Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2RBDdPQLj8-azXOBDB8xn9bRZaM.roa
File: 2RBDdPQLj8-azXOBDB8xn9bRZaM.roa (raw, json)
Hash identifier: k2KmiCWlT56Wj+euSTlIkmN+XH8XeW20r9MA87CsHOw=
Subject key identifier: D9:10:43:74:F4:0B:8F:CF:9A:CD:73:81:0C:1F:31:9F:D6:D1:65:A3
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2RBDdPQLj8-azXOBDB8xn9bRZaM.roa
Signing time: Thu 15 Sep 2022 02:35:15 +0000
ROA not before: Thu 15 Sep 2022 02:35:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.159.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D9104374F40B8FCF9ACD73810C1F319FD6D165A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:1c:3d:93:9c:76:c4:e6:c9:dc:0b:53:75:
1c:c4:d6:86:1a:4c:8a:76:49:a5:54:92:3a:c7:1f:
20:e5:38:3b:1a:2a:c5:0c:a3:26:be:91:02:25:21:
3f:75:b6:05:7d:28:c5:29:93:5d:ba:dd:c0:40:cd:
86:33:db:95:c2:0b:9e:29:98:14:80:2d:3b:97:16:
a2:ea:55:df:3b:9b:12:52:29:d2:fe:f6:1a:52:26:
00:80:fa:87:e9:60:53:6d:48:6d:6f:25:c5:20:f8:
49:56:4d:6c:e9:18:cf:3c:d3:97:2c:2b:43:4d:7c:
e2:74:37:8b:ca:52:c4:d5:fe:8e:a9:6e:d3:a9:c3:
73:fd:f8:2f:38:5b:bd:30:2d:cd:5b:36:25:9d:f4:
c1:ef:bf:9e:78:24:20:a4:a9:6e:2c:a0:f0:08:f4:
d7:5e:3f:30:12:78:91:ad:eb:ed:59:e2:74:bf:7e:
41:9b:d8:45:b3:5f:80:34:e7:cb:39:b8:18:d9:da:
f3:b0:af:c8:10:6c:e7:4a:cb:7e:6d:fe:44:58:a6:
c2:2b:be:42:b1:47:fb:1d:ca:52:f0:6d:48:d8:3a:
a7:91:c9:18:32:ff:b2:7b:e9:08:cf:94:b5:6b:13:
8e:ed:61:84:3e:90:a2:90:99:42:8b:db:51:7f:69:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:10:43:74:F4:0B:8F:CF:9A:CD:73:81:0C:1F:31:9F:D6:D1:65:A3
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/2RBDdPQLj8-azXOBDB8xn9bRZaM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.176.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:6d:3e:a1:44:5f:32:2c:66:5b:92:2d:9e:ae:d7:16:ef:47:
1b:bc:f1:f0:29:42:32:39:b4:05:d6:8e:59:cf:b2:60:61:09:
72:45:71:34:aa:d7:09:a5:8d:43:e4:7a:ae:a9:bb:eb:70:04:
ca:10:57:e7:27:d2:2a:76:be:f7:39:6c:96:6d:3c:36:84:df:
88:02:63:11:b8:b6:f8:18:f6:3b:30:e3:bb:88:8d:b3:8a:4e:
ab:28:44:c6:e5:4d:e8:d2:a3:dc:f9:71:61:7e:ab:15:0f:8b:
27:15:86:f0:db:70:c8:ba:a3:1f:dc:76:51:40:3b:13:ba:e2:
71:a8:bb:e8:7f:be:2b:66:7f:d8:d3:dc:e1:44:fc:74:b7:53:
1e:c7:4d:b8:31:1a:8b:40:3d:99:93:36:92:a9:7d:49:98:d0:
2d:32:5a:3f:10:eb:23:ce:35:ca:de:bf:29:60:d7:ae:95:c1:
9c:3e:17:57:f8:d5:c6:8f:a9:fa:05:8a:75:ab:03:2b:de:28:
ff:b2:30:1c:35:4a:ce:03:ef:17:37:d9:6c:0d:8e:77:ba:54:
2d:d9:64:98:ae:66:94:95:8b:3d:03:02:2b:7d:da:af:63:0a:
b6:6e:00:69:74:8f:d5:dd:28:e4:9d:49:38:45:46:bc:7c:76:
24:9e:9f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:53:39 2025 by rpki-client