Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GUZ56cfaTDTyMz8G8a9dDs7UNnE.roa
File: GUZ56cfaTDTyMz8G8a9dDs7UNnE.roa (raw, json)
Hash identifier: h5SLB4jLrwTK0FRG13aYbfmluUUC8gorHlappxkj9zE=
Subject key identifier: 19:46:79:E9:C7:DA:4C:34:F2:33:3F:06:F1:AF:5D:0E:CE:D4:36:71
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GUZ56cfaTDTyMz8G8a9dDs7UNnE.roa
Signing time: Thu 15 Sep 2022 02:35:40 +0000
ROA not before: Thu 15 Sep 2022 02:35:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=194679E9C7DA4C34F2333F06F1AF5D0ECED43671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c5:0e:c2:42:ad:70:e1:18:d6:be:c4:42:3b:
92:0c:19:8d:94:c6:87:62:1b:bc:7c:97:c8:9c:52:
96:fe:ae:11:75:84:51:7b:32:92:ea:79:48:66:5e:
9e:11:83:bf:e2:42:3e:10:a0:a3:69:f8:df:92:31:
66:6f:0d:f7:cf:c0:4d:a8:69:45:23:8d:90:0d:a9:
0e:84:1a:5f:43:46:b7:cd:e3:8c:e9:16:f6:8f:91:
37:61:44:9f:1f:08:8e:3f:6e:10:39:6a:81:00:76:
01:9c:9c:67:56:13:87:96:5a:20:13:95:da:95:b9:
b5:40:de:7a:b4:60:47:08:fe:e7:93:25:31:5d:d7:
fd:4c:20:4d:ce:92:cc:a7:1d:39:04:7c:4f:1f:38:
51:af:b9:f8:ba:94:ea:ff:cc:cf:f9:82:84:64:18:
1c:ba:42:a0:7b:f5:26:3c:69:c8:24:dc:61:77:02:
99:b9:46:51:73:e0:57:c2:3d:bd:53:cc:a6:53:56:
56:2d:8f:6f:0f:47:2e:e7:04:f6:0c:68:21:4c:c0:
09:e3:28:1a:33:05:fa:bf:f0:4d:76:25:c9:af:07:
d5:fd:cd:b6:fa:0a:b9:ba:70:c1:37:77:2c:f2:2a:
3d:05:bc:31:44:fc:ee:65:e4:69:dc:f0:95:a3:18:
25:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:46:79:E9:C7:DA:4C:34:F2:33:3F:06:F1:AF:5D:0E:CE:D4:36:71
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GUZ56cfaTDTyMz8G8a9dDs7UNnE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.72.0/21
Signature Algorithm: sha256WithRSAEncryption
73:83:e4:f9:cb:dc:16:ec:16:b4:6a:8a:09:38:f3:ce:f7:da:
17:94:8a:3e:c3:bc:9d:a2:fd:0a:ab:25:73:f0:54:2f:35:7f:
58:7d:cb:6b:f6:7c:d3:cb:0e:12:17:98:2b:8c:9b:78:6e:06:
bb:cd:41:f7:f1:af:c6:ba:08:56:08:7d:65:bd:d4:b5:96:1c:
da:11:1a:b9:c4:a2:c5:98:7f:e6:f9:29:ae:33:84:51:f8:93:
51:51:cd:17:46:4f:b9:df:91:c0:bf:2a:39:5e:99:74:c8:9d:
61:21:f2:93:f1:c6:47:a8:51:68:a0:34:3e:74:10:91:7f:b7:
f7:53:e7:19:ee:2f:3c:ab:1b:f4:fc:51:9e:40:2d:32:72:8e:
d8:a8:d1:02:1b:a3:ed:52:0a:e0:6b:5f:60:f4:aa:60:01:3f:
11:42:a4:56:bc:26:02:3c:0a:05:63:2d:4d:69:6f:05:60:f7:
67:7d:db:53:e8:37:f0:cc:ae:86:b4:22:4b:ff:96:3d:2f:58:
94:3d:04:9a:8f:ca:1f:d7:53:90:87:88:f4:2b:b2:f9:6b:b7:
87:88:5f:6b:ec:70:67:61:99:c5:da:6b:4e:8d:6d:01:e3:80:
e3:7a:6c:20:48:dd:d3:03:85:42:92:03:0e:42:6d:8c:1e:93:
3e:68:60:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org