Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PgGb3FdwLM1zOjXVU6JKKyVBFhA.roa
File: PgGb3FdwLM1zOjXVU6JKKyVBFhA.roa (raw, json)
Hash identifier: Rq1g3+/iG2dTG9xgj8eUZpSIuKDQ40xJcGsbwpfBJpA=
Subject key identifier: 3E:01:9B:DC:57:70:2C:CD:73:3A:35:D5:53:A2:4A:2B:25:41:16:10
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PgGb3FdwLM1zOjXVU6JKKyVBFhA.roa
Signing time: Thu 15 Sep 2022 02:35:18 +0000
ROA not before: Thu 15 Sep 2022 02:35:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.159.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:35:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3E019BDC57702CCD733A35D553A24A2B25411610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c1:07:07:f4:b7:a5:c7:14:27:33:f4:be:92:
58:27:4c:29:22:40:c6:8f:f9:e5:6b:15:15:66:24:
3b:98:fd:e9:f8:bc:43:7f:e4:61:6c:d7:76:49:5c:
f3:c4:c3:04:2f:de:cd:dd:08:d8:49:fd:78:bf:2a:
0b:e3:0b:86:2b:67:12:d7:1b:76:33:f2:e9:ad:55:
9f:0b:a6:5f:a7:d3:4e:20:84:84:41:73:30:46:eb:
51:e5:01:12:e9:47:ca:40:17:bc:17:70:be:74:28:
75:6b:48:ac:69:7c:34:0e:bf:2c:17:54:2f:f2:14:
08:34:ea:63:e4:47:7a:87:29:26:54:4b:e3:17:39:
09:44:fc:ef:0d:d0:f9:4f:9f:29:f5:74:b2:cc:31:
bb:98:9d:e4:fd:14:76:03:a6:fc:40:54:1a:32:09:
82:59:95:ad:88:ac:5a:91:2c:27:75:2a:91:97:f2:
ac:10:78:57:f0:b0:6c:24:07:7b:40:6e:f4:76:a5:
2f:0b:e7:0f:90:b2:97:6c:0f:7d:41:10:17:dc:64:
7c:a7:74:ee:e4:62:4f:4a:fe:52:5a:19:20:40:fa:
92:51:cf:92:af:d0:14:c1:4a:ed:a9:b0:62:11:e3:
8f:c8:52:1a:48:fd:51:65:09:c5:fb:6f:50:e6:c3:
90:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:01:9B:DC:57:70:2C:CD:73:3A:35:D5:53:A2:4A:2B:25:41:16:10
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/PgGb3FdwLM1zOjXVU6JKKyVBFhA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.160.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:ae:45:7e:03:6b:e8:66:c4:50:de:64:3d:19:5b:3f:65:cf:
e6:f4:3f:f9:75:b4:2c:f5:15:0c:8e:03:21:97:46:44:0e:9a:
03:04:e3:e8:b9:dd:f0:bf:be:4b:19:02:2c:4a:28:55:1f:a8:
59:7c:01:76:9e:f1:9b:1b:c0:81:e6:b1:af:cc:8e:c1:98:e1:
ed:80:ea:1c:fb:1c:13:ce:b7:84:3e:50:a6:6c:40:bb:05:1d:
d6:a0:2f:40:50:a3:5c:f3:ca:bb:ce:67:d0:d4:8b:6d:08:70:
78:2a:74:f7:fd:7f:ed:10:21:d4:6e:25:1b:f4:75:34:1c:68:
22:e2:47:9a:a3:91:02:bc:a2:3e:55:ff:65:fb:2e:fc:f6:49:
ed:8f:64:3d:62:5d:76:a9:1b:4f:cd:f3:03:02:30:b0:b1:37:
c0:77:59:d0:d7:97:c2:d4:84:ad:ad:24:d5:16:3c:ad:5a:72:
ce:49:b1:55:fa:04:3f:d2:c5:bd:51:fe:4c:20:6d:14:df:05:
0c:da:8e:8f:1a:ed:f5:54:76:eb:97:7a:1d:d2:d7:12:ee:96:
3b:e7:9f:27:69:1d:46:06:83:48:61:e5:ee:22:a9:d5:cf:9b:
09:86:6d:42:90:5b:f0:8e:80:4d:3f:e0:d4:66:47:d7:6e:23:
09:2a:62:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org