Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-hU8Fwqy7Ra9FCAkX8GuKSVzScc.roa
File: -hU8Fwqy7Ra9FCAkX8GuKSVzScc.roa (raw, json)
Hash identifier: yaXo20ogYG3x5M/5KHs26cYAIlYlnyPNpRzmCjNtqKc=
Subject key identifier: FA:15:3C:17:0A:B2:ED:16:BD:14:20:24:5F:C1:AE:29:25:73:49:C7
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1B13
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-hU8Fwqy7Ra9FCAkX8GuKSVzScc.roa
Signing time: Thu 02 Feb 2023 06:49:40 +0000
ROA not before: Thu 02 Feb 2023 06:49:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.0.0/15 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6931 (0x1b13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 2 06:49:40 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FA153C170AB2ED16BD1420245FC1AE29257349C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:ec:b9:14:a8:94:91:03:fa:bc:8a:63:27:
33:91:23:39:01:ae:98:58:7e:9e:8a:83:2e:30:4d:
94:21:86:1b:b7:53:74:06:34:22:3e:58:26:1f:64:
78:aa:df:ab:f0:1a:88:e9:af:85:f3:75:70:aa:f0:
35:42:38:52:a2:bb:60:d3:77:fb:94:ae:6c:d0:81:
5f:38:68:d2:08:f7:d8:8b:ca:04:a9:3a:0f:35:86:
c8:41:f1:7f:f7:35:5b:f4:67:48:ab:4b:0f:bc:12:
20:f9:8b:00:f9:04:b4:4b:e7:0d:e1:96:d4:e5:89:
c4:ce:7b:56:79:67:f8:7a:3e:05:d7:e3:af:8d:88:
b3:c8:05:87:d5:b0:53:a7:1f:06:2c:d7:87:19:00:
d6:7d:a2:a5:e9:14:b0:c2:a4:af:8c:2f:73:c0:08:
29:21:2e:4c:97:b6:b9:87:1a:50:84:93:8c:e8:67:
82:24:28:cc:2b:21:41:ed:be:00:49:17:79:c2:f7:
f3:56:ad:9c:26:5c:73:49:6e:47:ef:89:54:f1:f4:
66:41:76:77:27:84:67:c3:34:74:a5:a6:e4:e6:8d:
0c:23:63:a4:84:d0:aa:62:11:99:11:c3:b5:bc:e9:
25:4b:0b:5e:dc:c3:87:87:6f:37:0e:29:e1:63:b7:
9b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:15:3C:17:0A:B2:ED:16:BD:14:20:24:5F:C1:AE:29:25:73:49:C7
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-hU8Fwqy7Ra9FCAkX8GuKSVzScc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/15
Signature Algorithm: sha256WithRSAEncryption
38:cb:eb:7b:b7:4d:08:97:a5:17:ea:60:11:8f:37:19:6e:69:
c8:83:c3:73:76:42:1e:84:e1:bd:cb:5f:8f:7b:11:36:ce:15:
96:80:db:b8:3d:a7:fd:6c:65:d5:d9:62:2d:13:66:82:43:5a:
48:f7:06:42:aa:ed:cd:9e:0d:0f:9a:53:2b:98:87:f9:d3:26:
1e:7f:59:7a:3a:c6:5a:69:f5:10:12:a6:0b:09:e6:48:a4:05:
92:ed:dc:dc:27:cd:a0:e4:97:71:8c:8c:82:1b:e7:aa:2e:1b:
4c:5f:d3:1e:a2:f2:fb:a7:1c:f4:37:47:b5:f8:dc:fc:4c:0b:
e9:d3:07:86:9c:be:ff:fe:95:a0:fe:c1:5c:c9:de:16:40:ca:
3f:46:79:a9:2d:1c:b5:05:8e:ba:50:b0:1f:a1:38:08:22:b6:
70:6a:b1:be:2c:4c:e2:bf:2d:8b:cc:35:38:dd:aa:cb:59:da:
f1:af:f7:d6:a2:10:6f:9f:c9:ec:53:0b:2d:1e:d5:d5:c3:48:
6e:fe:0e:00:93:49:46:02:48:a9:38:a2:fe:6b:19:da:44:19:
62:74:12:79:6c:7a:af:dd:de:ef:f3:56:30:8c:d5:55:1f:3a:
24:8c:e3:2e:ab:fd:25:2d:e8:3f:fb:07:b9:ce:4b:0d:dc:d6:
81:46:7c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:54:07 2025 by rpki-client