Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VynV2dCQqGFF7UpWpaF5W3MTCsU.roa
File: VynV2dCQqGFF7UpWpaF5W3MTCsU.roa (raw, json)
Hash identifier: ZxcyHUlj4RWUeMYvNj/ZYo3wY2Oy+eO1yePKqHVZt9U=
Subject key identifier: 57:29:D5:D9:D0:90:A8:61:45:ED:4A:56:A5:A1:79:5B:73:13:0A:C5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FC9
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VynV2dCQqGFF7UpWpaF5W3MTCsU.roa
Signing time: Sun 07 Feb 2021 12:36:03 +0000
ROA not before: Sun 07 Feb 2021 12:36:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24163
IP address blocks: 49.158.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4041 (0xfc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:36:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5729D5D9D090A86145ED4A56A5A1795B73130AC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:c5:5c:44:b6:32:23:2e:9c:27:40:b5:bb:
d5:d7:93:13:44:60:50:dc:cc:f1:08:99:c3:33:a2:
9d:92:ee:65:57:d7:37:b0:60:19:35:15:e3:9c:7b:
40:44:ee:d5:20:d3:96:46:b1:24:4e:98:aa:ae:20:
82:2f:f7:1f:f8:41:4e:6b:26:38:93:33:18:60:b1:
11:78:0b:5c:cd:2e:8d:a0:6b:37:48:ca:25:7b:00:
8c:78:74:98:25:c0:54:ac:a4:62:a2:8f:e2:9f:79:
31:c1:45:f7:b4:19:a5:13:f7:87:30:c3:8a:3c:21:
a1:e4:e7:94:d2:1f:f6:ca:63:db:2f:26:6a:97:1e:
0c:88:d9:df:08:69:91:02:85:a9:6c:60:73:47:25:
17:a0:42:9c:61:00:6e:c0:90:3d:55:49:1b:f9:24:
20:e2:7d:bd:e9:b1:5e:03:0b:0e:54:ef:51:f1:a4:
c8:2b:a5:b5:81:0f:50:93:09:0c:72:95:60:36:60:
7a:93:90:15:a1:f4:a9:97:ba:76:2a:5d:15:fa:65:
c0:04:40:e1:1f:96:70:99:8b:61:95:9e:ce:fb:0a:
18:09:48:9b:7f:0c:b0:cf:82:f7:5e:43:70:80:93:
6e:27:3d:50:36:b3:27:b5:aa:52:2a:7d:4f:d3:67:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:29:D5:D9:D0:90:A8:61:45:ED:4A:56:A5:A1:79:5B:73:13:0A:C5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/VynV2dCQqGFF7UpWpaF5W3MTCsU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.204.0/22
Signature Algorithm: sha256WithRSAEncryption
99:c9:7a:6e:98:3d:26:9b:d7:de:e4:be:4c:be:02:db:ab:1b:
24:da:1d:1b:45:a4:5c:a6:9b:00:07:ca:dc:bf:b2:14:72:89:
c3:3b:b9:19:87:3f:95:c4:2d:a5:f0:50:9e:ff:9e:91:7e:d0:
08:4b:02:ef:4a:e3:ac:23:73:91:c9:05:fd:3f:09:68:d2:70:
ec:0e:e4:e5:e3:d5:10:a2:52:7a:c0:4b:7d:6a:87:06:6c:15:
e4:c6:fa:eb:b2:f5:a2:3f:7a:22:c1:ac:13:76:69:7e:85:28:
44:61:4b:71:fe:10:0f:34:f7:ed:97:81:45:3f:a0:b4:5e:31:
37:62:4d:dd:52:29:6a:6d:78:ae:c4:6a:08:a6:8b:45:35:3a:
23:cc:85:34:24:f5:dd:96:40:63:6d:e5:01:a8:d3:d7:ac:6c:
af:a9:4b:a9:4d:f4:d8:b2:d2:7e:9f:64:b6:40:b8:7b:84:4b:
39:d0:76:56:75:32:9c:16:b5:75:90:7d:d0:c1:65:7c:41:f5:
b3:8e:87:34:aa:d7:e2:2e:df:70:e8:52:16:93:ff:eb:01:d1:
3a:55:f4:03:c6:ef:72:6f:1e:d2:30:f7:5c:c1:ed:e1:ef:97:
f1:9a:35:42:cb:5a:8e:2e:f0:6f:bc:90:e2:1a:e3:ad:fe:40:
a3:38:74:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:37 2023 by rpki-client on console-ams.rpki-client.org