Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xy6ZwG56nq5JW4vXH-vs5q2AVTY.roa
File: xy6ZwG56nq5JW4vXH-vs5q2AVTY.roa (raw, json)
Hash identifier: PgxFRyUaXLqmEIY+pM6cl+QqD5QzBnT0KaSQSVII21M=
Subject key identifier: C7:2E:99:C0:6E:7A:9E:AE:49:5B:8B:D7:1F:EB:EC:E6:AD:80:55:36
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xy6ZwG56nq5JW4vXH-vs5q2AVTY.roa
Signing time: Thu 15 Sep 2022 02:36:24 +0000
ROA not before: Thu 15 Sep 2022 02:36:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24163
IP address blocks: 49.158.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C72E99C06E7A9EAE495B8BD71FEBECE6AD805536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:d6:98:84:a7:04:38:95:55:83:ce:d7:00:
f8:b8:28:c7:39:bd:d8:fe:59:5a:7d:31:fe:dc:8c:
5a:bb:57:90:e3:5b:c1:6e:9d:87:79:24:dc:a1:23:
06:eb:fb:b4:61:cf:4d:be:43:b8:ce:3a:1c:18:72:
6b:c6:e7:42:e7:df:e4:96:74:3c:70:b3:18:8e:25:
b5:7d:66:df:67:90:4e:00:7c:34:30:90:4e:cb:b7:
be:22:95:68:e6:f9:ce:b6:99:ce:5e:03:7d:f3:65:
aa:07:c7:aa:64:f1:fb:bd:23:09:2b:db:64:2e:d9:
bb:9e:bd:98:f1:0e:1b:99:5b:71:9d:c0:7c:b9:4c:
bc:8f:0d:ad:9a:8e:33:8e:a4:39:88:1b:75:2b:05:
d7:45:69:08:0e:7f:cd:a7:1b:1c:13:be:27:a2:cf:
c3:a6:3d:05:95:a9:07:93:5d:a7:3d:a0:fc:50:84:
9d:77:b3:6e:d5:58:6c:f3:1e:0f:24:9d:82:95:41:
0b:75:82:37:4e:32:d2:99:09:86:b3:09:4c:ac:94:
19:1e:6d:b3:ac:f6:08:9e:b0:0f:b7:36:5b:1c:f7:
ef:d2:b8:28:88:37:21:4a:18:f3:f9:40:af:41:3e:
da:1f:e2:07:a9:9f:77:82:d1:5b:2b:81:c4:1f:84:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2E:99:C0:6E:7A:9E:AE:49:5B:8B:D7:1F:EB:EC:E6:AD:80:55:36
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/xy6ZwG56nq5JW4vXH-vs5q2AVTY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.148.0/22
Signature Algorithm: sha256WithRSAEncryption
82:0d:bf:ed:f0:a7:5b:30:4b:c9:15:1e:13:a0:33:56:e4:b7:
53:38:98:83:1c:1c:de:00:c4:33:b4:47:f6:fe:c5:42:56:cc:
8f:77:05:1c:50:e4:1f:0e:8b:b8:91:a4:10:1a:2b:75:a2:6b:
64:6b:22:09:7d:af:23:25:31:45:37:b7:7c:52:5a:3e:3e:d8:
48:aa:34:4d:0a:d0:94:0c:79:6f:ab:1f:99:27:ba:8c:11:f4:
2b:c0:48:66:ee:5f:7d:20:8c:40:4f:39:0f:70:bb:fb:59:d9:
6e:0e:22:9e:c8:f7:37:d9:45:dd:44:cf:fc:99:11:b6:bb:e5:
20:46:2b:a8:ad:01:ce:64:65:4b:82:d5:4f:dc:6f:b8:7b:91:
0b:2a:29:2f:fd:32:98:92:63:13:2c:de:6b:99:d9:5b:69:d7:
7f:39:aa:32:c8:12:08:cd:f4:19:df:79:0e:c1:94:5c:3b:89:
23:04:88:0e:38:56:41:0b:2c:1f:3c:4e:a5:10:57:36:2e:f2:
9e:ea:f0:3f:5e:6a:86:52:ca:78:7a:c4:3f:85:4b:da:4e:bf:
4b:e8:9e:94:14:28:e1:af:c7:0b:e2:d1:e1:b3:31:a9:ef:c6:
fd:57:a9:51:80:39:6d:d1:7b:88:51:54:b7:e7:cf:6d:ca:40:
f4:80:21:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:50 2024 by rpki-client on console-ams.rpki-client.org