Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tOn94_Op3a9kXQecfdcBfl6ruv0.roa
File: tOn94_Op3a9kXQecfdcBfl6ruv0.roa (raw, json)
Hash identifier: LQX7HTcf6sN1v9dxEDqhxDRbDxfR95FpqmecGF1JsMQ=
Subject key identifier: B4:E9:FD:E3:F3:A9:DD:AF:64:5D:07:9C:7D:D7:01:7E:5E:AB:BA:FD
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0FFD
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tOn94_Op3a9kXQecfdcBfl6ruv0.roa
Signing time: Sun 07 Feb 2021 12:36:59 +0000
ROA not before: Sun 07 Feb 2021 12:36:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.159.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4093 (0xffd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:36:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B4E9FDE3F3A9DDAF645D079C7DD7017E5EABBAFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:f2:f9:f3:90:8b:c5:17:53:f1:86:ad:63:
68:78:14:ac:c5:6e:cb:b4:d5:13:19:d9:58:0c:3f:
7c:ef:e4:a9:27:29:13:6f:7b:af:a8:17:d2:aa:9d:
2c:7d:14:cc:89:a3:44:d8:1f:a3:78:55:0b:51:41:
3e:b5:f2:17:fe:5c:32:95:81:d9:f8:ed:e8:8f:f8:
cd:ff:d5:05:03:a3:d8:e3:97:f4:1c:51:c9:11:9c:
1a:b4:37:11:b1:56:40:4c:45:06:68:0e:b3:e1:1e:
49:7e:9e:06:b8:14:0f:5b:b5:72:8a:8b:82:41:cc:
a6:da:17:a9:93:6a:e8:37:e3:34:4d:53:b7:de:19:
14:2a:fe:4d:0c:f9:ab:0e:a8:1d:95:63:a4:d6:58:
67:99:30:0a:cb:15:81:91:b0:91:a0:f3:08:00:36:
0a:d8:2e:67:c4:4e:8f:02:8d:8c:6d:41:80:f6:f0:
de:86:62:94:8e:31:4d:a4:11:f8:ef:d0:1f:39:81:
1f:87:15:d7:73:35:89:4f:b6:87:de:de:7c:5c:ba:
7c:ce:52:08:00:1b:51:2c:7d:37:28:4e:e5:d1:e5:
c0:ff:7e:64:67:f7:ff:b8:bb:90:1b:c2:b0:f0:15:
6c:c4:6f:d9:9d:cd:e5:c2:bd:b4:4e:23:31:b8:c5:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E9:FD:E3:F3:A9:DD:AF:64:5D:07:9C:7D:D7:01:7E:5E:AB:BA:FD
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tOn94_Op3a9kXQecfdcBfl6ruv0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.224.0/21
Signature Algorithm: sha256WithRSAEncryption
08:06:1a:24:b9:d5:3d:5b:f6:71:26:43:e2:a0:93:22:cd:5b:
3c:fb:49:de:a6:2a:b6:76:c2:ff:0a:d5:a4:9a:89:4c:1d:32:
ea:63:9b:00:5a:10:63:7f:b8:90:1e:e2:11:15:e6:3d:28:a4:
c0:40:97:16:59:89:5d:5b:4d:94:65:be:91:3d:cd:3f:2c:31:
f1:59:c6:36:9f:d7:f2:f7:ae:91:db:76:97:21:4c:d6:12:c9:
5a:fb:f2:11:ba:aa:27:66:47:18:7f:c2:bd:31:7b:e1:1e:8a:
25:38:e4:a4:0b:29:5d:eb:dd:7d:a9:8a:1f:6c:8b:1e:65:91:
0e:2e:d9:86:e1:63:50:41:bd:82:46:fe:cb:20:9b:cf:60:9c:
90:dc:8b:31:7c:55:ef:30:f2:c9:21:b6:de:fe:f4:c6:76:c5:
da:64:ca:71:21:b9:1f:6a:34:14:4e:6f:d9:39:71:7c:7a:df:
92:da:eb:98:36:81:dd:08:3a:25:0c:69:4d:e2:b1:be:1e:94:
92:47:c4:c7:c4:7e:f1:78:3a:56:d1:05:83:fb:29:d3:a9:eb:
0d:11:32:3f:89:17:9b:40:e2:34:42:5c:40:a4:1a:d0:d7:27:
b7:e8:5e:f3:06:42:70:70:fc:78:37:d2:89:1f:7c:67:4c:ad:
01:5f:47:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:52 2023 by rpki-client on console-fra.rpki-client.org