Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UeMI0tS5_3dbMqxjoOVwilQ6WsU.roa
File: UeMI0tS5_3dbMqxjoOVwilQ6WsU.roa (raw, json)
Hash identifier: e67AQhNRtQ3a9rDw/pNY6//mCeoT20gXQrBPG50bcbQ=
Subject key identifier: 51:E3:08:D2:D4:B9:FF:77:5B:32:AC:63:A0:E5:70:8A:54:3A:5A:C5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 120E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UeMI0tS5_3dbMqxjoOVwilQ6WsU.roa
Signing time: Wed 29 Sep 2021 02:54:09 +0000
ROA not before: Wed 29 Sep 2021 02:54:09 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24165
IP address blocks: 49.159.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4622 (0x120e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:09 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=51E308D2D4B9FF775B32AC63A0E5708A543A5AC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:96:33:68:82:66:aa:74:64:d7:e7:36:bf:
24:7d:0c:a6:b9:27:c1:8a:e2:f5:45:8d:f2:55:00:
44:c8:5f:53:41:d9:ed:c8:59:02:58:17:65:07:c9:
59:1c:19:f7:fc:5a:64:ab:a9:eb:95:44:d5:5f:7d:
8c:56:43:94:a6:16:d8:a0:b9:0f:23:4f:04:62:5c:
1c:94:7d:95:52:cd:f7:8c:94:2b:9a:1e:f3:4d:2d:
b4:9c:1a:98:61:a6:00:48:df:09:30:ac:4b:e1:c5:
a6:55:c0:4f:79:1b:e9:0b:46:c6:ee:4a:4c:29:82:
bd:7e:f2:95:ac:c0:d1:11:ce:64:a6:74:1d:1e:f5:
2e:b9:78:59:9a:6f:83:5a:f2:18:68:c3:1c:95:eb:
ff:a3:64:0f:cf:ea:ef:e4:8d:aa:1c:62:bf:47:45:
52:b7:ac:a4:2f:d2:31:23:9e:53:d8:c8:37:ca:f0:
54:dd:b1:6b:10:f2:68:38:89:a8:5e:52:8d:49:9b:
a9:9d:65:88:46:aa:68:5f:d5:8c:33:06:9c:35:bd:
01:a4:6a:13:43:de:80:08:40:bd:ba:37:22:15:37:
22:d8:a2:f0:a3:05:dc:b6:bf:34:10:4e:aa:ce:01:
d0:b5:de:00:78:55:c8:91:8c:6e:dd:b0:f8:35:a6:
9e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E3:08:D2:D4:B9:FF:77:5B:32:AC:63:A0:E5:70:8A:54:3A:5A:C5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/UeMI0tS5_3dbMqxjoOVwilQ6WsU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.68.0/22
Signature Algorithm: sha256WithRSAEncryption
25:dd:25:fc:2d:0f:87:b9:2c:3f:8d:01:54:cc:3d:8e:00:25:
40:73:c2:92:04:4f:c6:ee:b2:fa:61:3b:fc:fd:92:91:7a:e0:
86:91:6b:2c:df:47:5f:5b:a2:53:ee:41:18:0c:05:39:9b:ab:
3f:8c:6a:dc:e8:36:e5:e4:c6:9b:f4:5e:18:58:fa:40:fd:a2:
5d:53:75:3a:1a:8b:29:be:16:29:1c:01:19:de:60:61:bf:0a:
bd:30:89:5d:d8:e7:5f:44:95:96:af:a9:db:f0:53:b1:b8:23:
f0:ee:d6:01:11:f0:c8:b7:d9:af:5c:3b:ef:31:26:65:1e:61:
08:da:8b:da:50:65:cf:5d:a1:4e:a6:e0:21:4c:38:71:b8:af:
23:1e:10:55:f4:ea:44:36:fd:41:87:3b:52:c5:cb:fd:3f:01:
86:7c:5f:da:ae:b8:f1:43:f7:fd:a7:1a:e7:57:9e:a6:8b:76:
7a:6e:87:56:42:64:c8:8a:d0:da:74:0b:93:94:9a:1d:ae:51:
26:08:eb:e6:32:07:77:ea:b4:9a:66:91:99:26:3b:ff:30:0b:
2a:73:78:bf:ad:e2:2e:0d:31:59:a7:dc:2a:4c:02:47:b5:e3:
40:dd:d0:5b:e5:25:e9:a9:4d:c8:35:8d:cf:c1:47:07:2a:48:
1f:2d:b3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:47 2024 by rpki-client on console-ams.rpki-client.org