Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bp4dRe2UO_x8Tt_vvaVxprc_5to.roa
File: bp4dRe2UO_x8Tt_vvaVxprc_5to.roa (raw, json)
Hash identifier: VcSyYF0YCKwGMig3V7n/QY1u6pnvZTd7APi1dw1QUD0=
Subject key identifier: 6E:9E:1D:45:ED:94:3B:FC:7C:4E:DF:EF:BD:A5:71:A6:B7:3F:E6:DA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FF5
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bp4dRe2UO_x8Tt_vvaVxprc_5to.roa
Signing time: Sun 07 Feb 2021 12:36:50 +0000
ROA not before: Sun 07 Feb 2021 12:36:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.159.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4085 (0xff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:36:50 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6E9E1D45ED943BFC7C4EDFEFBDA571A6B73FE6DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:f2:36:91:b0:7c:b9:f0:61:45:e8:7a:bd:
1e:87:87:35:2c:ff:73:8f:62:86:b1:f4:a3:2b:09:
19:6a:d9:45:ea:0f:c3:6e:18:31:7d:87:04:49:33:
2d:5e:79:bc:c8:00:72:ca:b6:86:79:9f:a4:4e:b5:
72:5a:5b:b1:88:85:56:f7:18:40:1b:c2:88:cf:dd:
92:c5:99:d9:6a:9c:bc:4f:f9:15:98:61:26:fa:ad:
28:c3:16:83:bf:0e:3d:05:32:5a:b4:88:d9:a8:51:
05:43:9c:7b:7f:01:20:b3:1d:b9:a4:46:05:72:20:
87:19:61:40:63:62:0b:5c:52:5e:29:75:d8:30:ea:
3f:49:e4:5a:a9:1e:79:b4:34:c5:50:25:d2:06:3d:
4c:a5:17:94:65:d4:c2:1b:0a:5c:31:ab:70:23:c2:
54:ec:ae:76:0d:01:c8:91:98:f7:e9:85:7e:9e:9d:
a8:b3:35:44:da:a4:01:d2:ba:e2:76:e5:81:2d:f4:
0b:42:78:4f:80:40:62:6c:ce:6c:89:67:5f:27:db:
89:ae:fb:35:9b:09:1c:be:56:21:cc:8c:ab:12:b8:
d2:1b:13:89:42:72:cf:35:77:fc:4a:15:f4:38:c7:
13:6c:bb:04:52:6a:5f:cb:f8:50:02:13:c9:93:61:
fa:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9E:1D:45:ED:94:3B:FC:7C:4E:DF:EF:BD:A5:71:A6:B7:3F:E6:DA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/bp4dRe2UO_x8Tt_vvaVxprc_5to.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:c3:35:8e:f7:9f:6b:30:f3:49:a0:75:73:2c:86:ff:cd:87:
c2:45:6d:3e:af:54:e0:21:7c:09:cb:26:57:28:9c:39:de:49:
ae:50:e0:37:0a:9a:e1:28:24:2d:6c:9c:a7:83:2f:be:d3:1a:
d3:43:b3:1f:43:39:e8:53:87:ab:e8:32:1b:93:b5:bc:bc:22:
cd:b8:fc:bc:ed:99:c1:34:2b:95:78:a6:61:ef:dd:44:b2:5b:
ae:a0:ad:e5:a1:a5:fd:a1:3a:1d:2c:f0:a3:87:ed:c1:93:18:
40:49:ae:8c:7b:9d:bf:19:67:5b:c3:09:4c:81:7f:67:50:1a:
96:50:b3:43:d9:5e:cb:97:8f:7e:1a:d8:18:0c:ba:74:37:6c:
53:b8:9c:72:b7:d1:7c:21:ae:fc:e5:22:66:1e:c5:74:6e:20:
61:f7:3e:13:f0:0b:db:a6:f4:08:80:09:f8:60:6a:57:54:9b:
6b:9c:6a:c5:81:54:fa:35:cd:18:4e:5b:10:e6:61:34:1b:c3:
e5:34:13:03:04:62:82:98:42:b4:50:53:21:2a:9d:f9:93:20:
d1:e4:1b:a7:fa:71:3f:83:25:92:39:2c:7e:83:5b:be:37:1c:
b3:b6:af:c0:f4:af:5b:ba:8a:cb:25:96:de:0c:73:19:2c:a4:
a9:7c:58:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:38 2023 by rpki-client on console-ams.rpki-client.org