Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-9IZyz53au2C034mmV6GQ7DggYE.roa
File: -9IZyz53au2C034mmV6GQ7DggYE.roa (raw, json)
Hash identifier: ZvxZowGWjXJo7gqlO7u9kPFCaTahkXY/KhT7uUyydNQ=
Subject key identifier: FB:D2:19:CB:3E:77:6A:ED:82:D3:7E:26:99:5E:86:43:B0:E0:81:81
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AFA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-9IZyz53au2C034mmV6GQ7DggYE.roa
Signing time: Tue 29 Sep 2020 10:07:51 +0000
ROA not before: Tue 29 Sep 2020 10:07:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 61.60.214.96/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2810 (0xafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:51 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FBD219CB3E776AED82D37E26995E8643B0E08181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:a3:df:fe:42:5f:7a:cc:74:88:e2:68:7b:
07:ff:0e:d8:21:11:09:13:b9:87:53:a4:76:95:7f:
d4:b9:8c:57:33:9d:88:ad:bc:46:c7:40:f9:ea:34:
52:a0:f3:ad:ab:37:b3:6f:f6:d3:de:df:5b:a1:ff:
e3:fd:17:84:4d:dc:20:39:2d:78:00:f6:e6:91:3c:
46:4e:88:5d:4f:b3:02:8a:69:8f:67:42:20:5b:2f:
4f:b5:88:46:11:5d:45:10:16:7f:97:ff:bc:2c:81:
10:67:35:a8:89:29:8c:19:79:08:1c:bc:6b:66:8b:
33:6f:83:8b:3c:e2:d3:59:52:df:c3:52:9c:77:18:
f3:cb:4f:c2:ae:e7:d8:36:89:a1:50:7b:00:8d:48:
61:0b:3b:83:a5:e5:ce:7a:2c:cc:55:59:aa:4f:a0:
b4:59:2e:78:c0:6e:56:ae:e6:bd:f2:4f:9c:28:d2:
32:c8:e8:2a:12:8c:10:f3:99:90:8b:19:1a:60:4b:
aa:23:b5:d4:c9:0c:cd:99:06:86:9e:87:84:9c:25:
43:99:0d:9f:47:fc:7f:f1:a3:99:86:1a:18:86:2d:
0b:e8:5e:7b:aa:8d:2a:c4:b8:73:0d:1e:9e:dd:0b:
6c:7a:5b:2b:82:57:6a:ac:55:5a:16:d5:c9:d2:c5:
4d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D2:19:CB:3E:77:6A:ED:82:D3:7E:26:99:5E:86:43:B0:E0:81:81
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/-9IZyz53au2C034mmV6GQ7DggYE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.214.96/28
Signature Algorithm: sha256WithRSAEncryption
83:58:98:d8:33:de:96:d5:67:f5:a6:d9:96:27:fb:3c:03:a2:
83:d2:cf:78:39:e8:be:4c:b8:7b:01:46:84:b9:d8:82:dc:18:
2b:d4:7c:42:76:96:2a:ac:eb:60:26:da:76:d5:f0:0f:99:9c:
62:7c:d5:d6:a9:ff:27:2a:2f:41:8c:cf:c3:b0:d8:a4:c6:be:
1c:a5:e4:88:df:36:1e:51:df:27:b3:ce:12:01:3b:ed:31:16:
6b:b6:76:fc:f8:e1:ff:81:dc:38:13:52:bd:91:99:25:ad:db:
76:36:0b:fa:d5:6f:93:1d:7b:48:fa:8f:6e:70:d6:fc:5c:c7:
59:64:7d:ae:2c:df:d2:6a:f7:f2:9b:d3:7c:59:10:0b:c9:aa:
23:9e:d4:71:58:f6:0e:79:a7:86:22:b7:05:a0:c5:6a:90:e1:
07:0f:6e:d1:08:0c:d6:a3:96:90:32:76:65:ff:32:80:e0:bb:
cd:5f:69:46:90:9f:21:57:96:b3:eb:5c:f1:a6:e1:c5:9f:48:
66:a3:6e:e7:d1:c3:d7:f5:60:a2:0c:80:e7:18:be:cd:30:cd:
1c:19:80:52:55:14:89:59:78:31:62:ab:96:d4:37:e7:f4:b6:
09:fa:ff:78:b4:cb:86:59:54:dc:28:e9:d5:02:5d:b0:1f:6c:
09:c8:1a:72
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICCvowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3NTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEZCRDIxOUNCM0U3NzZB
RUQ4MkQzN0UyNjk5NUU4NjQzQjBFMDgxODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdZaPf/kJfesx0iOJoewf/DtghEQkTuYdTpHaVf9S5jFcznYit
vEbHQPnqNFKg862rN7Nv9tPe31uh/+P9F4RN3CA5LXgA9uaRPEZOiF1PswKKaY9n
QiBbL0+1iEYRXUUQFn+X/7wsgRBnNaiJKYwZeQgcvGtmizNvg4s84tNZUt/DUpx3
GPPLT8Ku59g2iaFQewCNSGELO4Ol5c56LMxVWapPoLRZLnjAblau5r3yT5wo0jLI
6CoSjBDzmZCLGRpgS6ojtdTJDM2ZBoaeh4ScJUOZDZ9H/H/xo5mGGhiGLQvoXnuq
jSrEuHMNHp7dC2x6WyuCV2qsVVoW1cnSxU0VAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQU+9IZyz53au2C034mmV6GQ7DggYEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULy05SVp5ejUzYXUyQzAzNG1t
VjZHUTdEZ2dZRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQQ9
PNZgMA0GCSqGSIb3DQEBCwUAA4IBAQCDWJjYM96W1Wf1ptmWJ/s8A6KD0s94Oei+
TLh7AUaEudiC3Bgr1HxCdpYqrOtgJtp21fAPmZxifNXWqf8nKi9BjM/DsNikxr4c
peSI3zYeUd8ns84SATvtMRZrtnb8+OH/gdw4E1K9kZklrdt2Ngv61W+THXtI+o9u
cNb8XMdZZH2uLN/Savfym9N8WRALyaojntRxWPYOeaeGIrcFoMVqkOEHD27RCAzW
o5aQMnZl/zKA4LvNX2lGkJ8hV5az61zxpuHFn0hmo27n0cPX9WCiDIDnGL7NMM0c
GYBSVRSJWXgxYquW1Dfn9LYJ+v94tMuGWVTcKOnVAl2wH2wJyBpy
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:44 2024 by rpki-client on console-ams.rpki-client.org