Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ukqPI_h7nRgg8h_a8vtmExaRf1k.roa
File: ukqPI_h7nRgg8h_a8vtmExaRf1k.roa (raw, json)
Hash identifier: weQeK5kod+Sk1/96MQ4ZgaSxRDnf6t/7aQwAPMZWNs8=
Subject key identifier: BA:4A:8F:23:F8:7B:9D:18:20:F2:1F:DA:F2:FB:66:13:16:91:7F:59
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 128A
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ukqPI_h7nRgg8h_a8vtmExaRf1k.roa
Signing time: Wed 29 Sep 2021 02:54:42 +0000
ROA not before: Wed 29 Sep 2021 02:54:42 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4746 (0x128a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:42 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BA4A8F23F87B9D1820F21FDAF2FB661316917F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:92:b5:c5:2f:0d:2b:7e:94:13:1d:39:7b:
b4:b2:d7:c5:b1:af:62:8c:17:1b:94:da:d4:e8:8a:
20:39:0c:73:23:7d:de:0e:a8:d9:d9:b7:00:fc:6c:
6a:41:cf:2f:12:93:71:97:76:b7:62:a2:30:81:91:
bd:6d:42:49:9e:e0:d2:1c:05:2e:a0:9c:e0:4c:b2:
11:9a:83:e8:c8:c6:38:2e:92:d8:c3:0f:a6:1e:94:
bc:c8:1c:e4:b4:a0:c3:db:db:4f:4e:5f:dc:e2:9c:
67:5a:7e:c6:ca:04:64:a6:a3:dc:9e:b2:3d:10:08:
69:2d:ea:84:2b:91:4b:51:3e:c5:af:96:44:c0:f1:
5f:79:0d:89:c4:c6:c7:f0:68:70:93:8f:12:2b:17:
f8:14:43:ea:44:95:b7:e1:7f:6f:4a:30:26:a0:af:
78:9b:6e:6b:1c:b7:f1:54:4e:a1:be:e1:d8:b5:7b:
e2:6b:6c:25:02:eb:1d:51:23:72:6c:25:25:60:e5:
4b:32:c7:06:1e:c9:68:20:d8:34:70:8d:ac:10:06:
3d:ba:fd:03:17:42:c0:b6:25:02:bd:f9:10:63:a5:
ae:ca:6a:b5:96:0e:77:76:5c:9c:c8:27:24:8d:20:
06:06:2b:f0:2a:6c:cf:32:5e:07:7c:7b:63:30:b0:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4A:8F:23:F8:7B:9D:18:20:F2:1F:DA:F2:FB:66:13:16:91:7F:59
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/ukqPI_h7nRgg8h_a8vtmExaRf1k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.112.0/21
Signature Algorithm: sha256WithRSAEncryption
10:f9:e2:ba:45:09:67:c3:ca:96:65:ae:cc:0e:2a:f1:2b:25:
dc:0a:36:ed:a5:d5:aa:ec:cc:1d:dc:e4:32:57:d0:25:1e:2e:
78:08:67:63:4f:c0:50:db:fa:5b:2b:ab:a5:37:37:55:b0:68:
31:7d:02:45:47:08:44:3e:55:8c:76:4a:14:a3:c6:2e:a0:c0:
2a:1b:a3:2b:5a:5b:36:14:e7:1d:60:c9:75:2c:e4:7a:52:98:
e6:db:5d:ea:ff:c3:b3:7c:9d:3f:10:46:34:f6:4c:a7:9a:f6:
5a:28:94:45:37:61:84:33:87:74:f2:5b:a9:d1:a4:f5:dd:a2:
b0:d4:bc:c7:a1:87:34:57:a3:b0:2b:19:bb:6c:4f:5e:ce:f1:
1f:6c:49:c0:be:2c:a1:a7:a0:a7:18:ad:8d:61:85:9d:3b:07:
a4:a2:08:d2:1d:ac:6d:f1:e2:f6:1c:fd:69:82:fd:6b:e7:a1:
c8:49:f3:88:a3:ec:80:36:45:27:13:d6:ac:88:00:29:6b:a9:
7e:f2:02:25:fb:cf:b7:a9:7d:af:d5:b3:24:d3:26:f4:f7:71:
60:70:99:75:63:0a:82:fa:d5:ec:49:b3:11:60:0f:7c:be:ff:
3d:d5:f8:29:b0:74:19:63:8c:be:05:27:e3:58:f7:4b:a4:98:
e9:fa:f4:ac
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0NDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEJBNEE4RjIzRjg3QjlE
MTgyMEYyMUZEQUYyRkI2NjEzMTY5MTdGNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxq5K1xS8NK36UEx05e7Sy18Wxr2KMFxuU2tToiiA5DHMjfd4O
qNnZtwD8bGpBzy8Sk3GXdrdiojCBkb1tQkme4NIcBS6gnOBMshGag+jIxjguktjD
D6YelLzIHOS0oMPb209OX9zinGdafsbKBGSmo9yesj0QCGkt6oQrkUtRPsWvlkTA
8V95DYnExsfwaHCTjxIrF/gUQ+pElbfhf29KMCagr3ibbmsct/FUTqG+4di1e+Jr
bCUC6x1RI3JsJSVg5UsyxwYeyWgg2DRwjawQBj26/QMXQsC2JQK9+RBjpa7KarWW
Dnd2XJzIJySNIAYGK/AqbM8yXgd8e2MwsMcjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUukqPI/h7nRgg8h/a8vtmExaRf1kwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL3VrcVBJX2g3blJnZzhoX2E4
dnRtRXhhUmYxay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nnAwDQYJKoZIhvcNAQELBQADggEBABD54rpFCWfDypZlrswOKvErJdwKNu2l1ars
zB3c5DJX0CUeLngIZ2NPwFDb+lsrq6U3N1WwaDF9AkVHCEQ+VYx2ShSjxi6gwCob
oytaWzYU5x1gyXUs5HpSmObbXer/w7N8nT8QRjT2TKea9loolEU3YYQzh3TyW6nR
pPXdorDUvMehhzRXo7ArGbtsT17O8R9sScC+LKGnoKcYrY1hhZ07B6SiCNIdrG3x
4vYc/WmC/WvnochJ84ij7IA2RScT1qyIAClrqX7yAiX7z7epfa/VsyTTJvT3cWBw
mXVjCoL61exJsxFgD3y+/z3V+CmwdBljjL4FJ+NY90ukmOn69Kw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org