Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4-oaCddtbuwj1GiBVJJMlQ065s0.roa
File: 4-oaCddtbuwj1GiBVJJMlQ065s0.roa (raw, json)
Hash identifier: MHMjKCoFTydnx6J5frF3kDJcJMJF/4QJK+Ze1XgZNvU=
Subject key identifier: E3:EA:1A:09:D7:6D:6E:EC:23:D4:68:81:54:92:4C:95:0D:3A:E6:CD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 198B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4-oaCddtbuwj1GiBVJJMlQ065s0.roa
Signing time: Sat 22 Oct 2022 06:06:39 +0000
ROA not before: Sat 22 Oct 2022 06:06:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6539 (0x198b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E3EA1A09D76D6EEC23D4688154924C950D3AE6CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:4f:ca:a4:82:15:02:ac:2f:2b:6d:4b:49:
7f:38:27:e6:88:87:2c:9a:a0:65:ce:2a:38:fa:ef:
26:f5:f4:7f:8b:29:5d:2d:0c:b5:62:2f:e4:95:00:
45:0b:df:63:e9:81:33:65:32:28:b7:02:8a:18:07:
f7:da:b7:09:49:d6:6e:af:58:6f:ca:aa:2b:92:91:
38:66:78:3d:f9:21:b8:62:08:8c:79:e0:be:c1:24:
bf:15:ea:37:e0:6f:60:59:e4:45:d5:7c:1b:71:d1:
38:e7:19:2b:4a:30:a0:02:fd:1f:4e:ab:c0:6f:b5:
ec:db:41:a6:26:bd:cd:7d:76:39:a3:a3:db:72:b5:
0c:c0:90:7a:3b:a2:e4:6d:5e:03:e5:12:67:c4:ac:
30:ad:72:e2:1a:25:08:d3:9d:3b:32:01:99:59:06:
71:c1:e0:20:e3:40:a3:1c:fd:2e:92:10:d0:1a:30:
da:27:5d:92:12:54:ac:5c:d8:cc:7e:08:6a:ac:dc:
ba:ce:46:84:26:f6:45:ce:44:55:e5:03:73:2e:46:
b7:eb:a4:62:36:5f:f5:d4:c2:28:3b:56:97:ea:0d:
78:6f:02:61:dc:13:b1:08:47:cc:bd:0e:19:c3:0b:
07:04:ef:c9:21:69:2b:c0:b9:18:7a:c0:67:27:b8:
0e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EA:1A:09:D7:6D:6E:EC:23:D4:68:81:54:92:4C:95:0D:3A:E6:CD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4-oaCddtbuwj1GiBVJJMlQ065s0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:62:74:d8:4f:e6:01:14:06:0c:45:93:6f:b0:51:36:ee:5c:
5a:8a:e8:c5:38:fc:ab:9a:94:88:3f:52:8c:ba:f2:7e:87:7d:
05:20:02:32:c7:7e:54:ff:a0:e5:3e:c2:52:c0:b7:d6:29:6a:
2e:07:11:3c:6f:f6:de:1c:69:3f:49:c3:72:eb:ce:7c:29:fb:
f8:4c:66:32:37:e2:b3:ca:38:31:30:d4:5b:06:13:6d:f7:4a:
2c:c2:07:a3:c2:fb:b1:ed:0d:d1:84:b8:36:7b:58:43:93:ce:
e6:87:be:5f:8d:6d:05:c7:f1:95:81:13:33:f5:03:bd:40:28:
4d:63:28:d7:d9:d6:74:bb:3d:20:72:26:5d:ef:52:d8:7f:0c:
03:b7:66:e9:96:48:58:90:b9:90:2f:41:ce:7f:8b:1c:67:4f:
d4:63:a1:8f:04:85:f0:d7:8d:12:96:08:df:1e:9c:a7:ea:0a:
58:65:09:ed:8e:dd:00:4b:20:b5:41:b9:fa:05:24:24:e0:56:
ee:8b:9b:d9:7c:f0:21:31:22:4e:6e:b7:b0:68:19:91:39:dc:
68:18:73:4c:f4:91:ab:c8:eb:93:78:64:44:4c:c8:eb:33:23:
70:ac:36:be:56:25:b5:a3:e4:d8:82:d5:7d:bb:b6:d2:8b:cd:
51:12:d3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org