:10:
31:c1:da:e6:94:5e:4d:45:50:6c:81:cf:95:30:59:
33:07:d8:54:6e:9a:16:8a:3d:ef:82:b9:9f:3a:08:
2e:eb:44:04:63:3c:4e:99:35:cb:9f:94:47:41:e7:
6e:07:b5:80:8f:1a:a5:f6:c8:53:63:9b:10:cd:2d:
66:4d:91:40:ee:5f:f4:78:8d:6c:9d:bb:60:64:4f:
e9:59:bb:26:b3:16:69:39:7f:84:20:00:c3:52:48:
30:de:c5:5a:86:72:53:ef:aa:b5:82:6e:0c:14:cb:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9A:3A:4D:9D:C0:F1:62:8B:74:13:D6:4E:9F:7A:67:D1:39:C4:DC
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/m5o6TZ3A8WKLdBPWTp96Z9E5xNw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.57.0/24
Signature Algorithm: sha256WithRSAEncryption
15:cf:8d:3a:9e:82:86:e9:e4:6f:21:09:f6:3a:66:87:b9:f4:
c1:71:79:bf:f4:07:8a:70:d2:92:1a:d8:94:3e:01:19:62:77:
36:d8:6d:21:74:ae:5c:12:61:7c:59:3c:65:03:f8:a7:a6:1f:
b4:0f:b9:5f:b2:0a:9b:9d:d1:18:8c:93:b4:f5:96:56:2d:b5:
e3:ef:55:e9:b1:0e:6c:d0:2b:a2:42:0a:06:7a:80:08:e5:3c:
c7:eb:e2:e8:d4:48:07:33:f8:fa:b1:7b:d0:9e:8e:58:82:99:
f1:86:94:ca:b0:5b:32:5c:7e:a3:7d:8a:9b:7a:ad:0f:1e:1e:
e1:76:11:39:d4:4c:64:7d:a0:9c:d6:07:fa:3f:81:08:18:ba:
78:78:7d:8f:8e:38:92:ab:22:a6:17:4d:44:69:e6:25:8d:07:
3c:50:1f:5a:c8:35:32:05:a1:ce:72:ff:42:1f:da:ee:7c:8d:
63:75:b6:f6:ba:2f:70:f5:3b:b6:b3:2b:91:85:0f:b4:13:86:
dc:e9:f4:63:5e:7b:ec:e0:e9:1d:00:db:d0:f7:73:29:ee:0c:
a4:c2:88:e9:ad:f9:ce:ec:28:75:a8:8e:a9:78:0e:04:fc:b7:
93:b5:13:8f:7b:9f:a6:c8:5b:a6:e2:13:f8:16:17:8f:84:b4:
87:96:e5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org