Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MZjrTbaXcikh8ATBi6wovqoqPjU.roa
File: MZjrTbaXcikh8ATBi6wovqoqPjU.roa (raw, json)
Hash identifier: TXII2oHvStzfyAHq+vPL3Y/zV7eGfB1LyWJXqBRXfTw=
Subject key identifier: 31:98:EB:4D:B6:97:72:29:21:F0:04:C1:8B:AC:28:BE:AA:2A:3E:35
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AD5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MZjrTbaXcikh8ATBi6wovqoqPjU.roa
Signing time: Tue 29 Sep 2020 10:07:41 +0000
ROA not before: Tue 29 Sep 2020 10:07:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2773 (0xad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3198EB4DB697722921F004C18BAC28BEAA2A3E35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:c2:f1:4e:ac:37:11:ac:56:3e:a8:a6:0c:
ce:18:4e:26:e1:e9:ee:65:e2:43:30:97:b6:72:4b:
f7:38:3a:67:75:d8:be:2c:54:5c:c8:54:d7:96:98:
44:d5:62:02:71:b2:7c:82:24:92:bd:cd:2f:e6:4a:
66:fe:74:c9:b1:0b:07:de:e9:55:6a:d2:56:27:6d:
7d:da:4b:64:e2:86:f1:a2:67:90:91:4b:d2:1b:4b:
dc:2f:e0:ae:85:c3:77:86:7d:ed:7a:e8:b0:27:04:
a2:e0:96:00:75:44:c5:45:22:f3:a8:81:4a:7e:98:
40:bf:97:c5:e9:68:77:fe:45:12:30:33:e1:67:4f:
44:da:53:6e:1c:f5:be:9c:9c:75:be:58:7b:33:30:
6b:f0:95:8f:4d:e0:f9:c1:0c:36:35:ed:0a:b0:9b:
5e:26:ad:6a:e7:cd:ac:53:48:e3:48:1b:e5:58:a3:
72:f0:64:c6:08:a8:c3:6d:3c:c7:e1:fd:60:ae:29:
fa:36:12:06:a3:b0:f4:66:7d:76:1d:16:e8:61:28:
a1:2f:bb:f9:16:ee:58:c6:c2:cb:d4:b4:ab:e7:15:
98:a5:1b:60:b6:c3:89:25:44:f1:dd:cb:13:55:0e:
d3:a4:75:38:bc:dc:a6:30:9f:0f:27:1f:00:2f:9d:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:98:EB:4D:B6:97:72:29:21:F0:04:C1:8B:AC:28:BE:AA:2A:3E:35
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/MZjrTbaXcikh8ATBi6wovqoqPjU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.128.0/21
Signature Algorithm: sha256WithRSAEncryption
74:3b:9e:24:1d:92:2d:80:d8:3c:a0:a8:ad:a5:61:f1:7a:ba:
9e:a4:88:b5:3c:c6:48:fc:b8:e6:10:7c:21:78:62:f4:f8:bb:
7a:39:a8:44:d1:8f:b4:f7:6d:05:59:2b:0d:45:7e:77:60:52:
86:82:5d:b0:5a:2e:66:c4:fe:9b:91:22:2f:d6:7f:e7:f7:a1:
d9:61:37:5b:86:49:a5:5c:28:14:78:c9:e3:fc:17:e1:02:cb:
dd:47:ef:ec:70:43:25:d3:7b:78:8c:90:20:4e:aa:a5:86:ae:
9b:65:17:c3:a8:35:5c:5a:e3:3a:65:99:65:06:3b:2f:e5:26:
af:03:1a:da:91:65:b0:4a:a3:ee:f5:55:13:fd:f7:6e:c8:6a:
5d:56:56:71:22:3c:8d:02:e2:aa:e9:bd:06:f3:13:fe:b7:76:
26:bd:10:41:96:8f:26:e0:a6:ec:c2:8e:23:85:a6:5f:75:51:
47:66:91:a7:b5:fe:d0:51:c9:e1:49:13:87:bc:9e:ee:ca:ab:
6b:aa:84:df:c7:51:9d:bf:bb:af:74:ae:cb:23:a0:3c:77:0e:
dd:19:0c:2c:03:be:84:c5:4d:dd:2e:ec:af:04:55:9d:3f:78:
5e:da:8c:a7:78:39:b1:6a:28:98:5c:2a:38:21:46:15:0a:49:
fc:75:64:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:35 2025 by rpki-client