Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/So7QBHMTqnUaNUK9oiwdZfYT8h8.roa
File: So7QBHMTqnUaNUK9oiwdZfYT8h8.roa (raw, json)
Hash identifier: kFpJPF6jLRvdzbiMvEq7HZTl4RpBguacdNQStFbumRg=
Subject key identifier: 4A:8E:D0:04:73:13:AA:75:1A:35:42:BD:A2:2C:1D:65:F6:13:F2:1F
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1005
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/So7QBHMTqnUaNUK9oiwdZfYT8h8.roa
Signing time: Sun 07 Feb 2021 12:37:08 +0000
ROA not before: Sun 07 Feb 2021 12:37:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.159.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4101 (0x1005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:37:08 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4A8ED0047313AA751A3542BDA22C1D65F613F21F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:34:71:a1:77:51:e2:08:eb:ca:7e:8d:34:
c9:75:a1:b8:0c:51:40:b9:b7:d9:71:37:10:f1:76:
9e:35:3d:ce:ea:f1:f0:cb:eb:0d:9e:05:78:b2:f2:
46:1f:fa:6c:87:93:13:ce:99:e3:77:dd:90:5b:7e:
a9:a8:52:cb:47:58:bc:31:eb:57:98:94:7e:8b:c3:
7d:22:8c:68:38:46:36:f3:2a:bd:cd:05:d8:c0:8d:
7c:09:e7:8a:8e:a4:de:7e:ac:d3:22:fe:92:da:83:
b9:8d:8d:bc:23:0e:c6:9e:3b:ca:47:36:10:cd:3a:
c6:93:0b:db:46:07:a5:4d:87:c8:6d:b1:de:72:fd:
31:af:09:72:03:38:7d:07:92:19:cc:68:63:89:69:
53:f7:71:d4:4d:ca:e2:e9:62:08:a5:29:6b:37:72:
e8:18:be:e1:6b:e0:5c:b4:ed:4b:7e:8a:68:5f:b3:
d1:39:c2:f6:8d:2d:a6:2b:20:b1:10:c1:5d:b7:96:
60:2e:2d:54:8e:68:eb:eb:e8:a0:33:66:4b:86:c7:
80:8d:5c:07:7a:f4:be:ab:5f:08:c6:3a:94:04:ef:
ee:ff:9e:14:3f:f3:6c:79:01:06:c2:6a:2a:51:e1:
82:cd:8f:29:f0:b5:38:ee:3c:03:dc:a2:48:33:6d:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8E:D0:04:73:13:AA:75:1A:35:42:BD:A2:2C:1D:65:F6:13:F2:1F
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/So7QBHMTqnUaNUK9oiwdZfYT8h8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.252.0/22
Signature Algorithm: sha256WithRSAEncryption
66:56:8a:77:f4:4c:e2:94:35:ce:f4:db:4f:a9:3a:7d:09:8b:
a9:e4:8f:c6:ab:9f:c4:a9:a1:70:52:e7:1e:e5:58:12:ec:84:
9a:e6:12:c3:3c:df:95:99:0a:54:50:84:ca:73:6c:c9:b7:1c:
00:e1:8f:bc:05:4f:7b:4b:ac:ac:84:5a:ea:8b:39:95:c3:0c:
6a:2a:21:93:4b:e1:a6:a6:cf:7f:21:2b:d5:8a:d6:f2:5a:f6:
6a:d4:5b:bc:73:d7:06:d4:25:f8:be:5e:85:98:05:f8:39:5d:
4e:d6:64:71:f6:06:78:8e:d5:95:d7:25:d4:19:11:65:4d:58:
b5:b9:c0:13:8b:dd:1d:70:37:76:73:b7:3d:5e:46:7b:3b:d2:
3a:a5:69:4b:a4:e7:6f:8b:c1:91:95:f0:b6:cd:11:ed:b7:65:
b9:79:a2:9e:31:b8:a2:ac:ab:0f:9a:13:80:92:87:cd:d9:66:
3d:55:6a:a2:cc:6b:5c:0d:39:04:72:25:2f:6b:f5:5a:6d:00:
9e:4a:44:41:01:e2:dd:d4:d6:e3:a1:25:d1:3f:a2:e3:b3:36:
9d:6a:99:72:d6:80:5c:80:fc:8d:58:8b:c2:ef:ee:08:00:09:
35:43:f0:bb:03:23:16:c8:a7:79:30:fd:cc:99:aa:05:90:c1:
d4:12:af:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org