Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cwLAuNRviTX8t0vRdPYPJ35CrHI.roa
File: cwLAuNRviTX8t0vRdPYPJ35CrHI.roa (raw, json)
Hash identifier: sFhiNnaaLfsgMpdplENZS4RlqGS8Acwrurgri5aEj0Q=
Subject key identifier: 73:02:C0:B8:D4:6F:89:35:FC:B7:4B:D1:74:F6:0F:27:7E:42:AC:72
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1884
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cwLAuNRviTX8t0vRdPYPJ35CrHI.roa
Signing time: Sat 22 Oct 2022 05:58:28 +0000
ROA not before: Sat 22 Oct 2022 05:58:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.232.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6276 (0x1884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:58:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7302C0B8D46F8935FCB74BD174F60F277E42AC72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:66:7b:5e:99:a1:7f:bb:27:f7:f9:09:8e:
db:1c:37:43:5f:96:31:08:60:1d:0f:e3:83:de:04:
1d:4c:f8:7e:f3:27:6b:e2:8f:c5:f2:22:07:27:b8:
e4:d4:bf:29:c6:da:f1:6c:62:64:58:ce:19:5f:c1:
d7:0a:b6:cb:a5:cf:90:fe:19:90:1a:03:58:ff:f2:
f6:db:64:11:91:1f:51:87:f7:52:e2:bf:1a:41:dc:
7c:c8:9f:84:b5:81:2a:35:52:8d:9d:cb:e4:8a:2a:
35:83:2f:6e:9c:84:11:cd:20:60:2d:50:cf:a1:e1:
7c:38:3a:0f:fa:8a:11:82:d0:8e:e3:33:b2:fb:26:
19:04:a0:7f:bb:aa:0a:93:ac:af:6a:b4:4a:30:13:
e6:86:f6:50:20:21:63:1f:fe:fe:89:60:2a:42:69:
7b:c9:3a:37:b3:72:3c:88:1c:f7:4b:1a:ea:ba:85:
28:e1:8a:41:65:e7:98:dc:4f:89:16:3e:1a:8d:85:
7b:5c:8d:80:34:3a:d8:7d:53:4c:05:c2:bb:5f:22:
85:00:91:05:8d:a5:98:d0:2e:90:34:0a:49:33:10:
25:76:56:eb:c5:0e:05:cd:2f:ac:16:6e:a4:03:8b:
94:bb:83:b6:52:a7:83:1a:f9:10:96:fc:34:5a:b1:
c6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:02:C0:B8:D4:6F:89:35:FC:B7:4B:D1:74:F6:0F:27:7E:42:AC:72
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/cwLAuNRviTX8t0vRdPYPJ35CrHI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.232.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:09:95:7a:59:22:15:31:3d:de:43:40:12:3a:c1:a5:73:03:
60:a0:37:43:d7:5c:cb:46:25:69:ca:4f:8c:56:1b:aa:9c:0b:
c7:78:c5:79:06:63:2e:e0:c6:76:3d:83:b9:f0:8a:9a:cb:88:
a9:eb:78:33:8a:2d:f8:ba:2a:49:33:f5:d5:94:25:48:d8:c4:
81:b7:19:d2:fa:a7:76:53:01:68:3a:18:c5:d1:ee:1c:8e:f5:
d0:06:f5:04:48:43:e4:cb:52:4d:ae:00:30:61:72:d6:cf:f2:
b2:53:b6:d0:e8:98:36:cd:96:5d:3f:ca:b0:e3:75:94:9c:21:
74:79:14:79:d3:b0:76:fc:5b:33:b7:b1:94:9b:68:e7:72:30:
4b:f8:e9:19:6e:e2:49:e8:b2:58:2f:db:53:15:b2:d1:97:3f:
ca:a8:e7:03:88:6a:92:45:b0:cf:15:0a:de:cb:7d:79:e5:8c:
5d:55:9e:5d:63:ec:cc:c8:38:70:ff:d6:6b:0f:13:0c:48:38:
e2:8f:29:c7:df:2c:ac:0f:e8:c5:b1:d8:25:0f:64:4e:6b:ee:
fa:1d:46:ea:c9:df:9f:c9:f0:4d:a6:87:71:7b:90:99:0f:3f:
2e:db:a9:65:a9:0f:bd:bf:b2:74:0e:1c:9e:d3:0b:ad:ba:70:
e0:fa:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:46 2025 by rpki-client