Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tQkHtfcY7os1MpEo8p3rujuCpgc.roa
File: tQkHtfcY7os1MpEo8p3rujuCpgc.roa (raw, json)
Hash identifier: 26x0Y3kXxH7Aj8q+jdGo1r0BYlGTn+8Zmp+mBIwv4cQ=
Subject key identifier: B5:09:07:B5:F7:18:EE:8B:35:32:91:28:F2:9D:EB:BA:3B:82:A6:07
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12B2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tQkHtfcY7os1MpEo8p3rujuCpgc.roa
Signing time: Wed 29 Sep 2021 02:54:51 +0000
ROA not before: Wed 29 Sep 2021 02:54:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.159.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4786 (0x12b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B50907B5F718EE8B35329128F29DEBBA3B82A607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:60:fe:35:04:0e:46:37:60:b6:fa:f9:ac:
b8:a6:26:4f:34:62:df:66:6d:b8:07:4e:f1:17:79:
be:22:57:24:89:f2:ef:f0:13:df:a7:af:9c:9d:3a:
27:f5:a8:d8:0c:d9:87:2e:4a:ca:c6:b0:8c:02:31:
65:7b:86:ee:de:2e:cc:0f:f5:5d:fa:23:ef:22:88:
7a:cd:c8:bb:d0:2c:fd:68:ee:5a:72:c7:61:fe:df:
2f:fa:b2:05:57:cd:5d:40:81:f7:40:ad:48:5a:24:
42:96:8d:b8:52:2c:b1:64:3a:28:8d:c9:56:9a:73:
fa:76:22:bd:75:52:b6:1a:b9:2e:a7:31:2b:c2:46:
1a:47:a0:26:de:1b:7b:85:6f:df:7f:ce:4c:21:78:
9e:6b:1a:fd:1e:2a:0b:f6:18:44:88:47:a7:13:fb:
93:c2:da:42:5b:8a:e8:da:b7:21:85:4a:38:a2:10:
37:88:43:19:ef:d1:d9:17:41:d1:14:af:74:74:ca:
de:4d:9d:7d:b3:38:1f:7d:0c:08:b1:a0:08:44:1c:
77:bc:13:31:15:a7:5b:79:eb:4b:ed:11:70:e4:68:
3a:24:f7:7c:f9:06:84:24:33:21:fd:d2:c2:e1:fd:
f2:3c:ea:ae:a1:f7:15:9f:e9:d5:33:27:ed:f7:e1:
86:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:09:07:B5:F7:18:EE:8B:35:32:91:28:F2:9D:EB:BA:3B:82:A6:07
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/tQkHtfcY7os1MpEo8p3rujuCpgc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:50:ae:cc:ad:2d:bd:bc:a5:72:09:f5:53:b1:c0:57:04:d8:
27:d0:48:50:1f:f4:85:2a:ed:39:19:52:29:fc:87:31:58:51:
a5:40:fe:02:28:a8:cf:ce:1e:72:f4:b2:5f:b0:92:f2:77:11:
02:87:90:81:20:98:58:72:58:3d:3c:3f:11:9c:09:da:0c:43:
7d:21:38:79:90:63:7b:ea:da:b3:27:aa:e8:7d:72:fe:02:c1:
00:a4:be:24:78:5e:5e:ab:d3:f3:fc:1c:f6:a7:6e:7e:18:4e:
ee:bd:16:82:e7:e9:36:58:64:95:f7:ba:17:ad:b9:33:a9:c4:
e7:85:66:be:c7:21:95:4c:f6:8c:73:48:98:38:02:f6:ba:8b:
1a:32:f4:3b:cf:4f:15:ff:03:6a:af:0d:7f:04:15:bb:36:70:
cc:7d:3f:73:af:e6:18:27:b5:45:8a:28:c3:c2:ec:e4:6f:09:
48:05:ce:2c:61:df:c6:8f:45:59:e7:c1:05:5c:84:3a:40:cd:
31:22:06:87:c8:e8:ac:4d:d3:f6:d4:f7:e1:3f:d0:b0:31:b6:
a7:16:24:b7:8d:5f:92:dd:70:45:7e:2b:06:0c:58:08:74:e8:
a0:9e:a1:60:46:a8:1f:f8:d7:b6:6d:c6:09:9d:ba:9c:cb:94:
54:05:ff:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org