Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8JqNs1R4B0r2j1hvDYlEy0wBNO4.roa
File: 8JqNs1R4B0r2j1hvDYlEy0wBNO4.roa (raw, json)
Hash identifier: HkMJ4NTLUy38YR5YmAh2sw3b0Sz5N8myh8IqpKWsFCQ=
Subject key identifier: F0:9A:8D:B3:54:78:07:4A:F6:8F:58:6F:0D:89:44:CB:4C:01:34:EE
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12CA
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8JqNs1R4B0r2j1hvDYlEy0wBNO4.roa
Signing time: Wed 29 Sep 2021 02:54:59 +0000
ROA not before: Wed 29 Sep 2021 02:54:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 61.58.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4810 (0x12ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F09A8DB35478074AF68F586F0D8944CB4C0134EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:8d:90:67:c7:79:c2:d1:0e:31:e2:67:30:
39:79:96:07:26:d1:40:c5:9b:fe:8d:21:f0:4e:e1:
2d:60:ba:79:91:63:c2:2b:cf:23:8c:1a:b6:8e:4c:
4a:4c:47:2b:5a:0c:1e:cc:82:7a:9f:21:35:a6:49:
98:ae:68:5c:27:11:d5:98:c1:57:32:cf:c5:05:2a:
6b:83:fb:82:87:86:74:8b:6c:a3:a8:aa:4d:e8:53:
5f:4c:21:a8:2f:ec:9c:17:55:4d:33:86:f7:05:f2:
da:b9:55:49:1a:59:4e:03:d0:0c:47:4b:18:0c:a5:
26:78:26:da:21:41:52:69:b7:5c:62:83:50:42:d7:
63:b3:98:ff:b5:16:4c:3e:7b:36:ac:ec:0e:13:89:
a7:d5:66:4d:6d:c1:e2:33:00:27:f9:a8:13:5f:a5:
43:69:5c:09:20:78:8e:15:19:f2:9c:48:ea:eb:dc:
a9:18:62:a9:3b:90:34:fc:e7:2b:d4:cc:84:13:86:
d6:bc:da:95:35:cf:f1:90:1c:c0:b9:40:0e:82:6b:
95:d9:38:bc:c9:16:d9:d8:f2:30:39:3f:da:cf:50:
6a:10:c9:5b:37:d8:bc:92:41:71:53:f3:81:c2:74:
71:9c:74:d6:59:cf:75:9c:ca:8a:78:28:59:fa:6b:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9A:8D:B3:54:78:07:4A:F6:8F:58:6F:0D:89:44:CB:4C:01:34:EE
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/8JqNs1R4B0r2j1hvDYlEy0wBNO4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.104.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:f8:0d:6f:c6:f0:86:0e:34:d6:37:af:1e:30:74:8b:18:c2:
bd:58:fb:25:b9:c8:2e:3c:cd:d7:76:87:c4:a3:c2:8d:64:04:
3d:ce:27:a1:07:73:ad:64:3d:24:49:a9:45:5c:bf:83:db:49:
bd:6d:56:8a:7a:52:46:11:d3:b6:24:2a:70:2f:17:41:65:4a:
de:ce:c7:ab:42:c0:16:98:03:43:99:9f:8b:17:4f:b7:f3:a5:
d3:e4:dd:65:e0:52:97:1e:0f:d2:f2:66:bb:ff:8a:d5:19:c8:
ed:ff:ca:b2:ae:75:46:6c:bf:b7:0a:e9:e3:66:bc:65:4c:55:
e1:42:4c:86:64:d8:71:fd:f2:66:43:14:25:70:d7:86:ec:df:
5e:48:db:5d:4e:b1:25:c3:e4:9b:5e:1b:5a:d9:9a:9b:b8:d3:
20:92:42:df:b3:a7:19:85:66:77:db:1b:b0:be:e2:6b:97:ac:
0b:c9:57:87:0f:93:86:2c:55:e4:57:d7:6d:75:0f:22:78:32:
e4:a1:5b:c1:89:5d:13:d0:1b:5b:71:c7:f8:60:b0:f6:14:12:
76:16:ca:8d:9d:f1:50:c4:5a:65:56:7e:bf:11:10:df:7b:63:
15:db:d1:65:87:9a:a7:82:33:11:e7:1d:44:cc:bd:12:4b:48:
5c:57:79:a8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEsowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0NTlaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKEYwOUE4REIzNTQ3ODA3
NEFGNjhGNTg2RjBEODk0NENCNEMwMTM0RUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5z42QZ8d5wtEOMeJnMDl5lgcm0UDFm/6NIfBO4S1gunmRY8Ir
zyOMGraOTEpMRytaDB7MgnqfITWmSZiuaFwnEdWYwVcyz8UFKmuD+4KHhnSLbKOo
qk3oU19MIagv7JwXVU0zhvcF8tq5VUkaWU4D0AxHSxgMpSZ4JtohQVJpt1xig1BC
12OzmP+1Fkw+ezas7A4TiafVZk1tweIzACf5qBNfpUNpXAkgeI4VGfKcSOrr3KkY
Yqk7kDT85yvUzIQThta82pU1z/GQHMC5QA6Ca5XZOLzJFtnY8jA5P9rPUGoQyVs3
2LySQXFT84HCdHGcdNZZz3Wcyop4KFn6azXbAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8JqNs1R4B0r2j1hvDYlEy0wBNO4wHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVULzhKcU5zMVI0QjByMmoxaHZE
WWxFeTB3Qk5PNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
OmgwDQYJKoZIhvcNAQELBQADggEBAB74DW/G8IYONNY3rx4wdIsYwr1Y+yW5yC48
zdd2h8Sjwo1kBD3OJ6EHc61kPSRJqUVcv4PbSb1tVop6UkYR07YkKnAvF0FlSt7O
x6tCwBaYA0OZn4sXT7fzpdPk3WXgUpceD9LyZrv/itUZyO3/yrKudUZsv7cK6eNm
vGVMVeFCTIZk2HH98mZDFCVw14bs315I211OsSXD5JteG1rZmpu40yCSQt+zpxmF
ZnfbG7C+4muXrAvJV4cPk4YsVeRX1211DyJ4MuShW8GJXRPQG1txx/hgsPYUEnYW
yo2d8VDEWmVWfr8REN97YxXb0WWHmqeCMxHnHUTMvRJLSFxXeag=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org