Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zcm4L4z3HHPXKwXVR2AK3aj0Y-4.roa
File: zcm4L4z3HHPXKwXVR2AK3aj0Y-4.roa (raw, json)
Hash identifier: faxPdlcWDPgvaMggoCO5EnNNJ2cvuAqyvdYZWg0tMfM=
Subject key identifier: CD:C9:B8:2F:8C:F7:1C:73:D7:2B:05:D5:47:60:0A:DD:A8:F4:63:EE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0F05
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zcm4L4z3HHPXKwXVR2AK3aj0Y-4.roa
Signing time: Sun 07 Feb 2021 12:32:35 +0000
ROA not before: Sun 07 Feb 2021 12:32:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3845 (0xf05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Feb 7 12:32:35 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CDC9B82F8CF71C73D72B05D547600ADDA8F463EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5e:5c:77:f5:92:d7:b4:40:b6:41:5e:77:12:
03:0a:d3:5c:21:43:bd:72:c3:2d:d2:37:ea:87:86:
f0:17:3b:37:7f:9a:7f:54:2b:27:cb:01:91:c6:8d:
fb:3b:e2:a0:63:d9:7b:19:84:09:72:d8:bd:78:01:
a0:12:96:1c:ca:16:e1:4a:ce:9b:7f:13:cb:90:24:
0d:ac:19:b2:c5:72:f0:57:2d:58:bc:b7:ec:a0:c8:
10:5b:76:b9:bb:77:1f:c6:58:a0:8d:bb:08:83:b1:
51:5b:ac:6c:8d:46:9e:86:69:af:b5:7a:4c:c7:6c:
10:b9:4a:4d:1e:a8:b2:88:ad:39:ac:76:66:b8:23:
83:07:b7:a3:a2:d2:1d:12:18:17:1f:f9:ac:f5:12:
09:a2:c7:e7:2a:5e:be:e7:40:0e:ab:67:a3:31:93:
61:a1:52:84:5c:6f:2b:ab:f5:9d:45:f9:fc:2b:d3:
18:62:6f:af:2a:80:07:6b:27:78:29:e9:3d:bc:5e:
b9:3a:77:6c:a5:f7:79:1f:e9:e6:0d:9c:c3:7f:69:
99:7c:13:c6:13:b8:8e:98:e8:b9:33:f4:e9:61:09:
43:60:14:94:61:25:d3:5b:c7:7f:14:af:bc:1f:cc:
42:de:83:b7:5b:fa:98:ae:65:fc:38:8f:c7:37:90:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C9:B8:2F:8C:F7:1C:73:D7:2B:05:D5:47:60:0A:DD:A8:F4:63:EE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/zcm4L4z3HHPXKwXVR2AK3aj0Y-4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.88.0/21
Signature Algorithm: sha256WithRSAEncryption
22:1d:03:d2:89:e0:62:d7:c2:6d:43:a5:87:40:f3:b3:d4:ee:
3e:c0:1b:7d:fe:fa:ab:13:66:ae:10:10:53:bc:8b:65:77:64:
9d:3b:7c:bd:bc:8e:d0:90:d1:d0:4c:06:ce:e9:79:06:5d:16:
38:91:c1:77:37:d0:82:08:17:b8:97:4f:42:6f:b5:95:b5:de:
e7:29:91:e0:62:51:0f:6b:b8:d2:ac:2a:20:6c:8d:b1:9f:91:
90:79:1d:76:4a:62:4c:bb:02:cd:82:7b:5f:90:03:c9:25:b7:
08:f9:50:3b:bd:4a:21:92:01:83:64:33:9e:87:42:da:08:40:
cb:a3:39:a2:dd:7b:ac:79:76:90:a7:e1:77:20:60:9c:25:08:
b6:4a:8b:71:23:4c:da:8f:d5:29:67:89:05:21:45:2b:e7:53:
2d:be:d3:29:3b:d0:bf:4d:ad:36:fe:51:c5:95:a4:f2:74:ec:
25:b0:b4:a9:82:2e:3a:49:51:49:fe:57:be:b5:07:ea:99:dd:
6b:73:51:05:a4:96:b0:43:18:90:d8:b5:f1:4c:a7:87:50:f6:
dd:ea:b8:70:3d:ed:2f:62:78:dc:4f:e4:dc:6b:83:95:d3:fb:
b8:26:53:6e:85:4c:4d:a3:f5:c6:7b:0a:de:e2:09:f5:22:10:
76:63:cb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:42 2023 by rpki-client on console-ams.rpki-client.org