Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IVWbyAh_IMgLPLuIGtWcxmwTtdE.roa
File: IVWbyAh_IMgLPLuIGtWcxmwTtdE.roa (raw, json)
Hash identifier: +Z2INl0hDNZ+XefW6omqh0+MEPSogcYo4YwyO9sMa18=
Subject key identifier: 21:55:9B:C8:08:7F:20:C8:0B:3C:BB:88:1A:D5:9C:C6:6C:13:B5:D1
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IVWbyAh_IMgLPLuIGtWcxmwTtdE.roa
Signing time: Thu 15 Sep 2022 02:36:00 +0000
ROA not before: Thu 15 Sep 2022 02:36:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.144.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=21559BC8087F20C80B3CBB881AD59CC66C13B5D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:01:71:00:0a:29:8e:86:e0:85:b5:f6:0a:
ad:16:79:b4:97:05:85:4b:e0:75:d5:a1:5c:34:2e:
b8:5e:e2:e4:9b:5a:6c:e2:6e:1e:ed:b4:b4:cb:43:
06:76:35:41:91:0f:55:8c:de:43:e6:6e:f9:03:80:
00:65:43:45:23:06:81:e3:7f:60:23:e8:d0:92:cc:
81:e8:59:f0:a8:f6:3e:d8:27:56:bb:c9:82:f0:fd:
05:52:03:72:10:99:67:ec:9d:e7:f4:a8:d4:bf:c1:
fa:fc:54:db:10:54:49:61:11:d1:47:41:52:f0:3a:
29:54:b4:03:a7:08:6f:2c:f9:29:2e:45:aa:b5:fe:
42:72:9a:d3:16:42:7b:55:15:96:cb:0f:c7:95:f1:
f0:85:6d:67:bf:0a:7f:28:69:ba:01:3b:cd:42:80:
73:b8:63:d4:c8:89:b6:bf:50:d1:c3:71:46:52:e8:
35:b1:a6:00:9a:68:e9:c0:a0:0c:8d:52:a2:bc:0d:
90:01:8a:35:22:49:9c:8b:b9:69:df:9f:72:7f:c0:
9f:76:69:a3:68:90:0b:35:ec:30:83:7e:98:52:b1:
e7:5a:95:6f:d9:8a:70:c4:0d:bd:4c:7d:1e:fe:00:
41:19:40:11:27:3b:bb:d0:cf:3a:e8:f4:86:3c:f8:
0a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:55:9B:C8:08:7F:20:C8:0B:3C:BB:88:1A:D5:9C:C6:6C:13:B5:D1
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/IVWbyAh_IMgLPLuIGtWcxmwTtdE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.144.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:8d:a4:7c:87:53:08:a7:fc:63:2b:3b:2b:2f:2a:8c:79:f5:
98:0f:16:59:e2:dc:f0:12:3a:3f:95:1e:61:30:cd:ee:01:bb:
2d:43:f2:0d:f3:f2:2f:e6:91:ca:d1:bb:22:63:21:57:7c:aa:
7b:18:b6:5f:87:17:ae:9e:0b:04:a4:fb:fb:e9:8d:9b:2a:84:
91:5b:fe:ee:c7:ee:cb:19:2a:d9:29:c4:1b:54:fe:be:51:3c:
d2:49:06:b7:b4:35:ec:62:70:6d:43:93:ab:84:68:c7:46:13:
8c:45:5d:0f:48:db:a2:48:f1:13:42:f0:a8:2c:cd:68:63:44:
58:05:d3:4f:01:62:09:dc:fd:62:e8:41:59:5e:b3:2f:53:a2:
10:db:28:f0:c8:27:42:1b:6b:5e:2b:83:24:dd:07:c6:f0:2e:
37:05:db:6b:b0:e2:11:1e:b3:c1:b0:62:4b:a3:fb:ae:66:6f:
3a:4a:d4:df:12:f5:78:64:17:4c:99:90:97:74:63:a9:d6:36:
e3:2a:ef:f3:b2:5e:92:60:0a:d1:18:dd:81:c3:a9:fb:1f:3f:
1c:ca:4e:2f:c3:40:db:ec:5b:02:b5:fb:a6:f6:ad:aa:2b:da:
3c:44:d9:94:8a:52:36:17:c8:64:d7:23:c0:6b:38:1d:ed:11:
1b:f5:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org