Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B9KWvx0JzfdyeosaqQORgO_IWPA.roa
File: B9KWvx0JzfdyeosaqQORgO_IWPA.roa (raw, json)
Hash identifier: FljQMk1u2ObbiXna9pJVvM09K3SsMe+j41SuxCbnh7A=
Subject key identifier: 07:D2:96:BF:1D:09:CD:F7:72:7A:8B:1A:A9:03:91:80:EF:C8:58:F0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1289
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B9KWvx0JzfdyeosaqQORgO_IWPA.roa
Signing time: Wed 29 Sep 2021 02:54:41 +0000
ROA not before: Wed 29 Sep 2021 02:54:41 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4745 (0x1289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:41 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=07D296BF1D09CDF7727A8B1AA9039180EFC858F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:c9:4e:6a:54:b3:18:be:28:52:bf:6b:f6:
f3:52:4c:10:91:a5:55:65:5b:17:c7:52:91:23:93:
ec:e0:9f:be:aa:97:f1:2e:f4:e1:74:51:7a:d0:a8:
0d:bb:dc:23:59:76:d4:4e:35:63:30:b8:99:27:26:
d2:22:4b:f2:37:f2:09:cb:fc:af:2f:21:5f:ca:78:
66:d3:df:8f:7d:d5:c2:e1:93:01:9b:5a:aa:6b:80:
b3:c8:28:27:77:04:99:d5:4d:dc:1d:0d:08:84:a2:
87:9b:c5:d4:d9:49:7e:a0:75:0e:b7:c7:9f:14:6a:
65:60:d5:5f:c5:b7:ec:5a:80:77:8b:17:32:55:5b:
de:1b:20:c4:b0:65:33:57:b5:d5:12:c0:ab:0a:81:
a5:be:f8:92:8a:20:cd:50:e2:78:0e:6e:72:87:9f:
80:99:6f:f1:1b:8e:4a:9a:0c:13:f6:83:0d:a4:a9:
f7:40:8a:f6:01:09:e7:7f:f3:b7:fb:bb:c9:3d:e4:
a3:26:0e:93:ad:81:27:53:87:10:67:35:27:3b:f7:
d5:c7:02:f9:3d:9b:b3:9c:8a:cf:26:12:a3:7a:1c:
24:ce:b3:2a:13:e1:9c:4e:70:5f:27:01:44:17:fc:
a5:22:b8:10:37:11:8e:b7:36:16:3e:4b:5a:69:24:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D2:96:BF:1D:09:CD:F7:72:7A:8B:1A:A9:03:91:80:EF:C8:58:F0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/B9KWvx0JzfdyeosaqQORgO_IWPA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.236.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:71:10:bb:4b:fe:d2:34:03:a0:b0:3a:ba:61:ec:0c:40:29:
25:51:1c:7f:45:d4:95:1e:01:19:c3:26:5c:7c:f6:d1:7b:ca:
18:2b:82:f1:2d:8c:a3:b4:2b:a2:42:7d:30:79:fa:ef:37:32:
06:17:71:a3:a2:56:5d:20:a6:da:60:aa:eb:28:ab:16:d5:e4:
30:8b:1b:98:0a:6b:d7:bd:32:c2:1f:48:79:0d:fb:3a:62:25:
76:9e:01:8c:0f:48:a7:d5:e4:a6:44:a6:d1:1b:42:db:27:62:
91:6a:04:27:de:78:c8:ef:24:b3:7c:5b:88:32:25:cc:de:26:
e5:66:39:c0:5f:67:09:7f:8b:20:c9:76:bf:5f:09:c2:3a:eb:
63:9d:bc:0a:2c:15:25:95:f6:53:b1:37:50:b6:9f:3c:40:e8:
6f:36:ab:37:c1:a9:9f:58:3a:67:89:45:0e:4c:66:4b:e5:6a:
b9:66:91:de:da:38:d6:10:f7:85:b8:cb:10:c2:d5:a9:6f:90:
12:d7:ed:6b:5a:00:40:4a:3a:e6:4a:b0:90:8c:15:0f:18:58:
77:23:5e:13:6d:4b:0b:59:86:40:e7:c3:a3:93:77:42:5b:34:
e4:3c:22:03:22:58:c3:7b:e7:60:5e:9c:ba:13:ef:86:27:45:
3c:04:4b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org