Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g2rnRBMBhJ6Xk-QJ00TvkTCk8YM.roa
File: g2rnRBMBhJ6Xk-QJ00TvkTCk8YM.roa (raw, json)
Hash identifier: lo30JcncXiXBGpI74B0Gfazcv/9ljs03hdE+y+gvqkg=
Subject key identifier: 83:6A:E7:44:13:01:84:9E:97:93:E4:09:D3:44:EF:91:30:A4:F1:83
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AD3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g2rnRBMBhJ6Xk-QJ00TvkTCk8YM.roa
Signing time: Tue 29 Sep 2020 10:07:41 +0000
ROA not before: Tue 29 Sep 2020 10:07:41 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2771 (0xad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:41 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=836AE7441301849E9793E409D344EF9130A4F183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:2b:88:a5:78:c6:0c:a3:65:e5:0a:14:25:
fb:cc:fc:b6:da:b7:49:89:aa:b1:7f:64:5f:e1:b5:
24:e4:2c:23:4e:0d:3c:9b:d6:31:f2:f8:96:f6:60:
d4:aa:60:82:0c:ef:ee:70:be:10:ac:0f:e2:eb:bd:
b3:ea:fd:d0:41:35:9a:d4:f9:9f:58:be:9f:60:36:
b9:c3:da:32:cc:ab:c0:c0:e9:94:07:42:c8:1b:30:
e5:9f:01:79:7f:15:d9:d2:f5:63:79:7a:da:5d:cf:
a1:3c:ee:fd:04:24:ce:b1:5d:90:55:8c:07:df:2c:
f4:b2:8d:c1:43:cf:ff:7d:75:4e:13:e7:00:e3:a0:
c2:30:68:78:71:6a:07:5c:65:14:a0:ef:45:bb:b4:
da:a1:34:20:78:1d:99:bf:21:85:13:f0:1f:22:3b:
7c:09:11:7f:78:ac:dd:b5:a8:75:08:c4:ee:0d:b1:
ac:63:e6:93:34:eb:5e:db:77:4c:95:6c:27:78:cd:
82:8f:b0:bd:a7:4b:8c:c5:61:ed:93:96:25:11:0c:
c8:da:70:15:ce:c4:a2:05:b5:16:a5:c7:be:b9:2c:
83:b9:f7:c0:63:37:52:67:74:14:df:b4:7a:dd:3d:
e6:05:25:6d:49:65:d2:fa:26:af:e4:c7:0e:fb:84:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:6A:E7:44:13:01:84:9E:97:93:E4:09:D3:44:EF:91:30:A4:F1:83
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/g2rnRBMBhJ6Xk-QJ00TvkTCk8YM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.112.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:f2:e6:1b:22:0c:0d:dd:87:be:54:86:a3:89:f3:8a:f2:57:
74:51:7a:9b:71:ef:b7:0d:dc:9f:6d:32:d1:67:cc:d6:44:41:
55:51:a7:8b:a6:08:20:d5:ee:7b:ab:e1:2c:17:91:3f:66:6c:
dc:30:10:c3:b1:ba:0d:7a:19:4f:1a:a0:6b:74:ff:97:f2:42:
52:7d:89:dd:83:4e:07:09:0c:8f:c2:35:d2:02:88:9d:67:94:
c7:b4:e5:0f:cc:56:f0:6a:86:f5:3c:2c:93:63:9d:b2:95:c2:
a5:c9:97:3e:4c:08:3a:07:fe:16:a9:07:c5:51:18:2f:58:6d:
f5:fd:6d:13:94:16:2e:08:4a:16:42:98:ca:e2:43:0b:9a:22:
78:cb:4b:fa:87:05:c9:90:7b:44:aa:39:46:95:e6:0e:8f:77:
4d:d4:b9:07:0c:57:8d:fc:0a:eb:c8:c8:7d:3c:59:7c:ba:76:
9f:b5:c2:dc:ad:cd:0c:09:a0:d6:7c:2d:16:6e:9d:a0:5e:d6:
9f:f1:38:de:cd:c9:d0:66:92:02:d0:45:27:ea:e4:d7:53:64:
53:76:fd:13:fa:72:7d:9b:8c:b5:59:87:26:f5:d8:f2:89:c4:
d3:10:07:93:16:ca:c9:4f:b9:3f:ee:ea:16:07:30:41:3d:bc:
5c:b1:69:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:39 2023 by rpki-client on console-ams.rpki-client.org