Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xJCRmuN0L6XViSRgeym0HEsdt1M.roa
File: xJCRmuN0L6XViSRgeym0HEsdt1M.roa (raw, json)
Hash identifier: Z8vn1DTDJt/p5WY4B5Nzdk9hloPjAXV4cXtqWnZ61c0=
Subject key identifier: C4:90:91:9A:E3:74:2F:A5:D5:89:24:60:7B:29:B4:1C:4B:1D:B7:53
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0ADD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xJCRmuN0L6XViSRgeym0HEsdt1M.roa
Signing time: Tue 29 Sep 2020 10:07:43 +0000
ROA not before: Tue 29 Sep 2020 10:07:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 49.159.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2781 (0xadd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C490919AE3742FA5D58924607B29B41C4B1DB753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:9d:ff:7b:28:29:7d:cb:18:59:fa:65:74:
e6:0d:fe:ab:39:f1:e1:20:83:80:e4:cf:c6:7c:11:
cb:35:36:0b:a6:d3:e6:91:9d:2e:0b:27:07:13:02:
b9:d1:34:1f:9b:4f:fa:6d:cb:0c:b9:e2:96:0c:a4:
4e:d7:4c:58:98:f2:fc:be:fc:3c:9f:21:7e:03:23:
53:b6:8d:c8:4d:42:1b:fc:17:f1:63:f7:11:6f:f9:
cc:89:e6:b1:f2:6c:ff:02:24:3c:f4:f1:4b:ac:50:
77:1a:9f:14:c4:73:59:65:87:80:48:d3:e9:fa:2a:
c5:ea:db:78:24:f2:9b:e5:83:e3:ec:b0:c4:7a:50:
7c:41:e7:c9:ce:78:08:ce:11:d4:88:7e:50:99:f2:
71:65:23:b0:04:41:a8:71:5f:c2:8e:20:ac:1f:e8:
0b:75:45:01:36:b5:7f:55:f3:77:98:24:17:99:99:
4d:32:a7:be:37:92:7a:c5:ac:65:07:e8:99:b8:30:
65:3b:41:69:d6:43:23:32:3b:32:96:26:f0:77:f8:
3b:c3:ca:86:6e:59:b8:ac:c9:ee:54:64:9b:2c:5f:
2b:c9:42:5b:3a:38:b1:a4:e1:74:22:c8:09:43:b1:
5d:e0:4e:3a:61:2f:f7:09:78:24:a0:b1:e1:fa:2f:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:90:91:9A:E3:74:2F:A5:D5:89:24:60:7B:29:B4:1C:4B:1D:B7:53
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xJCRmuN0L6XViSRgeym0HEsdt1M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.180.0/22
Signature Algorithm: sha256WithRSAEncryption
92:da:14:0b:99:80:e2:a6:d4:2a:e8:ee:f6:22:5d:a6:f4:b0:
ce:34:62:66:fd:3c:a9:7a:13:c6:e4:5a:3a:63:fb:78:7f:31:
80:cb:ba:5c:5e:bc:73:70:51:7b:c5:04:ad:e7:10:16:e0:35:
c4:cc:4c:65:08:6a:52:1b:b0:5e:0d:ec:f0:a1:f8:c5:a6:34:
5c:bf:16:c7:8e:b8:0a:60:bd:c2:2e:32:a9:e2:18:5a:9f:cf:
a0:ff:ea:84:2c:eb:92:52:32:b5:10:10:47:50:cc:b3:38:f2:
ce:91:07:81:02:d0:b5:de:1b:40:a7:ed:ac:c9:2e:2c:39:5b:
5a:01:07:b8:2f:7e:77:a5:a2:ac:c2:a4:ef:c8:ed:d9:7e:e2:
fd:0b:2b:ce:e4:9f:4a:71:33:b8:08:3c:ae:3b:36:db:2c:76:
9e:1b:c4:10:c7:f8:ee:c3:21:0d:9e:7c:8f:ea:3e:fe:63:ae:
4e:b1:51:92:69:69:86:82:71:9b:a4:c8:33:af:8e:61:59:d9:
1f:93:1e:92:5b:0e:ce:e8:b8:7f:8c:a5:a0:41:82:66:de:92:
73:cd:5e:28:bd:ab:15:95:00:5a:f4:12:3d:bc:40:64:82:9d:
90:0d:ff:32:00:38:2b:67:c6:40:65:e6:ca:4b:fb:a1:74:49:
83:c0:31:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org