Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sLBE4X75-SO5dl0Eye_sKd0_o5Q.roa
File: sLBE4X75-SO5dl0Eye_sKd0_o5Q.roa (raw, json)
Hash identifier: mEF91TJqR/sbstaJX6+AveafQ7mamKMttrCfkv690a0=
Subject key identifier: B0:B0:44:E1:7E:F9:F9:23:B9:76:5D:04:C9:EF:EC:29:DD:3F:A3:94
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sLBE4X75-SO5dl0Eye_sKd0_o5Q.roa
Signing time: Thu 15 Sep 2022 02:36:27 +0000
ROA not before: Thu 15 Sep 2022 02:36:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B0B044E17EF9F923B9765D04C9EFEC29DD3FA394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5b:18:a8:d1:7a:5e:7c:93:66:bf:39:ce:37:
94:e7:75:67:90:ee:f1:85:4e:c2:d0:47:fe:7e:46:
e1:1b:ef:29:8a:a1:9f:89:79:5a:ca:68:db:6d:b0:
b4:e1:6d:6f:61:10:37:63:72:cb:14:0e:2e:2f:10:
52:2b:7f:d2:12:29:71:f3:67:f7:b3:5b:48:12:8f:
2b:54:bb:dc:35:32:98:73:1d:bf:73:70:ba:fc:55:
3c:98:be:38:93:32:0c:f2:6c:9d:be:be:6a:31:aa:
e3:52:6a:32:c0:42:49:0b:55:d6:1e:1f:38:aa:ce:
96:85:30:d8:76:44:16:18:2b:40:e8:95:5e:c5:46:
2e:b7:d3:1e:c3:b7:2f:80:bc:0c:e4:7c:f4:ff:80:
56:cd:53:09:a5:68:2c:e5:1f:a3:08:76:00:b0:86:
94:d3:11:6b:21:04:16:b5:be:54:9d:cc:a4:cc:45:
da:93:6e:0a:82:08:43:1f:6e:ba:58:19:10:6b:66:
b0:0d:c0:60:4c:dc:a2:9c:53:6d:8b:28:98:c5:7d:
2f:aa:12:43:93:9f:fa:88:df:5e:db:5c:28:5c:80:
9e:74:4f:b1:d6:99:82:79:68:0a:b7:20:2b:30:e6:
81:e9:a0:d5:57:96:72:f3:19:26:6a:7c:65:6e:cc:
a7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B0:44:E1:7E:F9:F9:23:B9:76:5D:04:C9:EF:EC:29:DD:3F:A3:94
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/sLBE4X75-SO5dl0Eye_sKd0_o5Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.176.0/21
Signature Algorithm: sha256WithRSAEncryption
92:4a:da:51:03:70:f0:24:4e:a8:57:fc:1b:d4:47:8c:28:7d:
4d:96:1f:b8:7f:1c:1e:6f:13:f7:41:99:bc:27:35:89:a0:a6:
e6:46:c9:da:db:16:a8:77:0d:f4:33:eb:4b:0d:14:f1:57:90:
56:a1:7b:0c:ef:9c:6d:43:59:72:5b:e3:ac:c2:af:be:1e:51:
29:d0:c1:a2:30:eb:e2:f1:3f:e0:b1:a7:22:1a:ad:fd:ed:25:
50:78:ed:b6:13:cd:65:3f:11:09:21:06:d1:66:6d:aa:0f:33:
e8:31:f7:16:5f:3b:b3:d3:1f:73:1f:7f:1a:e0:30:bb:e6:ac:
76:06:01:02:08:22:51:67:34:ee:78:bc:32:b2:c6:4c:bd:33:
3a:db:99:6d:4f:f3:4d:9d:80:78:c8:79:1f:91:f9:8f:7b:ad:
63:39:b6:55:3a:33:96:c7:64:0c:fc:3c:e8:e2:63:db:89:22:
94:d2:98:b2:42:43:70:e7:11:ce:f9:e8:40:b9:78:af:c6:c7:
25:d9:fb:a8:bb:b6:4b:91:35:6e:df:80:dc:bc:5a:76:6f:87:
51:90:fb:3f:f1:e5:04:d7:b0:0d:dd:7b:7d:dd:a4:53:5b:94:
56:8a:c0:3f:9d:c1:7a:88:06:23:e9:e3:34:a2:2a:f1:f8:df:
38:33:21:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org