Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0N0Z97lo2Uxu4OQe31mlYF4Wors.roa
File: 0N0Z97lo2Uxu4OQe31mlYF4Wors.roa (raw, json)
Hash identifier: BRLz2sMoBOBxKjHNqs7ssNr8HjoRgXTziGMB5Wz50sw=
Subject key identifier: D0:DD:19:F7:B9:68:D9:4C:6E:E0:E4:1E:DF:59:A5:60:5E:16:A2:BB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1DCD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0N0Z97lo2Uxu4OQe31mlYF4Wors.roa
Signing time: Fri 01 Sep 2023 10:15:19 +0000
ROA not before: Fri 01 Sep 2023 10:15:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24163
IP address blocks: 49.158.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7629 (0x1dcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D0DD19F7B968D94C6EE0E41EDF59A5605E16A2BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a5:18:43:06:ae:59:70:c5:1d:48:2a:ac:2d:
0e:eb:30:68:1b:99:1e:01:a2:a0:c2:4d:b3:e1:14:
1d:2e:73:46:bd:a3:05:d7:24:0e:2d:0c:15:43:dc:
15:3d:3c:b3:be:49:f3:ec:37:74:45:51:15:dc:3d:
22:9a:72:1a:f4:dd:cf:3f:64:ce:23:60:9f:fb:08:
d3:05:3e:b2:4e:2c:22:f2:d3:ec:74:b1:03:d4:cf:
28:c6:60:2c:c1:5a:1c:34:ac:85:05:d9:24:c1:85:
d8:4c:56:df:07:f7:7c:3a:2b:3d:17:df:e2:29:ec:
c9:12:e7:eb:4a:c4:d0:c6:d5:94:00:7a:ec:09:dc:
fe:7f:a5:55:be:8b:6c:b0:83:b3:ce:d9:02:3a:9a:
56:90:f5:d4:e2:7e:c0:5c:c0:39:64:b0:ba:03:ca:
25:42:3e:ca:de:1c:f6:43:9f:c4:72:c2:f5:44:2e:
12:d8:5e:6c:9e:66:67:1a:a0:b8:d8:f0:cc:f1:5c:
7c:dd:bd:db:9f:ef:5d:41:37:f1:2f:29:0f:93:05:
9d:49:5e:9c:ba:3c:8b:86:ba:dc:cb:0d:86:5b:f1:
97:b3:30:c8:fc:1a:29:a5:0c:4e:2a:2b:88:56:61:
d8:6c:fa:b5:43:0d:c1:58:07:54:ae:ed:3f:d5:af:
da:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DD:19:F7:B9:68:D9:4C:6E:E0:E4:1E:DF:59:A5:60:5E:16:A2:BB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/0N0Z97lo2Uxu4OQe31mlYF4Wors.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.148.0/22
Signature Algorithm: sha256WithRSAEncryption
45:be:0c:54:fb:cb:47:83:b0:ca:e8:43:6c:48:83:3a:b4:af:
4d:97:0b:b2:9e:27:f5:94:fd:74:85:e5:2f:3b:1f:96:a2:ee:
d7:e7:55:6e:a8:27:35:1a:3a:b8:e0:6b:7a:b1:0d:8e:fb:48:
f6:40:c2:ea:85:92:35:94:58:81:a5:8f:9e:3d:38:e8:d4:cd:
76:de:16:c5:46:66:00:c1:9d:0b:91:ba:61:a7:d6:b7:c0:c1:
2c:2c:a0:e6:d3:80:1f:8f:f4:d0:54:f7:df:47:05:13:3e:ee:
ba:d4:51:4c:17:ec:92:4a:fe:25:11:16:21:46:dc:e8:ca:76:
64:47:54:15:c1:1b:60:be:16:62:e0:ae:d5:b3:c6:30:f2:68:
b2:df:04:74:3b:9b:fe:b9:0a:c7:68:19:6b:bf:14:fb:75:49:
57:37:ab:1e:6f:91:46:02:78:e6:e6:cd:3c:7b:3c:6b:a3:9b:
60:db:c0:d6:6f:8c:65:5a:23:c0:ce:3e:95:67:22:e9:a7:10:
0c:46:45:7a:9d:6c:44:d0:3b:c7:bb:33:77:19:17:2a:f3:b9:
d6:93:64:10:cd:94:6e:fe:46:1d:2a:c6:6d:89:59:19:c0:f0:
9a:ea:fb:5e:8e:b4:bd:25:60:bc:44:7f:5f:2d:30:1d:e5:78:
ef:0c:8e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:03 2025 by rpki-client