Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f5ZEdODYsg0FDtKv7znKutT6Tow.roa
File: f5ZEdODYsg0FDtKv7znKutT6Tow.roa (raw, json)
Hash identifier: Hp9Cyu/rDlCcMLC7TWZveLLPV77iA875p5IXYEv0/nY=
Subject key identifier: 7F:96:44:74:E0:D8:B2:0D:05:0E:D2:AF:EF:39:CA:BA:D4:FA:4E:8C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1E4B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f5ZEdODYsg0FDtKv7znKutT6Tow.roa
Signing time: Fri 01 Sep 2023 10:15:52 +0000
ROA not before: Fri 01 Sep 2023 10:15:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24164
IP address blocks: 49.158.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7755 (0x1e4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 1 10:15:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7F964474E0D8B20D050ED2AFEF39CABAD4FA4E8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:61:65:eb:79:c4:02:49:b8:53:40:8a:b4:
51:58:2b:1f:cf:91:71:e4:2c:21:aa:29:e4:13:90:
49:56:e9:5a:08:ef:d5:4b:14:41:4c:42:61:26:37:
ad:4f:9a:70:67:b1:e8:4b:f0:17:2a:bb:59:c3:d4:
ec:24:b6:53:93:eb:19:0a:56:6a:57:89:16:92:29:
7e:a2:be:26:b0:a5:c1:40:32:27:f4:93:96:a0:36:
4e:b9:46:3f:4e:36:42:04:7a:de:c8:96:c7:bc:94:
fa:1d:14:bc:ae:92:02:cd:79:e5:81:f1:14:40:29:
c7:57:e9:1d:44:3f:8c:59:bd:df:bb:11:e8:87:9e:
63:f6:8e:87:23:40:c7:f3:16:5d:e3:24:2f:d0:e0:
27:cb:21:07:a3:9e:c9:67:40:e1:7c:bc:bf:b3:df:
06:f1:84:2e:4f:a6:f4:bc:d7:47:00:c2:a4:e2:cd:
93:65:bb:89:de:66:2c:a0:03:b7:24:e7:e2:20:39:
8f:0c:12:3b:0b:40:95:22:c7:b4:e9:bb:25:e6:be:
3e:3f:8c:83:81:a2:fa:b4:70:12:c7:c3:ba:d1:e0:
1a:f5:02:db:38:10:57:db:6e:28:cc:c2:15:99:e6:
8b:48:9b:f0:2d:52:64:f8:a0:8a:ca:2c:6c:50:19:
2b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:96:44:74:E0:D8:B2:0D:05:0E:D2:AF:EF:39:CA:BA:D4:FA:4E:8C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/f5ZEdODYsg0FDtKv7znKutT6Tow.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:5f:91:6d:72:6c:6a:9d:25:ae:55:46:fb:4e:89:57:55:b2:
25:57:a9:e6:a2:93:b2:97:c7:2c:20:c8:6a:ff:ac:91:1e:45:
89:92:00:77:e4:84:6d:59:91:ca:87:52:08:46:8d:6a:b0:64:
48:27:df:36:54:04:7b:89:4d:db:38:13:83:f4:51:43:de:d7:
9d:61:98:1e:6e:0e:98:8f:30:97:7c:99:31:4a:79:a2:0e:a4:
6e:31:0f:0f:92:5e:54:57:06:19:d8:db:3f:b4:76:75:fc:c5:
1c:c9:87:4f:02:78:61:78:b9:65:d8:17:f4:8f:fe:5c:ad:39:
3c:6d:90:eb:d2:93:6e:66:00:c5:a1:e7:4e:db:e1:8f:e0:97:
c2:ec:f4:74:b9:5f:b9:00:47:02:7a:e9:4d:b6:72:d5:39:33:
6b:30:e9:a0:cf:c9:cc:23:d9:ca:1b:c7:24:11:b8:f5:a4:88:
39:71:50:56:71:8c:66:69:2b:a0:b1:34:7a:02:eb:af:a4:e6:
18:1f:29:fe:70:18:e0:b1:99:3a:58:a0:1e:69:8c:f5:ca:39:
f6:8f:a0:90:8f:36:8d:14:3d:e3:0f:cb:14:eb:55:cf:ec:8c:
60:d8:9f:e9:ec:9c:e8:0d:e0:f6:fd:bf:cd:b9:63:99:36:12:
c9:8e:22:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:50:47 2025 by rpki-client