Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x4c3RDiLKt83H3VhZl6lnTMBDaA.roa
File: x4c3RDiLKt83H3VhZl6lnTMBDaA.roa (raw, json)
Hash identifier: 17PPCFhON8fFQ8BXNXs1WaOYjf4bYl/cGdWiyWh0+6I=
Subject key identifier: C7:87:37:44:38:8B:2A:DF:37:1F:75:61:66:5E:A5:9D:33:01:0D:A0
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 190E
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x4c3RDiLKt83H3VhZl6lnTMBDaA.roa
Signing time: Sat 22 Oct 2022 06:06:03 +0000
ROA not before: Sat 22 Oct 2022 06:06:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.158.192.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6414 (0x190e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C7873744388B2ADF371F7561665EA59D33010DA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:2d:c7:04:17:3e:02:8e:a9:c3:7b:de:19:
65:dd:5e:02:a0:ec:8e:ad:46:c3:3a:c9:18:9a:1b:
d5:54:33:9d:8d:0a:be:dd:bd:5b:66:a7:1d:59:fb:
65:c9:02:dc:48:27:a0:79:19:9d:11:71:c6:4d:c2:
f2:6c:9e:ba:12:8b:1a:89:01:34:18:e7:95:6b:b1:
b9:80:0c:7c:84:f2:66:c9:97:77:4f:7b:39:b0:57:
d7:68:8a:c6:38:36:3a:2f:93:c5:65:fe:a7:41:73:
b2:c6:2a:f3:a0:b8:19:5d:f7:e5:4c:1e:06:be:77:
9f:ce:35:fa:76:a8:46:89:26:15:7e:6d:12:e8:ea:
01:41:32:f6:5a:77:39:39:fa:9a:b7:55:2b:2b:fa:
44:68:3b:bf:3e:6e:af:17:39:4b:3e:eb:ad:55:a4:
28:f1:d2:31:60:69:a9:3c:bf:48:79:3c:1c:bd:1a:
ec:cc:59:14:83:a9:bf:22:38:9f:09:e6:34:94:2c:
4a:87:e7:37:de:62:aa:99:22:c3:18:54:7b:4e:6b:
57:4a:1c:e6:e3:79:4e:46:b0:27:aa:aa:59:97:18:
f3:a0:20:2b:85:a8:51:91:8b:8a:77:45:b4:a6:64:
c2:10:73:96:6f:ee:4e:fc:03:c2:13:91:91:e5:81:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:87:37:44:38:8B:2A:DF:37:1F:75:61:66:5E:A5:9D:33:01:0D:A0
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/x4c3RDiLKt83H3VhZl6lnTMBDaA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.192.0/20
Signature Algorithm: sha256WithRSAEncryption
90:61:dc:21:f2:19:a5:90:71:fd:e5:75:cb:9b:95:f2:52:8c:
dd:48:23:b2:0e:e9:ce:23:22:a0:2f:63:eb:74:46:d9:bd:36:
81:81:a3:e6:47:5f:1a:c9:86:57:0b:b0:06:a4:3f:dd:ca:e7:
3a:ee:53:29:28:40:25:31:92:54:9f:f4:fd:2f:1c:ea:c9:8e:
70:b6:03:98:0d:13:57:84:8a:ba:d0:11:12:31:e4:1e:d2:16:
3c:67:72:53:32:4b:60:03:da:b4:8d:4b:81:08:a5:47:ec:fe:
b6:53:76:b8:9d:11:a3:4e:ee:3c:3b:27:af:0a:07:18:8a:6a:
f6:c1:4e:a4:f1:52:cb:7a:8c:76:d8:96:c2:12:22:b8:64:85:
9e:73:bd:fa:e1:ff:6a:dc:c9:9e:ad:33:eb:d2:ec:a6:ed:25:
e5:33:53:a9:dd:9b:50:ed:30:15:45:e8:64:b3:04:4e:d3:db:
c7:21:8f:e4:8b:34:e2:b1:14:47:d8:27:e5:25:4b:7b:3c:68:
df:0a:2b:80:3c:07:c2:5d:3f:f7:1d:0d:f0:90:85:30:e0:7f:
1c:69:2d:22:70:0a:3c:ae:70:40:6d:ad:ec:fd:90:a7:7e:15:
be:b5:38:3b:f9:94:34:f8:58:c5:81:2e:38:0d:50:7c:a2:f3:
c1:f7:64:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org