Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6CEdN1OCPk3v8gqEs8iN6ULIP98.roa
File: 6CEdN1OCPk3v8gqEs8iN6ULIP98.roa (raw, json)
Hash identifier: FX6Hnea24Qa7qpkz7bypv2bB8L9jEH4RRXXTCO0+vYE=
Subject key identifier: E8:21:1D:37:53:82:3E:4D:EF:F2:0A:84:B3:C8:8D:E9:42:C8:3F:DF
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1846
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6CEdN1OCPk3v8gqEs8iN6ULIP98.roa
Signing time: Sat 22 Oct 2022 05:53:33 +0000
ROA not before: Sat 22 Oct 2022 05:53:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 49.158.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6214 (0x1846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Oct 22 05:53:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E8211D3753823E4DEFF20A84B3C88DE942C83FDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:a4:97:be:2a:92:c7:e6:cd:4f:4a:39:7b:
64:d8:b3:db:91:73:3f:61:ac:9a:39:74:7e:84:f7:
37:6d:68:6d:e6:2f:a4:35:54:a8:e1:c2:17:0c:a4:
4d:26:d8:c3:43:e4:53:bd:fc:d0:99:6f:41:58:60:
0c:fc:1e:f0:c9:ed:c3:63:fa:e7:9d:74:98:9f:47:
89:a2:c0:9b:d3:73:ea:0e:6d:10:bb:95:57:34:97:
74:87:f7:53:56:cd:bd:3d:91:75:47:cf:e3:ad:e3:
b6:9e:25:72:7a:c3:97:96:91:06:a1:4a:fb:a3:be:
0b:a4:0e:f2:d7:2f:35:45:be:70:c3:ad:95:e7:59:
85:b8:36:e2:5a:e8:96:00:f7:8a:00:14:8f:26:e8:
c8:7f:5f:ff:39:ec:ef:65:cf:99:fc:55:95:5a:98:
00:34:2b:e5:dc:b5:5a:86:b0:cd:0b:4b:05:a2:4b:
a8:f1:3c:bd:21:fc:6e:94:34:93:cd:49:ac:1d:92:
d2:a1:d3:68:28:6f:87:92:99:4d:c6:34:7a:cf:8d:
27:35:d3:6e:53:f6:1c:54:6a:ef:02:38:c3:54:11:
d6:14:01:3a:4d:46:02:3b:74:ac:fa:88:ab:79:8e:
d9:73:18:d5:f3:62:ca:ee:80:eb:98:c3:4c:de:cf:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:21:1D:37:53:82:3E:4D:EF:F2:0A:84:B3:C8:8D:E9:42:C8:3F:DF
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6CEdN1OCPk3v8gqEs8iN6ULIP98.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.104.0/21
Signature Algorithm: sha256WithRSAEncryption
29:61:26:cb:c5:ab:9f:12:1a:b8:69:d4:ad:37:05:08:82:d9:
b8:ed:7e:6e:c0:f9:1d:43:78:c7:a7:4a:50:86:2f:55:97:ed:
88:75:ad:fa:4c:01:24:4b:cd:73:d1:0a:f1:a4:fa:cc:34:b4:
26:8e:7d:38:2b:90:24:ef:29:88:e0:29:2d:69:8a:d7:20:02:
05:a9:28:84:3d:b2:0a:95:b9:bf:64:3c:77:f7:d2:6d:96:fd:
c4:9e:3d:b4:66:80:a8:4b:ce:9b:e1:03:a6:97:c8:a2:ae:48:
cb:34:ce:72:56:18:38:26:63:a8:a9:d0:03:34:91:3a:09:40:
fc:95:1b:72:95:af:5c:55:ef:3b:09:a9:48:53:79:a5:3f:ce:
d3:5e:75:3c:cd:8f:e2:83:af:d9:8c:76:ca:2f:00:05:28:26:
82:f2:86:06:69:bf:1f:73:21:6d:6e:6c:31:eb:2d:bb:a0:b7:
6e:86:5b:f1:f4:66:c7:b5:9b:10:1e:ea:b7:dd:58:61:18:d9:
0c:cf:3a:34:41:b3:13:8d:d6:40:58:20:22:a8:68:70:19:df:
54:35:bc:ca:59:6f:26:16:c1:dd:4e:67:6c:15:08:98:5a:9c:
cd:05:13:5b:d1:c0:db:a8:25:49:e0:be:91:ae:11:5b:2b:78:
79:8d:85:e9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGEYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEwMjIw
NTUzMzNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEU4MjExRDM3NTM4MjNF
NERFRkYyMEE4NEIzQzg4REU5NDJDODNGREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+1KSXviqSx+bNT0o5e2TYs9uRcz9hrJo5dH6E9zdtaG3mL6Q1
VKjhwhcMpE0m2MND5FO9/NCZb0FYYAz8HvDJ7cNj+ueddJifR4miwJvTc+oObRC7
lVc0l3SH91NWzb09kXVHz+Ot47aeJXJ6w5eWkQahSvujvgukDvLXLzVFvnDDrZXn
WYW4NuJa6JYA94oAFI8m6Mh/X/857O9lz5n8VZVamAA0K+XctVqGsM0LSwWiS6jx
PL0h/G6UNJPNSawdktKh02gob4eSmU3GNHrPjSc1025T9hxUau8COMNUEdYUATpN
RgI7dKz6iKt5jtlzGNXzYsrugOuYw0zez+fTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6CEdN1OCPk3v8gqEs8iN6ULIP98wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzZDRWROMU9DUGszdjhncUVz
OGlONlVMSVA5OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nmgwDQYJKoZIhvcNAQELBQADggEBAClhJsvFq58SGrhp1K03BQiC2bjtfm7A+R1D
eMenSlCGL1WX7Yh1rfpMASRLzXPRCvGk+sw0tCaOfTgrkCTvKYjgKS1pitcgAgWp
KIQ9sgqVub9kPHf30m2W/cSePbRmgKhLzpvhA6aXyKKuSMs0znJWGDgmY6ip0AM0
kToJQPyVG3KVr1xV7zsJqUhTeaU/ztNedTzNj+KDr9mMdsovAAUoJoLyhgZpvx9z
IW1ubDHrLbugt26GW/H0Zse1mxAe6rfdWGEY2QzPOjRBsxON1kBYICKoaHAZ31Q1
vMpZbyYWwd1OZ2wVCJhanM0FE1vRwNuoJUngvpGuEVsreHmNhek=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org