Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yOjG9d54fiMt7srkAmvSX5y00Xo.roa
File: yOjG9d54fiMt7srkAmvSX5y00Xo.roa (raw, json)
Hash identifier: qDTzxUSeOrmoq4ce687HF/sYrV7mR6VHfVRRP7GOc0E=
Subject key identifier: C8:E8:C6:F5:DE:78:7E:23:2D:EE:CA:E4:02:6B:D2:5F:9C:B4:D1:7A
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 193D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yOjG9d54fiMt7srkAmvSX5y00Xo.roa
Signing time: Sat 22 Oct 2022 06:06:16 +0000
ROA not before: Sat 22 Oct 2022 06:06:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6461 (0x193d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 06:06:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C8E8C6F5DE787E232DEECAE4026BD25F9CB4D17A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:da:24:bf:63:73:ed:6a:c9:19:de:74:87:
f5:c3:0a:69:4d:c1:60:1a:cc:4e:15:ec:63:fa:29:
53:2d:4e:28:79:20:81:39:75:3e:39:4f:02:76:40:
e6:98:a0:83:4a:fc:61:8e:fd:bd:f6:14:60:66:95:
f7:ec:9f:5e:0a:90:08:2b:b5:81:82:eb:77:0f:94:
bd:c0:78:ed:8a:b5:ac:f5:6b:ba:a7:8a:05:0a:40:
73:65:48:f0:c7:13:b0:14:49:71:8b:0f:ed:73:13:
b8:d9:a0:93:8e:89:71:69:8f:15:a6:a8:a3:8c:ce:
b8:62:e6:71:84:c2:1a:1c:1c:e1:1e:be:ed:5d:f4:
9f:53:ce:cf:26:ea:ff:43:0f:ce:0e:e3:7d:12:77:
fd:a3:4c:f2:0c:ee:6c:ad:ee:3a:b8:b4:05:46:c0:
9d:73:b0:af:f6:a4:1d:84:f9:82:a8:20:93:0a:05:
99:b9:eb:dd:87:99:78:de:c8:18:ac:ed:64:d9:85:
3d:02:de:d7:5a:4c:d4:49:5f:e9:67:a8:46:d2:b5:
5c:39:5f:31:a7:c9:84:8e:27:c7:b7:ac:9e:87:e2:
36:69:c7:12:51:8e:6c:58:7d:b3:a2:c8:b0:6b:dd:
86:34:50:cb:63:33:18:26:d6:4c:cd:d4:cf:f8:96:
d5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E8:C6:F5:DE:78:7E:23:2D:EE:CA:E4:02:6B:D2:5F:9C:B4:D1:7A
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/yOjG9d54fiMt7srkAmvSX5y00Xo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.112.0/21
Signature Algorithm: sha256WithRSAEncryption
42:5e:4b:ea:08:ec:50:05:86:8c:06:85:ef:4d:17:82:78:bc:
02:56:86:14:a6:7f:c2:aa:c3:3b:dd:cb:c3:0f:e5:06:21:9d:
ef:3b:35:9a:b9:8f:76:bf:c0:e1:82:a8:58:5d:db:eb:fa:f7:
a3:b8:c5:c1:72:bb:6d:e1:c0:24:80:91:ad:66:e0:fd:91:32:
d5:ab:f9:2f:48:dc:1f:a7:80:b9:11:4a:02:9a:55:35:91:63:
3a:0a:79:54:0a:4f:ff:2b:64:7b:ef:9e:a4:d6:cf:d5:3b:69:
d1:cb:61:95:9d:fe:0c:76:77:53:d6:07:71:86:8d:62:d6:69:
30:d9:6e:0f:71:57:c9:95:75:1d:6f:e4:ca:b3:17:2a:57:ec:
60:bf:49:8a:ca:f4:2a:fa:db:74:a5:27:e0:32:da:d9:2e:08:
00:42:13:8f:4d:06:73:83:9f:f1:ed:1c:bf:ba:53:e9:03:ca:
fa:5a:e6:aa:3b:e8:e0:78:f6:77:50:3e:64:28:79:6e:30:bb:
49:5e:4b:c7:7a:cb:31:9a:0a:70:59:30:92:e4:af:17:13:60:
62:a1:fa:63:19:22:e2:16:64:2c:b1:50:6e:3c:ae:6d:4b:1c:
aa:7d:5d:f9:29:ec:c3:0b:7f:e3:68:31:01:a8:e0:f3:e0:cd:
1c:66:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org