Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yBbB04iY8ONwhbpjeDnMw-x_0mw.roa
File: yBbB04iY8ONwhbpjeDnMw-x_0mw.roa (raw, json)
Hash identifier: UUF1aKyCbcE9Gx4BW67BD6hzMPSXQ8+BtXRNUHBbfMU=
Subject key identifier: C8:16:C1:D3:88:98:F0:E3:70:85:BA:63:78:39:CC:C3:EC:7F:D2:6C
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0BB0
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yBbB04iY8ONwhbpjeDnMw-x_0mw.roa
Signing time: Tue 29 Sep 2020 10:08:43 +0000
ROA not before: Tue 29 Sep 2020 10:08:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2992 (0xbb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:43 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C816C1D38898F0E37085BA637839CCC3EC7FD26C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:6e:ef:47:4a:2a:b4:08:97:4a:9f:d1:50:
20:c8:49:2f:86:75:e3:fe:21:7d:32:89:8e:bf:a1:
82:08:f4:40:54:e5:70:03:a8:c8:df:1c:fb:07:1c:
9b:65:16:92:c9:d9:e7:b0:a9:37:6d:09:56:ed:6b:
1a:09:5c:50:53:1c:67:c3:38:ec:a0:61:db:ec:79:
d6:86:bb:d2:0c:50:3e:94:44:d9:96:61:86:00:40:
2d:ce:b7:0f:36:ad:c3:30:26:5c:99:d9:fe:66:64:
72:47:42:a5:bb:3c:f8:78:35:2c:90:89:51:e6:32:
74:1d:28:ba:19:1f:34:54:db:a8:2e:fd:a1:4f:db:
55:27:40:18:e4:a6:0e:1c:b8:70:1d:66:e4:c3:f5:
f1:b8:35:ba:9b:bb:a9:61:79:18:39:fb:f5:9b:e5:
4a:67:e2:e8:67:2a:b9:35:8d:ce:62:c3:e5:56:ac:
04:7f:08:40:ba:a7:6d:bf:9f:43:b8:51:8a:84:68:
5d:b6:ca:36:ed:7a:fb:5c:42:15:4d:90:de:4b:9e:
f7:43:31:fb:49:7d:47:c6:f1:99:07:82:a1:65:9c:
4e:1d:5f:a3:fa:aa:61:35:6f:19:2f:bb:09:c7:c1:
ff:a6:1f:19:8e:5b:43:f5:79:45:29:db:e8:bc:30:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:16:C1:D3:88:98:F0:E3:70:85:BA:63:78:39:CC:C3:EC:7F:D2:6C
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yBbB04iY8ONwhbpjeDnMw-x_0mw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.0.0/20
Signature Algorithm: sha256WithRSAEncryption
59:d4:ff:47:9d:1b:d3:a9:5d:03:37:92:8d:2a:6d:eb:20:f9:
40:26:2b:7f:2a:d9:f5:75:83:9b:a6:01:ea:64:3a:fb:17:fa:
29:81:20:7f:d3:af:dd:fe:61:53:f7:bb:60:e1:6e:d3:45:b9:
78:52:55:27:90:c3:0c:72:6a:88:13:8f:31:5d:50:65:6a:22:
99:b1:2e:19:e1:2f:8e:f9:8f:bb:6b:69:76:da:df:12:34:5c:
82:e4:0d:f5:05:0b:c5:b9:d6:8c:39:43:86:1d:8e:04:1f:c7:
cc:85:74:b2:95:e1:a0:07:e2:d2:00:df:15:01:28:a3:95:9b:
a0:69:56:b0:a2:b1:ba:34:d7:7f:7d:f4:13:23:b6:8a:32:26:
5a:f4:98:ab:a6:92:33:0d:79:0c:1b:b9:2c:7e:06:df:8f:71:
ce:ca:30:85:e1:cf:3b:7d:5c:d5:73:ad:95:7a:78:44:32:c1:
55:d4:c2:22:3f:7a:83:a0:2b:69:b4:0a:63:fa:3b:5a:08:4c:
61:9d:d5:65:c6:0d:15:f3:cf:4e:75:ed:d9:a8:da:50:e3:47:
bf:ef:47:f9:33:ad:c5:71:88:3c:ca:08:3e:17:7d:ac:72:32:
e0:49:76:ca:7c:54:fa:39:c9:1c:e6:eb:7d:01:15:9b:d7:7b:
4b:2e:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org