Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OkLB09qKN4Tsh-UqXqKKxuGUR1Y.roa
File: OkLB09qKN4Tsh-UqXqKKxuGUR1Y.roa (raw, json)
Hash identifier: sbpr16RTlwStfka9dfHHDGAYyUMD2KXTe+nqnvNN8+U=
Subject key identifier: 3A:42:C1:D3:DA:8A:37:84:EC:87:E5:2A:5E:A2:8A:C6:E1:94:47:56
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FA9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OkLB09qKN4Tsh-UqXqKKxuGUR1Y.roa
Signing time: Sun 07 Feb 2021 12:35:26 +0000
ROA not before: Sun 07 Feb 2021 12:35:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.158.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4009 (0xfa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:35:26 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3A42C1D3DA8A3784EC87E52A5EA28AC6E1944756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:e8:1e:35:94:bf:93:03:0b:8e:15:33:ff:
67:6f:b5:15:58:78:a5:7a:eb:fd:9a:b1:f0:81:d4:
44:39:59:32:d5:d7:35:dd:f1:0d:7a:57:7b:25:d7:
d9:b4:e6:3b:77:ee:eb:c5:d5:55:97:41:69:f0:67:
38:81:68:39:a9:70:ec:da:a2:68:88:9c:65:95:ae:
23:79:c8:f0:59:53:ed:eb:94:85:c6:e6:a8:b7:68:
d1:3a:4f:39:39:b1:7a:26:1c:25:69:fe:62:39:a2:
f1:59:c2:12:19:66:ad:49:e2:77:03:da:70:82:0e:
6a:f2:46:02:88:fd:4c:8c:39:59:15:7f:11:2e:51:
70:aa:16:dc:8a:a3:6a:c6:5a:11:18:eb:a5:d5:9e:
21:2b:41:ee:37:f0:76:59:44:31:b8:d5:31:97:6a:
26:85:a7:47:19:54:08:6f:c8:56:b6:b1:6d:f5:e1:
81:d0:2c:a2:86:7e:9b:38:81:ea:1b:0f:f9:9b:22:
4b:14:82:4e:23:63:c7:2c:ed:22:50:63:93:84:26:
cc:5c:65:e8:01:67:44:73:84:8e:9b:90:f3:34:1f:
80:9d:b6:d8:94:24:87:43:5a:f5:58:16:15:cd:89:
53:d9:4f:51:cc:9a:39:83:43:5a:f5:39:05:23:88:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:42:C1:D3:DA:8A:37:84:EC:87:E5:2A:5E:A2:8A:C6:E1:94:47:56
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/OkLB09qKN4Tsh-UqXqKKxuGUR1Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.132.0/22
Signature Algorithm: sha256WithRSAEncryption
46:37:01:82:8d:10:87:5b:a4:e5:27:50:d9:05:5b:85:05:c1:
3f:58:c2:64:b5:45:65:81:54:2e:54:ce:5e:d2:f0:f8:bb:e5:
c5:4e:d3:22:7f:42:43:5f:08:a5:27:fe:ab:2e:05:5a:7b:ae:
f4:98:d5:81:2b:b4:95:7a:43:08:75:bc:43:33:df:53:3d:7c:
7b:76:5b:b1:0f:51:d5:01:29:00:06:a1:e6:79:c5:ca:dc:f5:
58:22:b0:4b:7e:b6:58:c5:e5:75:84:73:8e:39:ba:bd:99:08:
78:34:84:56:9f:e8:46:99:d7:89:98:2a:18:b1:d7:a8:58:97:
07:36:44:a2:58:ee:4f:e4:38:ac:36:8c:dd:ac:35:55:99:8c:
b1:f9:a0:6d:58:52:5e:81:24:ba:f7:eb:66:8f:58:c2:a0:8f:
6f:b3:65:ff:4a:3f:13:b2:cc:f6:15:ef:f9:dd:69:9c:78:e4:
38:16:91:bf:1c:0c:c7:a8:e6:91:3e:56:74:c4:e3:89:2d:57:
0b:91:b0:b6:cb:cd:2f:06:8e:d8:83:47:8a:66:26:a6:b6:ee:
8e:09:5c:4d:4a:74:fd:a6:cc:96:b0:ec:71:29:09:cf:7d:b7:
59:48:5c:f0:db:44:ac:4f:e0:51:76:a8:fe:2a:90:50:7f:2c:
62:19:22:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org