Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e0x95QrlfOUrqPIxxGZxwwo3cU0.roa
File: e0x95QrlfOUrqPIxxGZxwwo3cU0.roa (raw, json)
Hash identifier: LBx4IsTjJAWEuMcXHbdH0RDnuxM44A8fODZ7cO8AdPs=
Subject key identifier: 7B:4C:7D:E5:0A:E5:7C:E5:2B:A8:F2:31:C4:66:71:C3:0A:37:71:4D
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1290
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e0x95QrlfOUrqPIxxGZxwwo3cU0.roa
Signing time: Wed 29 Sep 2021 02:54:44 +0000
ROA not before: Wed 29 Sep 2021 02:54:44 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4752 (0x1290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:44 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7B4C7DE50AE57CE52BA8F231C46671C30A37714D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:e1:ed:3b:23:61:db:63:42:fc:9c:35:76:
b1:71:ab:af:b1:61:7a:cc:11:ca:7b:51:7e:fd:72:
cc:e6:07:46:0e:11:af:a9:fd:fe:28:25:2a:36:35:
1d:33:fb:24:b7:e0:fe:3e:8c:26:1a:aa:88:40:dc:
95:cc:c9:7c:c7:da:b6:5b:fe:18:53:37:4a:e5:4f:
f9:0c:1b:ed:a4:91:be:c7:3d:5b:64:07:d5:6e:2c:
43:46:aa:57:98:0c:2f:83:ca:f4:51:21:a7:4c:ba:
64:ff:b0:bd:0b:c0:64:9e:b9:55:72:7f:8e:ae:27:
bb:73:80:cd:60:9b:de:7d:e5:46:8c:f3:43:58:80:
c7:fe:c2:57:ef:cd:f6:5d:a6:21:c5:f2:c2:f7:f6:
c9:87:cc:23:ed:d0:13:ef:3f:37:1a:f6:94:4c:0b:
54:a1:6e:b4:b0:aa:e1:1d:1d:d9:5a:9d:3f:20:ec:
22:1a:cf:cd:7c:17:b3:e7:1a:86:3c:f2:a5:72:ff:
2f:f3:4f:72:a8:6c:0a:79:4b:42:c7:c6:c2:a7:05:
9c:7e:23:f5:06:e1:31:dd:58:82:77:1e:55:a7:ff:
12:70:cc:0c:83:82:0e:55:e7:97:c4:56:b2:ed:f4:
3f:75:8d:ea:96:d6:49:56:ef:ff:7c:23:6b:01:60:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4C:7D:E5:0A:E5:7C:E5:2B:A8:F2:31:C4:66:71:C3:0A:37:71:4D
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/e0x95QrlfOUrqPIxxGZxwwo3cU0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.144.0/24
Signature Algorithm: sha256WithRSAEncryption
69:17:ca:b3:14:15:1b:a3:df:4d:54:0b:a7:d7:5a:03:87:80:
de:4c:f5:da:31:92:64:9a:0c:af:ba:bf:5e:c5:f0:c6:e6:76:
bd:21:69:04:c6:f2:7b:d4:de:82:92:a4:5a:51:3f:06:62:b1:
27:b8:e4:a6:d7:26:8b:86:13:42:71:e5:fb:a8:46:dc:bb:2c:
49:11:23:68:0a:0c:5d:a8:30:64:dc:64:42:dc:b0:7c:fb:5b:
ca:93:ff:1a:a0:72:d8:47:71:86:a1:35:62:a7:11:48:53:9a:
bc:24:2a:aa:62:c6:7f:cb:ad:76:6c:c0:77:ed:f6:4c:f0:00:
94:e8:bc:35:70:93:c5:d5:a1:4a:70:77:86:09:f6:88:da:b6:
b7:37:91:77:08:f3:81:08:39:48:ea:12:ea:84:e6:94:87:87:
ec:6b:b7:21:47:3a:e3:5c:74:eb:70:f0:13:3f:6f:b4:b0:5e:
69:12:e1:cf:c0:72:f1:18:4b:e7:8f:aa:62:83:17:a7:fe:08:
d9:43:5d:0d:d8:00:99:6f:c6:d7:bb:e7:53:98:aa:ce:fa:be:
84:83:87:05:ea:20:32:c8:49:bf:72:a8:b4:ac:5b:8e:f2:db:
46:c4:2b:bc:31:38:80:9e:c2:b2:24:c2:e9:88:f9:0e:e3:61:
82:9c:d1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:48 2024 by rpki-client on console-ams.rpki-client.org