Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sYNX3C4wWfItUh6aSi_v50ZEdFs.roa
File: sYNX3C4wWfItUh6aSi_v50ZEdFs.roa (raw, json)
Hash identifier: u1vtsERg4SRnUk1L5AdLsh/wgLnO+q82h22an9n4Y6I=
Subject key identifier: B1:83:57:DC:2E:30:59:F2:2D:52:1E:9A:4A:2F:EF:E7:46:44:74:5B
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AC3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sYNX3C4wWfItUh6aSi_v50ZEdFs.roa
Signing time: Tue 29 Sep 2020 10:07:35 +0000
ROA not before: Tue 29 Sep 2020 10:07:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.158.232.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2755 (0xac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:35 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B18357DC2E3059F22D521E9A4A2FEFE74644745B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:3c:25:0d:17:a3:df:bc:80:4b:dc:e1:e8:
31:a9:1b:cc:55:0a:31:40:f2:d0:a7:b9:20:d5:7c:
04:47:e4:a1:f1:cf:d6:43:5e:f8:a1:49:7f:20:52:
11:ae:99:2f:06:d9:9d:01:b7:85:50:b7:95:97:1e:
49:dd:d0:59:12:7c:15:36:e7:9b:ae:8c:18:c7:22:
50:b9:f5:ff:0a:d2:9e:13:89:b3:0d:7e:09:cb:6b:
ba:89:48:1d:53:2c:71:6d:73:00:54:a5:ae:ca:82:
11:b7:10:a3:9d:65:d2:35:f2:6a:75:b7:cc:70:84:
12:69:50:78:08:66:c2:e9:8c:09:4c:1d:93:39:48:
ef:ef:aa:6f:22:5f:5e:95:4f:2d:7e:71:55:e5:ee:
88:62:39:02:01:c1:0f:d7:88:02:f7:39:a9:e9:66:
93:d7:50:ec:4f:23:b1:9f:dc:6d:42:ec:90:71:04:
52:38:3f:a3:48:ba:e9:21:30:94:90:16:79:b4:41:
a5:8d:22:a8:eb:fd:e3:c3:91:e7:7e:db:48:8d:cc:
74:7e:d1:2d:7a:45:4f:e8:70:8d:7d:40:23:46:19:
fe:c2:e7:40:7b:bc:59:b2:db:c8:d5:b9:ec:7f:38:
d3:a2:2d:c3:a4:36:79:5e:4c:ee:93:b6:7b:6e:ee:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:83:57:DC:2E:30:59:F2:2D:52:1E:9A:4A:2F:EF:E7:46:44:74:5B
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sYNX3C4wWfItUh6aSi_v50ZEdFs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.232.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:8e:49:f8:45:58:55:93:b1:ea:c2:8c:ae:dc:cc:54:2d:d5:
14:c5:3e:d4:56:99:9c:d7:2f:f9:ff:a4:5b:87:d1:7e:08:b0:
35:8d:d0:64:5a:b0:4f:9c:33:2f:e1:e4:a6:0a:cf:db:d7:27:
30:e6:9f:42:42:32:cd:c8:cd:5d:e9:dd:17:a8:e3:86:db:a1:
b2:a5:b1:8b:25:39:ba:1a:db:aa:b2:6f:c5:af:15:3b:e6:c1:
3d:12:e4:eb:b5:30:62:d2:91:d8:d6:1c:f5:18:7c:7e:3b:37:
79:a5:9a:62:40:d0:c6:a3:0c:18:13:5b:0a:2f:6e:a2:c9:37:
84:05:9c:14:47:ba:79:97:13:03:f7:c6:20:94:1c:0b:90:d3:
40:d3:49:86:a7:a4:c7:31:ab:fa:b5:8d:16:24:a1:10:84:98:
f0:83:7b:8b:e5:ba:13:3c:f1:da:70:09:87:75:90:ac:dc:dd:
57:2a:63:88:11:42:ab:57:2e:3c:ae:ee:fb:52:f8:74:0c:6a:
c5:76:97:10:1d:f0:57:01:2e:64:96:90:56:4a:7d:c5:19:45:
69:d0:25:e3:e9:a2:d0:e4:b8:f7:38:c2:b5:63:ca:42:0c:cb:
0d:94:7a:0f:57:16:d8:af:ed:3f:f5:24:39:d5:e4:bb:87:83:
3c:33:41:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org