Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G4J5LOC5g_n8aRIoBpbJCf0DMP4.roa
File: G4J5LOC5g_n8aRIoBpbJCf0DMP4.roa (raw, json)
Hash identifier: /MX1rvDi91BezbhMKwAMIs7IK5kWShM8U7WiGpZOGII=
Subject key identifier: 1B:82:79:2C:E0:B9:83:F9:FC:69:12:28:06:96:C9:09:FD:03:30:FE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FA5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G4J5LOC5g_n8aRIoBpbJCf0DMP4.roa
Signing time: Sun 07 Feb 2021 12:35:22 +0000
ROA not before: Sun 07 Feb 2021 12:35:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4005 (0xfa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:35:22 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1B82792CE0B983F9FC6912280696C909FD0330FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:d7:20:21:b1:5e:51:b9:4f:9e:87:85:ab:
a7:52:be:b0:a0:8e:49:a9:a0:d5:d7:4a:4d:49:24:
82:52:67:98:e3:b6:66:52:0e:1d:30:81:34:9f:d2:
f3:bb:34:71:9b:ad:fb:71:72:83:54:be:16:a6:26:
b1:cb:7d:b3:b5:23:39:b4:af:2b:d3:5f:fa:24:e8:
87:24:75:3e:78:aa:fe:c8:89:4e:71:9a:a7:b1:56:
c8:be:12:48:da:ae:51:6a:4a:47:7a:ba:81:b8:1a:
cd:b6:db:99:e7:8f:7c:61:a6:e0:f2:fc:20:ae:08:
18:4e:e3:7e:93:3a:43:31:26:12:fc:6b:d2:52:19:
d6:de:01:ea:38:a2:6d:10:22:40:08:be:b0:34:d2:
35:84:30:1c:13:90:ce:1d:60:8c:43:a8:44:f0:90:
4c:48:f0:3e:81:3e:b9:df:e4:77:32:4b:0b:53:e0:
b9:5f:dc:68:c3:20:35:30:a1:30:9a:e8:8a:cc:f8:
a5:03:d2:6c:20:66:ee:01:96:20:de:ca:9f:a5:ad:
a5:30:6c:50:88:ac:74:21:1e:82:fd:7d:ea:7c:00:
f2:29:c3:0e:84:35:57:a6:be:c7:7c:d3:3d:da:c4:
9b:3d:74:95:d0:56:04:af:1c:2c:6e:f9:d5:34:4a:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:82:79:2C:E0:B9:83:F9:FC:69:12:28:06:96:C9:09:FD:03:30:FE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/G4J5LOC5g_n8aRIoBpbJCf0DMP4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.124.0/22
Signature Algorithm: sha256WithRSAEncryption
32:9b:a8:3b:02:b0:89:9c:d4:f9:39:fd:62:36:fd:84:1b:61:
3f:84:72:ad:59:4d:67:65:34:81:f4:f6:2c:3c:db:24:c1:d5:
d9:a8:1e:24:9b:5b:e3:34:eb:90:b3:c4:7e:bf:00:68:e5:d2:
86:e1:35:3a:71:85:17:5a:0d:01:2e:04:66:34:7f:3a:ed:be:
6a:f1:5b:a8:1f:8d:a9:d3:a7:d5:49:04:6e:1e:14:00:c7:e5:
fb:a4:c0:e1:0f:6d:77:bf:e6:aa:c0:f8:fd:d9:44:56:8f:b0:
68:26:4e:36:22:1e:09:2b:6a:06:03:9c:52:a8:99:7f:91:9d:
e6:69:1a:0e:2c:3d:70:13:98:ae:ee:9d:94:b1:5d:19:1c:5e:
9d:4d:2e:32:2a:52:00:ac:69:56:5a:d1:35:8a:b2:86:1e:1a:
61:2d:3d:a9:e9:cd:51:ad:06:02:c8:9e:03:c5:bb:c1:dc:34:
70:66:5a:56:1f:ee:ad:fb:07:68:3c:3c:55:9b:36:99:50:c9:
86:54:cd:cd:2e:04:d4:1a:14:bb:b5:94:ca:ac:05:f3:c9:30:
b0:10:e7:91:78:41:ce:81:34:d0:88:21:45:be:2f:dc:f1:48:
67:1e:88:28:58:7e:44:5b:f5:25:41:9b:1a:33:fe:1c:76:aa:
f5:9d:fc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:46 2023 by rpki-client on console-fra.rpki-client.org