Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TUScFLUjCE5GvR03ywY0q3DabCI.roa
File: TUScFLUjCE5GvR03ywY0q3DabCI.roa (raw, json)
Hash identifier: enhHMI7pNDrEiww5EhCBP7FjU3rodLSKKYNr7xQ9eCo=
Subject key identifier: 4D:44:9C:14:B5:23:08:4E:46:BD:1D:37:CB:06:34:AB:70:DA:6C:22
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0ACC
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TUScFLUjCE5GvR03ywY0q3DabCI.roa
Signing time: Tue 29 Sep 2020 10:07:39 +0000
ROA not before: Tue 29 Sep 2020 10:07:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2764 (0xacc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:39 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4D449C14B523084E46BD1D37CB0634AB70DA6C22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:78:3a:09:67:da:c1:79:21:37:95:2b:7f:
37:c5:5a:eb:7c:94:2a:64:8d:27:ac:35:40:73:85:
fd:30:81:d0:ef:4c:76:84:f4:75:0e:2a:b1:0b:12:
d0:ba:b7:b6:bd:70:1e:e1:05:19:a1:41:fa:20:a5:
b5:c8:e6:7a:43:8f:35:57:d9:e7:b0:a4:44:24:27:
3f:d5:ba:0a:95:d8:86:dc:26:0a:b5:e5:63:a3:a8:
42:ee:a1:6a:65:19:b0:e4:70:d7:9e:f6:75:7e:c6:
fb:bc:8a:a1:62:54:82:c1:66:a3:1b:9c:7c:db:d9:
6c:1e:7f:78:d9:f8:e7:54:f9:44:3d:75:9b:40:4f:
e4:d0:74:24:3b:52:27:c6:f7:39:4f:10:7c:90:6f:
9a:f6:e0:a1:da:60:45:cf:b2:ee:a1:c0:84:a1:cb:
58:bf:2a:c5:7c:d6:c3:73:7d:39:fd:07:13:48:b1:
c6:58:7b:96:03:26:10:ee:c4:b7:03:f0:6c:52:90:
90:1b:74:5e:54:33:03:35:28:f5:ca:f5:ec:8e:c3:
99:d4:dd:6b:40:d7:7e:14:68:ab:a5:a1:b2:ba:da:
9f:61:ac:24:03:81:cc:47:5f:48:68:3e:ea:82:c8:
26:1a:6c:50:e5:08:d5:60:09:55:9e:4f:d4:f8:47:
b3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:44:9C:14:B5:23:08:4E:46:BD:1D:37:CB:06:34:AB:70:DA:6C:22
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/TUScFLUjCE5GvR03ywY0q3DabCI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.61.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:81:26:9d:b8:9c:7e:ba:95:81:f8:71:15:a3:f2:38:c7:f0:
a4:a3:79:30:78:a0:a1:c6:8a:27:d2:88:b1:32:84:7c:71:61:
ea:f2:c1:7f:8d:d2:fd:96:8b:9f:79:50:c1:72:09:5e:b8:3e:
32:b3:b2:15:ca:7c:3b:be:fc:8a:96:c5:fe:86:9f:fa:36:12:
f4:5b:f2:52:b5:15:4e:75:50:fa:5f:28:a9:97:b1:9c:41:8a:
58:b9:95:d1:c4:75:27:31:9d:d7:80:7c:57:ef:9d:f3:6b:99:
aa:f0:27:90:26:2d:49:7e:33:77:d3:75:f9:32:d2:97:a1:8d:
ce:b9:a5:fb:19:1a:ea:51:8a:87:df:6e:09:49:8b:05:a0:b5:
db:92:10:f3:c0:94:ca:81:e8:d5:84:f5:18:d4:67:23:bd:39:
6f:0a:37:f4:eb:8b:69:b0:0d:d1:12:4d:ef:85:da:43:84:7a:
fa:00:85:fd:d8:c4:2f:97:b0:05:63:ce:2c:3e:bf:67:0a:3e:
ca:cf:6e:cb:2a:34:ed:d3:e4:25:a3:b7:20:21:e4:f5:b3:9a:
af:03:d2:f9:4c:c1:11:92:c7:c7:1f:c6:3b:a1:b5:d7:ad:f0:
a3:dc:6f:bc:c9:ac:f6:82:db:05:bb:03:7d:41:5c:0b:8e:eb:
9b:f1:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org