Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v_zjdkcvRLh_AdkdQtzBHVqkd3c.roa
File: v_zjdkcvRLh_AdkdQtzBHVqkd3c.roa (raw, json)
Hash identifier: NbVQSRMD38bzaBp22dIB1pviN8KI0EOAJtImPbiY0SU=
Subject key identifier: BF:FC:E3:76:47:2F:44:B8:7F:01:D9:1D:42:DC:C1:1D:5A:A4:77:77
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v_zjdkcvRLh_AdkdQtzBHVqkd3c.roa
Signing time: Thu 15 Sep 2022 02:36:06 +0000
ROA not before: Thu 15 Sep 2022 02:36:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.158.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BFFCE376472F44B87F01D91D42DCC11D5AA47777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:15:5b:13:7a:cb:ba:03:52:16:52:b3:78:cb:
eb:bd:04:cf:49:bc:27:fc:9d:77:94:31:d1:07:15:
bd:33:5b:e4:61:30:5f:81:d5:67:e6:47:03:6e:89:
2b:33:54:f0:e2:c5:e8:67:c0:a2:0c:14:3f:c4:40:
56:00:29:e0:5c:1e:6f:a1:00:d4:83:98:d3:9f:19:
2e:5a:77:77:0a:12:38:28:b9:9c:60:43:e5:0d:70:
74:f8:97:b6:7a:6c:c8:2b:39:bd:69:31:92:5c:41:
c7:a3:08:dd:d4:82:80:cf:28:77:44:0e:01:d8:f3:
f4:c9:85:e2:4c:7b:fa:c3:01:80:d1:2c:9e:03:05:
36:c5:82:08:70:84:5f:15:a3:22:fd:33:50:11:e5:
0c:78:c9:ed:aa:a4:1e:e0:a9:82:30:96:89:87:8a:
1f:35:98:60:fa:87:2c:93:1b:bf:ae:ed:e0:a0:7f:
7d:2a:47:06:b4:36:35:b2:38:1a:21:0e:ea:a1:f2:
ce:45:64:0e:77:56:a1:39:69:fc:8e:34:ab:ac:45:
b2:f1:22:d6:8d:a0:07:24:10:f9:51:61:67:25:f8:
ef:94:7f:fc:81:f3:11:52:d9:49:ee:b2:c1:8b:9b:
ea:3d:ab:b9:25:6a:bc:4f:58:51:4e:8d:6a:29:ed:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FC:E3:76:47:2F:44:B8:7F:01:D9:1D:42:DC:C1:1D:5A:A4:77:77
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/v_zjdkcvRLh_AdkdQtzBHVqkd3c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.208.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:b5:6f:0f:2b:b9:d9:81:8b:e2:67:6b:4f:d8:36:3b:d5:d4:
44:86:37:54:28:bd:ec:55:a0:fe:91:e8:ce:d6:39:2c:31:f2:
f7:1c:c1:84:cd:23:0f:4a:8c:4f:48:fa:cc:b4:2a:2d:70:b9:
00:e4:81:0e:90:52:37:4d:e8:44:34:49:ed:18:f5:0f:69:16:
58:80:a2:ea:96:0b:a5:10:38:b0:ff:67:7c:3c:1a:2d:69:ed:
15:8e:56:92:2e:36:1a:42:67:ab:f3:f4:6b:83:ab:3f:35:0e:
1e:05:dc:da:70:9d:63:e3:d1:d6:10:ad:c5:65:9b:ba:8e:9a:
5d:3c:c9:fd:8a:48:99:9f:5c:32:5c:12:11:33:03:f2:80:5d:
78:62:4d:6d:21:55:00:67:fc:eb:58:0d:7a:f2:dd:fa:66:83:
76:c5:ed:ad:b9:21:cb:61:a2:de:f0:9a:dc:d3:43:a6:eb:dc:
7c:e0:92:26:95:c8:d7:90:64:26:48:aa:78:40:37:55:b7:aa:
cf:c1:b6:46:8b:4b:02:09:6b:57:9e:8b:75:70:f7:86:6a:67:
cc:d4:82:5d:5f:cc:ca:f4:b5:62:1c:04:cc:5b:f4:03:9a:ba:
af:44:90:2d:81:89:7a:d2:99:37:52:a3:34:46:b1:db:a8:f1:
03:ca:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org