Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6ZLWSSFkWBvnUNo4W9F2u51SAso.roa
File: 6ZLWSSFkWBvnUNo4W9F2u51SAso.roa (raw, json)
Hash identifier: 8Wi/2QisVTMqUv6Txe5Q3H4LbEOiKzETMZYmpMbROpg=
Subject key identifier: E9:92:D6:49:21:64:58:1B:E7:50:DA:38:5B:D1:76:BB:9D:52:02:CA
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1214
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6ZLWSSFkWBvnUNo4W9F2u51SAso.roa
Signing time: Wed 29 Sep 2021 02:54:11 +0000
ROA not before: Wed 29 Sep 2021 02:54:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 119.77.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4628 (0x1214)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:11 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E992D6492164581BE750DA385BD176BB9D5202CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:12:0c:20:a4:6f:18:05:8b:c6:3f:e3:37:
26:0c:50:b0:58:00:8b:b2:58:09:c6:4c:d7:a6:72:
a5:61:64:14:3d:37:7e:27:fc:03:20:f3:e3:7c:d4:
75:b2:b5:d6:e0:85:2c:ab:d1:d6:60:fa:b5:38:78:
fe:0c:60:bd:6b:04:fc:6c:3a:0f:f3:c0:30:c1:5a:
8f:a8:ea:18:a6:56:8a:4e:a4:cd:57:1d:4e:11:af:
20:0d:3f:84:d0:2a:66:d5:d9:9c:a5:19:44:aa:73:
5c:83:5b:32:b6:54:81:a3:1e:45:b2:34:b6:53:6b:
f8:52:05:71:1a:3b:34:35:ba:8a:12:fc:8e:14:74:
58:a3:11:70:94:d9:29:e5:9d:ba:f1:4d:c5:08:8c:
b9:10:37:03:16:c2:5f:cf:e4:47:64:6f:03:d4:6a:
30:c5:e2:42:d1:45:20:39:df:50:1f:08:5b:43:cd:
99:6e:52:28:b9:90:59:da:71:9b:ad:7c:a5:1e:fa:
83:0c:8b:e1:0a:2c:aa:59:54:b7:86:ac:21:fc:a9:
72:94:7b:a0:0d:fd:8a:9b:ca:3e:69:08:13:90:58:
4f:e8:d8:0e:f2:08:43:d0:76:e1:bc:b6:2c:5c:24:
c3:8f:c8:5f:92:68:22:23:55:b7:33:47:e7:57:b0:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:92:D6:49:21:64:58:1B:E7:50:DA:38:5B:D1:76:BB:9D:52:02:CA
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/6ZLWSSFkWBvnUNo4W9F2u51SAso.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.77.160.0/19
Signature Algorithm: sha256WithRSAEncryption
26:db:ac:3a:98:98:62:c1:e7:1c:d4:62:01:ee:32:e5:22:91:
c6:98:68:9a:02:6e:05:f4:2a:c4:b0:18:8a:84:b2:41:b9:5e:
a6:fe:b9:e7:34:50:3e:4d:66:87:1d:63:90:a7:65:d8:20:09:
a9:5a:10:e8:dd:6e:43:38:5d:ac:8b:5e:e0:29:8a:d2:b6:e0:
99:30:8f:fb:3c:b0:77:8c:70:73:64:bd:5f:37:74:e6:10:41:
86:e3:09:18:85:62:2f:17:33:e6:48:38:21:51:b4:d3:c2:2a:
65:40:c7:23:c2:ec:7c:72:ec:86:6c:e2:3b:01:ed:13:64:32:
c4:d4:9b:c0:4c:e7:09:cd:4f:53:7e:4c:36:19:fb:cb:df:1f:
35:d6:a8:b6:98:73:13:cc:e9:d7:09:da:92:d5:ce:b4:eb:09:
51:27:fe:a5:40:59:f7:50:68:d7:19:46:e6:ec:b5:b1:19:1b:
62:f5:64:85:a4:4e:36:2d:ad:39:2c:80:7a:02:c3:26:a8:47:
19:4d:2b:bc:c8:7d:c1:82:ed:ce:b8:12:86:dc:34:cd:7b:b4:
68:85:15:1c:1d:77:90:3e:d5:f1:78:2f:c0:7b:b1:0e:7c:9a:
59:71:bf:09:66:8c:85:31:fe:34:68:96:b4:8b:13:fe:14:bc:
5b:3a:25:b0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0MTFaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEU5OTJENjQ5MjE2NDU4
MUJFNzUwREEzODVCRDE3NkJCOUQ1MjAyQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+KxIMIKRvGAWLxj/jNyYMULBYAIuyWAnGTNemcqVhZBQ9N34n
/AMg8+N81HWytdbghSyr0dZg+rU4eP4MYL1rBPxsOg/zwDDBWo+o6himVopOpM1X
HU4RryANP4TQKmbV2ZylGUSqc1yDWzK2VIGjHkWyNLZTa/hSBXEaOzQ1uooS/I4U
dFijEXCU2SnlnbrxTcUIjLkQNwMWwl/P5EdkbwPUajDF4kLRRSA531AfCFtDzZlu
Uii5kFnacZutfKUe+oMMi+EKLKpZVLeGrCH8qXKUe6AN/Yqbyj5pCBOQWE/o2A7y
CEPQduG8tixcJMOPyF+SaCIjVbczR+dXsGtrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6ZLWSSFkWBvnUNo4W9F2u51SAsowHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzZaTFdTU0ZrV0J2blVObzRX
OUYydTUxU0Fzby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV3
TaAwDQYJKoZIhvcNAQELBQADggEBACbbrDqYmGLB5xzUYgHuMuUikcaYaJoCbgX0
KsSwGIqEskG5Xqb+uec0UD5NZocdY5CnZdggCalaEOjdbkM4XayLXuApitK24Jkw
j/s8sHeMcHNkvV83dOYQQYbjCRiFYi8XM+ZIOCFRtNPCKmVAxyPC7Hxy7IZs4jsB
7RNkMsTUm8BM5wnNT1N+TDYZ+8vfHzXWqLaYcxPM6dcJ2pLVzrTrCVEn/qVAWfdQ
aNcZRubstbEZG2L1ZIWkTjYtrTksgHoCwyaoRxlNK7zIfcGC7c64EobcNM17tGiF
FRwdd5A+1fF4L8B7sQ58mllxvwlmjIUx/jRolrSLE/4UvFs6JbA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org