Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CSKC7MdCye0WDV4ZLvtHWvJ405k.roa
File: CSKC7MdCye0WDV4ZLvtHWvJ405k.roa (raw, json)
Hash identifier: fVi1pM4zodZ/tfI/NO2RYb1dFGyJj3ijukrZLFPNWec=
Subject key identifier: 09:22:82:EC:C7:42:C9:ED:16:0D:5E:19:2E:FB:47:5A:F2:78:D3:99
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CSKC7MdCye0WDV4ZLvtHWvJ405k.roa
Signing time: Thu 15 Sep 2022 02:35:41 +0000
ROA not before: Thu 15 Sep 2022 02:35:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=092282ECC742C9ED160D5E192EFB475AF278D399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:ce:21:8f:f3:cb:be:c4:ee:7a:1e:4d:25:
fb:43:bd:c6:98:85:ff:60:83:1b:36:be:14:6f:87:
2a:6d:92:90:e6:ee:a6:cc:51:67:6e:c5:e7:2f:04:
87:a8:71:79:47:43:c3:d7:db:be:f1:d2:7a:a5:10:
34:f3:81:04:cb:89:e9:a6:c5:3a:3d:30:72:f1:51:
9e:68:ff:5a:21:80:e4:53:fa:09:0e:67:44:8b:6d:
96:ac:b8:29:3a:49:8c:35:83:4b:ef:dc:0d:87:4f:
fb:a8:5e:ca:5f:97:08:43:52:8a:1a:76:2b:d3:db:
5e:df:6b:e9:ad:70:7c:f7:5d:6c:2c:a2:25:0d:58:
9a:bf:29:5f:cc:d8:04:08:56:c8:04:e6:f2:f4:78:
79:4f:98:74:24:b0:03:63:11:8b:84:da:63:f1:4d:
95:56:d2:2a:fb:d0:02:08:a3:8d:1c:98:89:6a:12:
c5:41:60:3b:46:33:79:49:f5:44:16:c4:ef:40:7a:
67:18:bc:68:27:13:2a:7d:73:e0:cf:75:88:aa:48:
bf:9d:31:13:45:e2:e6:98:13:28:2e:93:4e:66:01:
c2:12:70:e0:09:c1:d9:74:21:04:fa:38:67:f3:ba:
e7:ba:bd:a4:b8:b8:8a:9d:bf:ee:5c:f7:bb:35:eb:
cd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:22:82:EC:C7:42:C9:ED:16:0D:5E:19:2E:FB:47:5A:F2:78:D3:99
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CSKC7MdCye0WDV4ZLvtHWvJ405k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:c5:cc:5f:12:ed:89:8e:7b:ee:9d:df:de:e7:9d:97:f5:ba:
09:98:24:e8:f9:97:1d:db:22:dc:cd:44:2b:3c:82:4a:a7:b4:
c0:2d:b0:39:78:ce:31:35:7c:05:82:fe:ce:96:96:6a:48:9a:
01:7d:70:8d:4f:e2:3d:e5:10:7a:22:87:d7:e9:a7:e8:2d:3a:
b5:43:1b:bb:bd:44:44:d8:28:71:74:91:c9:f5:35:39:30:e9:
3f:3f:ff:69:ce:07:27:62:94:48:d6:d5:6d:87:27:4f:99:09:
e7:26:7b:1c:0f:d5:b5:64:bb:f2:09:4b:0d:69:61:e2:9e:41:
c0:fa:3b:a9:b2:9c:b6:f7:ae:4c:36:03:c7:f6:86:85:f0:3a:
a2:b2:22:34:2a:a1:c1:70:9d:26:47:05:c7:20:51:f9:72:fb:
ea:f7:40:e0:40:e2:b6:10:59:1f:8c:0a:e6:94:31:68:47:17:
e2:98:e8:e3:a2:6c:bc:ec:54:3f:28:f7:8a:6f:55:d4:4a:ac:
fc:fb:96:7c:56:c8:37:27:98:a8:02:ff:7b:28:71:c4:84:1d:
13:10:c9:99:cd:d2:2b:fc:51:42:3f:bf:d1:12:5f:4c:a2:86:
a7:1b:3b:ee:71:1b:76:d5:fe:fb:4e:69:64:45:1f:a9:8c:3d:
c4:7f:18:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org