Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uLLbPCrAO1AUq_Y0n1cjkn5pHwk.roa
File: uLLbPCrAO1AUq_Y0n1cjkn5pHwk.roa (raw, json)
Hash identifier: Rd5x3ZM8A6li8TA6+TPqZhNrztFSzIREhkucG3I/qAA=
Subject key identifier: B8:B2:DB:3C:2A:C0:3B:50:14:AB:F6:34:9F:57:23:92:7E:69:1F:09
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B3A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uLLbPCrAO1AUq_Y0n1cjkn5pHwk.roa
Signing time: Tue 29 Sep 2020 10:08:10 +0000
ROA not before: Tue 29 Sep 2020 10:08:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2874 (0xb3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:10 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B8B2DB3C2AC03B5014ABF6349F5723927E691F09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:f0:99:5a:c9:1f:67:43:ea:cc:c6:3e:fa:
f7:5a:0b:ab:c1:88:48:a5:0c:4d:a5:00:9c:97:fc:
d0:4a:32:d3:81:da:6e:fd:28:13:71:e8:99:ba:66:
52:31:2a:6e:84:85:56:e0:e8:16:7d:14:32:14:b5:
f0:7a:d3:a8:3a:8c:a3:ec:d1:89:da:f8:d6:20:f9:
d6:2c:1b:82:9a:9e:9f:f5:fe:33:ae:94:dc:3a:c5:
fd:5c:49:96:99:3c:4b:0e:be:71:0e:83:c0:1e:d4:
89:c6:44:52:18:96:2c:c5:5d:17:32:ff:d5:f3:df:
7d:ff:eb:e2:70:4c:4c:2d:2e:c6:4f:cd:01:db:03:
be:a3:ea:55:5a:35:dd:01:1b:80:ce:01:41:2c:c8:
1d:2d:6a:e0:52:84:63:7a:d0:6d:0e:20:14:12:f0:
f8:9a:c3:b9:b1:ab:13:ef:ac:b7:47:fb:b8:88:ec:
2f:d2:fb:99:d7:9f:8a:1a:cf:45:d1:c9:9e:2b:0f:
8d:70:66:d4:02:14:45:11:ba:cf:34:fe:e4:4a:8d:
91:0d:3c:43:ba:ab:89:54:79:29:df:a9:12:3c:f1:
97:1b:15:ab:f0:7d:78:0e:38:17:d9:90:55:99:85:
d0:29:14:2a:0f:11:b8:81:ae:4b:f7:a9:78:f6:f0:
9d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B2:DB:3C:2A:C0:3B:50:14:AB:F6:34:9F:57:23:92:7E:69:1F:09
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/uLLbPCrAO1AUq_Y0n1cjkn5pHwk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.140.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:ce:9f:f2:9e:75:31:63:06:47:57:fa:2d:bb:52:85:29:9e:
02:d1:6d:42:72:dd:f0:4d:5e:45:aa:32:19:ce:d0:31:5d:cd:
0c:60:46:f8:a9:3c:e3:36:f5:c3:5d:65:30:d9:ea:bc:fd:ac:
10:e4:c5:3f:6d:77:ac:8e:0a:01:ae:35:bb:9f:85:45:05:98:
6b:1c:d9:ea:96:ac:2d:e5:ee:b3:52:7c:aa:55:43:91:97:8a:
8a:c9:38:15:a7:05:58:e2:d4:a0:d2:9a:f5:66:52:e8:ff:5e:
2f:da:f3:0b:e3:d1:19:4b:df:f8:f4:56:f8:18:d9:1a:08:a6:
8b:91:ca:35:69:e2:60:69:65:1d:ec:bb:80:32:10:c6:34:ae:
f0:b3:c5:ea:51:91:d3:b2:a1:5f:3f:61:31:72:50:27:ed:04:
aa:54:38:c3:b4:60:99:7c:a5:81:b5:4b:d6:f8:7d:7c:ba:0c:
e9:84:41:47:ad:b4:97:d4:d3:c9:56:50:18:d9:75:89:41:20:
19:de:bb:19:58:88:42:ff:1e:3f:fc:bf:c7:e6:aa:f7:d5:2e:
fc:98:fe:dc:21:32:8c:84:30:a4:96:3e:43:3a:32:23:10:aa:
0d:02:fe:14:74:e3:13:d9:da:99:00:87:3e:f8:d8:d8:4d:e5:
97:a1:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org