Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GYcfcqCvc1USQ6cJMATqw3XBfLY.roa
File: GYcfcqCvc1USQ6cJMATqw3XBfLY.roa (raw, json)
Hash identifier: 6G05pjugFHAhsDZ9mYeXpZaiIeiToyO646AWDvMQHk0=
Subject key identifier: 19:87:1F:72:A0:AF:73:55:12:43:A7:09:30:04:EA:C3:75:C1:7C:B6
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 19A1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GYcfcqCvc1USQ6cJMATqw3XBfLY.roa
Signing time: Sat 22 Oct 2022 06:06:45 +0000
ROA not before: Sat 22 Oct 2022 06:06:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6561 (0x19a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=19871F72A0AF73551243A7093004EAC375C17CB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:07:ea:b5:a3:7b:ff:ad:c4:24:86:f3:04:
7e:f9:41:e8:01:a6:94:08:18:7b:c0:12:41:05:d4:
e6:9d:ef:48:49:c1:ae:b7:92:b0:50:95:6a:4f:29:
ba:71:25:4a:b3:74:ed:15:ca:67:eb:f4:c0:18:f3:
cc:09:83:dc:dd:d7:f5:fa:23:56:de:26:0c:cd:09:
cd:55:70:4d:2d:8d:93:f1:66:8a:44:31:1e:8f:a1:
a1:3d:f0:9d:00:c8:0f:cd:71:53:61:cc:bf:9d:7e:
b5:05:8a:76:0d:40:ad:c0:e4:dc:d7:1b:c7:ba:d4:
31:2b:3d:13:3c:93:e7:b5:9f:16:f9:35:83:d6:61:
74:8f:37:e5:e0:af:47:44:12:23:a5:d0:65:b0:db:
44:18:db:92:b3:a3:2c:7e:9a:a6:cb:60:87:c0:58:
6f:13:6b:15:28:a7:4b:0d:5e:e3:9a:24:a8:57:32:
aa:fe:ba:59:9a:9b:03:ac:bb:46:4b:9b:97:69:0e:
86:8e:9d:f5:40:2e:52:89:18:2d:3f:01:38:e4:c1:
59:63:c1:dd:8f:5d:ef:f3:36:7a:86:89:d4:f9:c4:
2f:9d:a3:86:e2:c6:d5:55:b4:9c:ee:3b:64:f3:92:
31:0b:18:b5:17:5e:8d:3b:5c:64:e3:b3:9f:9f:71:
a6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:87:1F:72:A0:AF:73:55:12:43:A7:09:30:04:EA:C3:75:C1:7C:B6
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/GYcfcqCvc1USQ6cJMATqw3XBfLY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.216.0/22
Signature Algorithm: sha256WithRSAEncryption
84:9c:1b:98:75:a8:7a:bd:27:54:07:99:0d:89:b2:d6:11:7a:
5f:dc:9d:f6:b3:01:17:0d:15:f7:eb:98:2a:18:6a:fb:a1:76:
97:70:15:aa:d2:c6:0e:e6:2e:54:99:c9:52:e9:62:d7:a9:16:
1f:d9:6d:3f:bf:7b:6c:84:17:9f:50:12:ea:73:6b:dd:ce:9a:
d2:20:a2:6e:01:4c:10:ac:6f:7d:fb:73:89:d9:38:01:97:0f:
50:f1:2b:53:e2:3b:33:46:dc:50:57:77:a2:49:59:d4:73:22:
7d:be:ce:76:97:a3:95:e6:e2:78:79:c9:4e:b8:a8:b3:28:8d:
6d:79:79:6a:ae:59:ed:eb:18:ac:8f:41:ca:0e:92:7e:2a:32:
5d:bc:a9:05:c7:13:be:04:97:fd:0e:6b:36:b3:d6:36:00:d0:
7e:af:3d:1f:cb:4d:a8:98:aa:0f:d0:81:38:c9:c1:1c:fe:16:
54:43:22:c3:07:94:39:dd:30:bc:0c:a0:fc:4a:d1:45:f5:88:
a9:cb:08:86:02:81:5a:63:53:b6:dd:f3:d1:3a:f4:44:53:80:
21:c2:df:fc:36:ac:af:28:2f:39:17:71:6a:ea:92:2d:cb:93:
1c:e3:e8:aa:15:f2:0c:a7:e7:12:6d:a1:a0:2c:4b:42:1c:9b:
b2:cc:5d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:08:05 2025 by rpki-client