Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o48Ow2qVx63ZpEk_lzIRyW1CT_A.roa
File: o48Ow2qVx63ZpEk_lzIRyW1CT_A.roa (raw, json)
Hash identifier: cf5gc2EgLPt9jsl+4OZjrD3n3xUukStu3o3GqFXVUZ0=
Subject key identifier: A3:8F:0E:C3:6A:95:C7:AD:D9:A4:49:3F:97:32:11:C9:6D:42:4F:F0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AB4
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o48Ow2qVx63ZpEk_lzIRyW1CT_A.roa
Signing time: Tue 29 Sep 2020 10:07:31 +0000
ROA not before: Tue 29 Sep 2020 10:07:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2740 (0xab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:31 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A38F0EC36A95C7ADD9A4493F973211C96D424FF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:7b:4a:d0:a6:10:d0:e6:f0:d4:ef:e8:08:
d6:b8:8c:4c:c1:ea:ef:22:bc:54:3a:0b:a8:ba:15:
9b:ff:da:ab:ad:15:bb:d8:eb:13:51:3f:26:55:29:
ae:4e:c6:7b:a6:61:f9:93:59:77:6a:05:7e:b9:f7:
f4:4b:6a:3b:45:c4:0b:45:06:ab:c3:6d:fa:fe:87:
80:9d:46:d9:f9:b1:e4:7c:e7:2f:2d:74:b2:34:b9:
31:33:fd:9b:c4:b0:cc:21:91:bc:ca:19:9a:b9:14:
02:e6:9c:e1:80:43:5f:70:ab:c4:a9:78:0d:40:ad:
8c:de:c2:d1:fb:a6:49:ae:9f:23:a4:39:a1:4f:19:
ff:85:19:d9:36:a3:8f:df:6a:60:53:d8:83:2f:bb:
5f:d2:16:ab:a0:33:d1:14:c2:5c:4b:12:9c:dd:bf:
32:dc:66:81:e3:75:f7:cb:5d:16:ef:2d:7f:ae:07:
f1:01:e9:76:c3:cb:25:c6:eb:67:0d:85:16:f0:83:
6e:ce:ae:07:12:84:9b:34:f9:6b:e2:09:29:5d:58:
97:9b:6e:6b:e1:02:ca:be:58:42:fa:cc:39:a9:93:
b6:9a:21:72:8b:ca:74:4b:4d:0f:1f:bb:00:47:7f:
5f:39:e8:60:b5:89:55:36:18:3a:dc:5e:bb:82:60:
25:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8F:0E:C3:6A:95:C7:AD:D9:A4:49:3F:97:32:11:C9:6D:42:4F:F0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/o48Ow2qVx63ZpEk_lzIRyW1CT_A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.112.0/21
Signature Algorithm: sha256WithRSAEncryption
11:d7:e3:d4:79:4f:23:69:91:5b:50:24:5c:1d:cf:32:6f:2c:
a3:aa:07:70:27:47:f4:61:41:91:9e:2f:dd:4a:6d:00:2d:c1:
d0:d5:82:0b:2a:1c:f3:90:14:71:29:03:1c:18:27:83:b9:41:
fe:3e:df:a1:5e:78:71:6d:95:42:35:50:8a:b1:ec:82:5c:c7:
9a:ef:06:0a:01:9e:1a:f1:80:18:dd:8d:1f:fe:40:15:cd:10:
df:39:76:3d:01:4a:e6:d3:0e:af:b2:d3:2e:07:24:4c:09:0a:
d0:7a:b7:5b:95:d1:ed:90:cf:bd:45:f2:0c:b9:43:8d:7c:b7:
2e:cf:72:04:1b:5e:37:55:d5:44:35:88:3a:e4:aa:66:e6:84:
59:db:a8:ee:60:ee:fe:59:0e:ce:2f:9e:d8:21:42:2c:19:45:
32:e2:b3:16:89:d1:cf:19:a7:2e:91:23:38:7c:fc:e2:5c:40:
60:a7:8c:b3:ed:ec:18:dc:fd:3a:57:63:c9:91:20:b7:52:9f:
a8:53:06:8b:59:b9:fb:1c:11:f1:41:66:06:66:8b:53:ee:a8:
f8:6a:12:23:fb:4f:5f:28:b0:2f:50:81:ba:84:e5:7a:97:3d:
70:ee:97:35:2a:73:1b:f9:42:3d:1f:9d:2e:67:9f:07:66:6b:
6e:44:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:49 2024 by rpki-client on console-ams.rpki-client.org