Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9kiSRNZpELarFV9ow6EEBC6dujk.roa
File: 9kiSRNZpELarFV9ow6EEBC6dujk.roa (raw, json)
Hash identifier: SKzjeeW2HlV3msgJdF1Cljfw0nv5yhwK8W+a+6V4O10=
Subject key identifier: F6:48:92:44:D6:69:10:B6:AB:15:5F:68:C3:A1:04:04:2E:9D:BA:39
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B64
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9kiSRNZpELarFV9ow6EEBC6dujk.roa
Signing time: Tue 29 Sep 2020 10:08:22 +0000
ROA not before: Tue 29 Sep 2020 10:08:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 49.158.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2916 (0xb64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:22 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F6489244D66910B6AB155F68C3A104042E9DBA39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:6e:00:23:b2:ae:5d:72:4a:6a:55:74:81:
35:a8:d8:87:5d:98:2b:32:2c:54:aa:69:90:21:d7:
49:3c:9b:9c:6c:c8:5e:8f:84:58:12:7d:8a:90:54:
c0:0a:45:34:f4:cf:9e:93:20:9f:5e:c6:e1:90:fe:
99:7e:3c:6a:4b:99:b7:43:8d:ab:01:09:95:b8:e0:
dd:dd:06:16:44:c9:bf:61:f9:6e:a1:63:aa:6a:88:
5f:ce:d7:3d:89:d5:54:c5:3d:c0:46:85:e9:c6:6a:
1d:05:b6:b9:53:6d:b8:7d:c6:fc:4d:10:23:60:c3:
73:0b:d6:ca:e1:13:18:78:74:73:e1:e4:a9:af:9f:
d9:40:71:db:b6:3a:aa:f8:9b:4a:2b:5a:f4:14:ba:
d4:63:30:e3:85:ee:f8:0e:33:02:df:b5:5f:a0:49:
52:11:91:d9:76:ac:c6:f7:8d:e0:22:6a:89:1f:86:
5e:06:b1:4c:8d:d5:5a:3d:f8:ed:c6:56:d7:6e:0f:
13:1c:ea:ed:a4:71:99:cd:9a:8f:61:b7:e8:fb:80:
a3:09:0a:3a:01:e9:7c:fb:d5:b7:4b:01:23:c1:d1:
76:a1:5f:19:c3:d1:f2:b2:44:35:10:71:8c:44:a8:
74:5f:be:fe:37:69:33:76:fa:7e:64:fd:9e:ec:07:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:48:92:44:D6:69:10:B6:AB:15:5F:68:C3:A1:04:04:2E:9D:BA:39
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/9kiSRNZpELarFV9ow6EEBC6dujk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.156.0/22
Signature Algorithm: sha256WithRSAEncryption
47:ea:49:78:b8:a2:4e:71:55:56:c6:9d:8f:b7:69:36:1c:02:
a4:1a:cc:35:e5:45:36:9a:ce:fc:2e:64:0a:64:ff:f4:d1:16:
d5:8d:4c:c1:fb:04:d1:4c:51:90:55:9b:5a:1d:f3:8b:74:e4:
e8:a0:15:92:4a:6a:f6:f5:39:3e:12:1a:47:6b:8c:31:32:26:
9d:aa:7e:2e:c2:3a:87:be:ba:57:c0:6b:54:72:a2:b3:f0:86:
5b:80:25:b3:af:ac:d8:c3:4e:4c:c9:f7:7f:58:07:bc:c3:a1:
0c:67:95:49:e4:34:7a:d1:c2:2d:b5:94:6b:dd:4a:3c:d4:31:
f6:d4:a0:01:f3:9b:55:7f:2c:f5:ee:b5:05:27:f8:1b:45:a0:
e6:05:2b:6b:a9:e3:2c:e8:8e:fb:da:00:7f:a4:2a:7a:80:8f:
d0:a2:e4:e3:85:7d:ab:7a:6f:f9:3b:88:0e:5f:9a:56:55:13:
4d:f2:fd:f8:61:be:a8:d9:fa:80:78:e9:16:e1:f0:ca:9f:78:
1c:0b:32:85:a7:90:ab:60:c7:96:9f:1a:1f:03:c0:a5:f4:d6:
36:db:8d:02:61:1a:97:3d:3b:0e:3b:fc:95:35:cc:4c:6e:26:
b4:eb:77:df:eb:a0:b1:9f:63:60:47:b0:6f:5d:32:9e:36:a7:
81:de:61:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org