Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4dRITVdOUFrHA1iq_Mgtdp1pchE.roa
File: 4dRITVdOUFrHA1iq_Mgtdp1pchE.roa (raw, json)
Hash identifier: ch4TgSx2vcYjYTk7VNTVRnML/XAvLipaHybz7+JkJW4=
Subject key identifier: E1:D4:48:4D:57:4E:50:5A:C7:03:58:AA:FC:C8:2D:76:9D:69:72:11
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 14FE
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4dRITVdOUFrHA1iq_Mgtdp1pchE.roa
Signing time: Thu 15 Sep 2022 02:36:43 +0000
ROA not before: Thu 15 Sep 2022 02:36:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 61.60.214.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5374 (0x14fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 15 02:36:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E1D4484D574E505AC70358AAFCC82D769D697211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:9e:99:fa:75:f2:7f:94:b4:35:ef:06:e3:
c5:27:d6:82:ae:53:26:c6:82:69:ea:c0:4d:a1:5e:
3c:27:b3:49:2a:e8:74:77:05:cd:f3:8e:d0:b9:80:
46:24:af:6f:52:c4:fd:61:bf:b1:ce:50:7a:08:10:
41:f0:cb:92:64:63:ee:ed:fa:2f:9c:e3:63:e8:ed:
9a:21:8a:00:c7:4e:42:4b:ba:9d:a3:b8:cc:29:ae:
c3:6a:14:f1:6a:b0:d7:11:c3:e7:39:fd:9b:f3:22:
c0:76:af:4e:d5:b4:73:04:b7:65:b0:09:93:82:40:
ef:6f:83:02:41:75:52:d2:6d:c7:ed:7d:27:4b:46:
83:26:78:b7:fd:7a:13:8f:62:14:19:22:f8:a5:74:
8d:0b:c6:6a:2e:79:ea:cd:70:d6:be:3f:ae:0b:9c:
14:72:d1:54:14:49:7d:33:41:2d:5b:9a:d4:5e:e1:
79:24:a9:1e:70:2e:af:f4:da:ae:b3:7e:43:f9:6d:
5c:ed:03:4f:c3:26:b0:86:f5:6a:d4:6b:96:1c:f4:
25:0c:d3:f6:2b:68:20:5f:6a:e9:db:fd:f3:1a:91:
05:a3:7b:15:79:54:b8:e9:f4:ab:b2:7e:d8:9b:42:
b5:2d:ba:c9:7c:90:36:89:56:f6:74:b5:96:eb:9b:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D4:48:4D:57:4E:50:5A:C7:03:58:AA:FC:C8:2D:76:9D:69:72:11
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/4dRITVdOUFrHA1iq_Mgtdp1pchE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.214.0/23
Signature Algorithm: sha256WithRSAEncryption
75:f8:b8:56:d8:cc:d8:23:b8:3b:c3:0c:1f:cb:d6:89:b7:72:
ce:a6:cc:e9:61:dc:de:92:54:ad:eb:ee:38:c0:3f:74:16:c0:
01:3d:21:a8:2a:1f:56:97:1d:98:ec:04:89:45:71:2b:1f:df:
e1:be:e2:84:d8:67:26:8f:23:ec:df:81:73:ca:d6:9a:e5:b5:
32:99:66:e9:0c:ee:e6:c8:0e:45:52:9c:85:fe:52:1f:00:02:
62:6e:82:4b:9f:23:52:00:0a:54:e2:b4:d1:d7:cd:5e:90:ea:
9a:f0:c4:53:c6:dc:a0:a8:b4:97:58:da:4b:ad:19:0b:62:9b:
57:6a:10:25:bb:55:aa:f1:75:95:6a:2e:74:ca:2e:62:0b:bf:
58:41:7d:ed:66:03:4f:33:22:08:89:f7:ca:ba:7e:30:b1:01:
1d:ed:a6:fa:c2:9f:d5:d7:c4:8a:27:1e:ea:ae:6f:e9:6f:52:
a9:c2:16:d3:7f:46:6b:c0:3f:91:98:50:9b:93:8c:f6:ea:42:
c6:8a:9c:5e:34:59:cf:4a:5d:f5:bc:70:bb:8b:e4:4e:1c:ac:
5b:e3:a6:e7:df:bc:71:1a:c5:bd:e8:d8:4a:bc:f1:9f:1e:1e:
d3:4b:c2:5a:9c:dd:b8:12:57:f4:62:87:04:08:e8:b3:d8:a4:
7a:a2:f5:a9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICFP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjA5MTUw
MjM2NDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEUxRDQ0ODRENTc0RTUw
NUFDNzAzNThBQUZDQzgyRDc2OUQ2OTcyMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKv56Z+nXyf5S0Ne8G48Un1oKuUybGgmnqwE2hXjwns0kq6HR3
Bc3zjtC5gEYkr29SxP1hv7HOUHoIEEHwy5JkY+7t+i+c42Po7ZohigDHTkJLup2j
uMwprsNqFPFqsNcRw+c5/ZvzIsB2r07VtHMEt2WwCZOCQO9vgwJBdVLSbcftfSdL
RoMmeLf9ehOPYhQZIvildI0LxmoueerNcNa+P64LnBRy0VQUSX0zQS1bmtRe4Xkk
qR5wLq/02q6zfkP5bVztA0/DJrCG9WrUa5Yc9CUM0/YraCBfaunb/fMakQWjexV5
VLjp9KuyftibQrUtusl8kDaJVvZ0tZbrmw6VAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU4dRITVdOUFrHA1iq/Mgtdp1pchEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzRkUklUVmRPVUZySEExaXFf
TWd0ZHAxcGNoRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAE9
PNYwDQYJKoZIhvcNAQELBQADggEBAHX4uFbYzNgjuDvDDB/L1om3cs6mzOlh3N6S
VK3r7jjAP3QWwAE9IagqH1aXHZjsBIlFcSsf3+G+4oTYZyaPI+zfgXPK1prltTKZ
ZukM7ubIDkVSnIX+Uh8AAmJugkufI1IAClTitNHXzV6Q6prwxFPG3KCotJdY2kut
GQtim1dqECW7VarxdZVqLnTKLmILv1hBfe1mA08zIgiJ98q6fjCxAR3tpvrCn9XX
xIonHuqub+lvUqnCFtN/RmvAP5GYUJuTjPbqQsaKnF40Wc9KXfW8cLuL5E4crFvj
puffvHEaxb3o2Eq88Z8eHtNLwlqc3bgSV/RihwQI6LPYpHqi9ak=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org