Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rHmSW33xkSKdBh3ehO28Zzj5Y8g.roa
File: rHmSW33xkSKdBh3ehO28Zzj5Y8g.roa (raw, json)
Hash identifier: BUFowGNdfV4jJLwH6ZAe5Pz5KLe0+ginKn4QkhMstfg=
Subject key identifier: AC:79:92:5B:7D:F1:91:22:9D:06:1D:DE:84:ED:BC:67:38:F9:63:C8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AC9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rHmSW33xkSKdBh3ehO28Zzj5Y8g.roa
Signing time: Tue 29 Sep 2020 10:07:38 +0000
ROA not before: Tue 29 Sep 2020 10:07:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2761 (0xac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:38 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=AC79925B7DF191229D061DDE84EDBC6738F963C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:47:36:4f:f6:a2:c2:d8:8a:bf:c3:ff:ea:72:
83:1f:11:15:2b:d0:2a:7e:35:d5:59:0b:4e:0c:96:
ca:75:3f:bb:2e:e3:12:84:ce:f4:b1:c7:a9:87:f4:
54:03:b0:1f:2e:52:0e:fd:ef:bf:f2:df:18:b0:60:
b1:2e:ff:eb:0e:e8:f6:a9:e7:9e:2e:d1:c1:d9:5b:
72:23:4b:85:5f:c3:a9:67:f4:3d:ee:e1:79:5e:43:
c7:16:ad:3d:40:70:0d:65:59:c4:18:c7:9e:9d:89:
29:cf:95:86:a3:c2:ad:68:82:28:e0:f9:4d:b3:ca:
3e:a6:2b:c5:e0:65:c4:d3:e7:03:69:61:bc:7a:b1:
b1:bc:10:3b:e5:95:1f:7c:5e:5b:1e:eb:95:94:24:
ee:3b:cc:ac:25:de:f9:97:4e:68:94:43:e7:d5:97:
24:b3:0d:bb:de:b2:19:76:11:72:32:68:af:4d:54:
61:60:55:01:cb:bf:d4:68:8a:e5:21:fa:bb:3f:68:
d2:d8:6b:52:7a:4b:06:4e:00:75:16:89:ad:62:1c:
eb:35:06:06:5d:20:a2:a2:1c:6f:b6:68:d0:4d:23:
5b:22:9c:cd:0d:88:c2:05:bc:c3:c8:93:7e:4d:3d:
bd:c8:4e:72:20:5f:c5:8e:e8:d0:4e:3e:c2:85:79:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:79:92:5B:7D:F1:91:22:9D:06:1D:DE:84:ED:BC:67:38:F9:63:C8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/rHmSW33xkSKdBh3ehO28Zzj5Y8g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.48.0/20
Signature Algorithm: sha256WithRSAEncryption
25:5e:4e:b0:59:9e:ea:4a:4b:43:7e:16:ba:e7:fc:0c:5b:e5:
de:12:76:1e:00:ce:f5:33:91:e3:ac:7c:61:e4:c9:96:ff:a1:
a7:26:a1:49:b7:96:74:78:ff:e0:0c:86:7c:b7:bf:be:46:3f:
3a:23:91:d8:ae:59:63:8a:c6:22:53:35:9e:7c:c5:de:0f:72:
25:88:03:ad:2b:56:30:00:a3:85:ca:05:d6:3f:3a:1d:e2:ef:
15:97:b5:53:b9:d8:2a:88:d6:59:c7:f3:fa:25:42:22:97:23:
35:c9:20:94:62:ff:d2:9c:51:d6:45:0c:8b:b7:76:a6:c6:73:
47:98:11:1d:fe:30:be:42:95:f2:b1:83:0b:5c:b5:a5:83:5b:
59:7b:b4:90:95:2b:33:c0:5e:7e:94:9a:25:98:48:e1:9c:ad:
6b:dc:94:3e:c1:f3:f9:68:84:94:82:98:53:4d:3e:84:34:51:
ff:9d:83:b8:a5:60:f6:1a:d0:6a:74:09:63:a8:0f:92:d3:7c:
4f:b6:00:7c:94:ad:1b:c8:cf:83:54:b0:2d:4c:ee:79:77:68:
95:93:81:d2:37:ef:15:6e:92:61:fa:df:f9:fd:46:fd:eb:63:
18:d1:40:6c:bf:1b:26:9b:1f:e3:d3:d3:b2:9b:77:4f:3b:8c:
e9:ea:d5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:28:39 2025 by rpki-client