Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZYowJ7Lq63f3UHr9E_URIaOO1BA.roa
File: ZYowJ7Lq63f3UHr9E_URIaOO1BA.roa (raw, json)
Hash identifier: jX3qeV7iYcZgxo2UGGqiN+Ek267YE/2WKt26xBEhfAM=
Subject key identifier: 65:8A:30:27:B2:EA:EB:77:F7:50:7A:FD:13:F5:11:21:A3:8E:D4:10
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1926
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZYowJ7Lq63f3UHr9E_URIaOO1BA.roa
Signing time: Sat 22 Oct 2022 06:06:09 +0000
ROA not before: Sat 22 Oct 2022 06:06:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6438 (0x1926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=658A3027B2EAEB77F7507AFD13F51121A38ED410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:67:d0:fb:5a:76:fc:c3:7e:ce:7d:bf:76:35:
e9:9a:3e:91:fc:28:14:bc:16:99:ee:52:6e:1c:3b:
49:23:b6:33:8c:24:4e:34:d7:0b:75:6a:cc:20:e1:
0a:f3:59:37:bd:73:d2:9c:9e:d9:cc:d8:93:71:67:
77:79:a7:af:e8:68:81:36:54:3c:3d:fa:64:10:f2:
34:4b:3d:97:bc:f9:8a:b7:89:3b:0c:3b:b6:4f:7b:
4d:7b:f2:a6:f3:fe:54:35:42:d9:03:5f:b7:17:67:
04:d6:08:3d:c7:4d:b7:38:26:29:3f:31:d8:51:37:
44:52:94:27:10:5c:4a:45:9c:fc:ff:29:f7:95:59:
77:95:70:99:e3:ac:0f:fe:f4:b8:35:2d:eb:77:a3:
20:df:9d:e5:0c:4f:ae:7b:cf:26:3a:4c:34:d8:07:
25:a9:3c:12:4f:a8:f5:5b:58:69:93:84:e9:cd:c1:
13:d4:d6:52:33:ea:b5:36:5b:2b:20:7a:d1:38:42:
52:a6:69:72:8a:ee:c4:c6:a4:28:d9:98:a1:db:e1:
c2:67:fb:d0:6b:84:12:3c:18:c6:3d:90:d4:93:c3:
0c:32:0b:f7:2f:59:e2:0e:2c:3f:5b:5f:a1:07:fc:
6c:b0:0f:dc:44:cb:c6:b8:30:60:d1:56:f4:6a:1d:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8A:30:27:B2:EA:EB:77:F7:50:7A:FD:13:F5:11:21:A3:8E:D4:10
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ZYowJ7Lq63f3UHr9E_URIaOO1BA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.140.0/22
Signature Algorithm: sha256WithRSAEncryption
20:9f:38:9e:4b:ab:2d:c5:41:97:7a:75:89:2d:2e:ca:41:c8:
04:e6:65:97:ba:97:89:37:1b:1b:05:e5:db:9b:68:1e:7a:cb:
37:6a:6c:85:a4:3f:6a:e3:33:14:56:1c:b4:3c:c1:d5:68:28:
bd:5d:67:a1:e9:2f:5b:16:20:b1:a8:59:e1:13:dc:57:54:b3:
01:90:f6:6e:6d:95:94:49:01:84:4b:b2:86:84:f6:53:1d:fd:
0b:be:e8:b8:16:8f:97:00:92:ab:45:0c:c3:1f:e3:31:2e:c3:
0a:bf:43:fd:71:34:c8:7b:33:08:78:0c:4a:b0:1b:49:7e:82:
b6:00:81:58:4f:eb:22:78:14:20:e8:d7:ac:6a:86:5c:cf:b6:
89:1b:54:17:a6:97:2f:00:59:c9:e4:c2:a0:07:f0:50:12:90:
10:9e:fd:a1:98:dc:52:c1:84:52:91:e7:e0:91:36:f8:d4:66:
9e:0b:da:4f:75:f9:22:e4:35:44:e2:f9:22:f0:51:cf:0f:36:
7e:dc:4b:be:4f:e5:36:0d:43:cf:a9:65:42:33:ef:a7:2c:88:
22:21:0d:12:31:e2:f8:8e:89:55:43:d0:aa:75:ab:aa:be:e1:
e8:e0:f6:73:d3:cb:33:da:be:85:65:0d:92:da:48:e1:21:2a:
1f:08:dc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:04 2024 by rpki-client on console-fra.rpki-client.org