Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tsKs3Js84gYrFd1F_YsQaMcQsKg.roa
File: tsKs3Js84gYrFd1F_YsQaMcQsKg.roa (raw, json)
Hash identifier: lEY3r1DabqeQi5SttGumiPbSSYX5/oRkoouSmEGlS+Y=
Subject key identifier: B6:C2:AC:DC:9B:3C:E2:06:2B:15:DD:45:FD:8B:10:68:C7:10:B0:A8
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1031
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tsKs3Js84gYrFd1F_YsQaMcQsKg.roa
Signing time: Sun 07 Feb 2021 12:43:30 +0000
ROA not before: Sun 07 Feb 2021 12:43:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 49.159.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4145 (0x1031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:43:30 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B6C2ACDC9B3CE2062B15DD45FD8B1068C710B0A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:58:29:68:2e:ee:1c:a9:8b:ce:73:cf:0f:
03:10:7c:01:67:4b:d6:54:8f:94:30:2b:ec:c4:e8:
bd:b0:1d:6a:57:2c:72:71:9d:7b:90:fd:4a:90:b4:
ed:e4:02:9d:d8:c0:5a:b0:d5:79:e9:17:56:9d:41:
35:57:c4:86:3f:f2:f6:85:15:81:1d:68:55:94:85:
a7:6b:50:a8:98:c8:9b:04:cb:87:6a:f3:06:37:ba:
55:95:53:17:1c:c4:d0:3d:67:94:77:0e:07:51:c3:
a8:55:62:3b:f8:15:7b:f3:ee:29:3a:ae:4f:cf:22:
e0:31:ee:87:19:2a:44:a9:9c:9d:f6:6e:40:2b:de:
d7:a2:83:41:02:f2:50:15:26:5d:ce:ea:64:f0:30:
46:9b:c8:82:3f:5b:50:f2:13:54:8a:a8:eb:b0:8a:
39:ee:04:ef:65:49:cd:31:30:53:0c:b2:e5:1d:2a:
a7:77:e7:43:b5:a1:52:b9:6a:27:58:e9:10:fe:c2:
52:f1:9c:bd:ad:c3:25:81:65:2f:df:aa:9d:a7:1a:
d1:94:e1:5d:0c:ef:41:fd:2a:cc:0a:ed:8b:23:3b:
fd:85:ce:90:41:07:6c:19:a6:92:7c:67:d7:db:c3:
e7:3d:b6:b3:7e:24:5b:20:5d:45:92:4a:98:cc:71:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C2:AC:DC:9B:3C:E2:06:2B:15:DD:45:FD:8B:10:68:C7:10:B0:A8
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tsKs3Js84gYrFd1F_YsQaMcQsKg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.184.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:6e:0d:de:cd:ea:0b:16:a7:7d:cc:0d:b2:70:e3:92:34:05:
1c:1f:d3:44:1e:0a:24:57:1c:97:19:86:ed:d8:93:e1:51:d4:
05:87:c0:38:44:ea:5d:70:12:53:53:dc:a4:24:ac:0a:37:72:
80:1a:a5:14:23:82:db:3d:9b:0a:80:57:68:65:10:05:50:02:
ad:5a:74:fb:e3:72:93:c1:24:9c:6d:57:00:40:b6:e2:e6:3b:
a1:85:0a:30:b2:e9:70:cb:35:8d:c5:5b:f6:95:1b:7f:1a:6d:
1b:29:26:96:4a:04:9d:5f:9f:99:3f:0d:c5:0a:60:c1:51:af:
33:f9:0d:0e:6e:0b:0f:2e:fd:d7:c4:43:bd:5b:ff:d4:22:e7:
6a:31:6e:ee:a2:c4:c4:0e:42:bf:df:64:ef:be:de:40:51:fb:
d3:39:70:08:25:54:39:57:d7:da:1d:94:35:f3:7c:92:4e:87:
64:c2:70:14:bd:18:1b:1f:8d:d8:df:73:da:d1:1d:c8:f2:16:
f7:9f:9f:ec:a1:95:00:09:24:bf:91:eb:b4:3b:85:e9:bc:54:
0b:c6:47:53:e0:b6:b2:61:21:f3:09:07:7d:92:10:2b:33:08:
27:aa:28:e0:60:22:85:23:69:ee:25:37:8a:db:ec:2b:a3:c2:
7e:cd:1c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org