Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AwluF7IfkNPJ17nJnYdFtWu-6YM.roa
File: AwluF7IfkNPJ17nJnYdFtWu-6YM.roa (raw, json)
Hash identifier: tvZFs9fvu0n0RtcX6JnA90fdCRmpnZUTsVPL9doYGlE=
Subject key identifier: 03:09:6E:17:B2:1F:90:D3:C9:D7:B9:C9:9D:87:45:B5:6B:BE:E9:83
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1AE2
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AwluF7IfkNPJ17nJnYdFtWu-6YM.roa
Signing time: Thu 22 Dec 2022 10:11:27 +0000
ROA not before: Thu 22 Dec 2022 10:11:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24164
IP address blocks: 114.198.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6882 (0x1ae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Dec 22 10:11:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=03096E17B21F90D3C9D7B9C99D8745B56BBEE983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:b5:21:e3:04:ff:b4:76:ef:57:65:7b:ff:
04:55:e1:ae:08:24:96:6d:c2:3e:d1:e4:ff:32:1d:
e5:38:2c:71:86:11:13:b4:5e:f0:e2:e1:8c:ed:d7:
e1:1c:9c:9c:0f:31:57:ca:f1:77:4f:38:d9:8c:3a:
90:c4:fd:cc:68:90:a8:ba:f2:f9:1f:94:ec:df:fc:
60:0b:bb:8f:92:0c:c1:48:17:19:51:90:70:04:1e:
0a:75:48:da:64:20:28:d6:d4:bd:e1:84:1e:90:9e:
c4:52:29:5a:94:b4:77:da:8b:ac:bb:5e:f5:46:8d:
9a:23:9d:ae:ad:50:73:c1:f6:3f:80:41:8b:8e:7b:
17:f3:5e:2c:d3:07:dd:22:81:f9:1d:90:e3:ec:11:
d2:c9:b3:ea:73:93:a5:ea:4e:76:ca:48:df:c2:e6:
f6:ad:85:47:cd:53:d4:89:59:8d:7a:54:c1:96:ff:
8a:74:74:dc:6a:2b:0e:f5:db:75:b1:dd:30:1f:06:
6e:97:a0:51:67:df:f7:a0:f2:5f:1d:0f:97:b5:90:
9a:67:12:af:6e:fb:3a:59:fb:5a:9d:35:73:5a:f9:
e2:4d:4b:17:55:90:ec:f9:36:aa:d9:65:b3:71:dd:
85:d8:97:cf:80:f2:27:db:c4:ce:d9:7e:3a:8b:3b:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:09:6E:17:B2:1F:90:D3:C9:D7:B9:C9:9D:87:45:B5:6B:BE:E9:83
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/AwluF7IfkNPJ17nJnYdFtWu-6YM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.198.160.0/22
Signature Algorithm: sha256WithRSAEncryption
70:ec:6f:01:4a:52:62:b4:08:61:b6:c2:75:ea:ff:8c:e5:29:
95:bb:11:c8:87:e4:e9:2d:d6:45:83:65:c9:cc:20:9e:18:89:
c7:f2:76:3c:80:b3:2d:84:89:ce:30:29:60:a2:7c:97:9c:fd:
e9:e0:95:5d:fb:44:10:22:2c:cc:52:54:e0:8b:ed:fe:c9:a7:
17:3b:6d:4c:a4:3a:b5:af:c4:98:06:d7:20:dc:8d:b3:d3:a2:
14:3d:ef:e6:99:73:18:24:60:4f:a9:d8:a3:57:51:22:e7:b7:
44:7a:39:00:15:9a:69:0b:e0:9f:99:87:c0:23:2e:f1:9d:7e:
0b:18:c0:ba:68:b8:c9:45:95:71:60:f8:54:4d:55:c8:4c:bd:
0b:04:14:78:32:56:a6:b6:8c:1d:ab:ce:52:39:df:41:7d:41:
c5:ef:c7:44:e1:99:6d:90:63:9b:54:f3:28:38:da:1c:42:9c:
b3:1b:3f:e5:5f:07:58:5c:61:22:d4:4d:ad:c5:92:44:b1:11:
bb:c7:75:91:32:91:b3:02:65:43:47:af:ea:08:51:d1:ea:f0:
a4:fc:16:18:f7:8c:bb:f6:33:38:6a:b3:33:ca:66:ae:98:64:
aa:02:73:2f:29:14:2b:a9:e1:c3:6e:53:b9:05:de:b4:fd:83:
e3:9b:04:b5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICGuIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMjEyMjIx
MDExMjdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDAzMDk2RTE3QjIxRjkw
RDNDOUQ3QjlDOTlEODc0NUI1NkJCRUU5ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHBbUh4wT/tHbvV2V7/wRV4a4IJJZtwj7R5P8yHeU4LHGGERO0
XvDi4Yzt1+EcnJwPMVfK8XdPONmMOpDE/cxokKi68vkflOzf/GALu4+SDMFIFxlR
kHAEHgp1SNpkICjW1L3hhB6QnsRSKVqUtHfai6y7XvVGjZojna6tUHPB9j+AQYuO
exfzXizTB90igfkdkOPsEdLJs+pzk6XqTnbKSN/C5vathUfNU9SJWY16VMGW/4p0
dNxqKw7123Wx3TAfBm6XoFFn3/eg8l8dD5e1kJpnEq9u+zpZ+1qdNXNa+eJNSxdV
kOz5NqrZZbNx3YXYl8+A8ifbxM7ZfjqLOxhFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAwluF7IfkNPJ17nJnYdFtWu+6YMwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0F3bHVGN0lma05QSjE3bkpu
WWRGdFd1LTZZTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJy
xqAwDQYJKoZIhvcNAQELBQADggEBAHDsbwFKUmK0CGG2wnXq/4zlKZW7EciH5Okt
1kWDZcnMIJ4YicfydjyAsy2Eic4wKWCifJec/englV37RBAiLMxSVOCL7f7Jpxc7
bUykOrWvxJgG1yDcjbPTohQ97+aZcxgkYE+p2KNXUSLnt0R6OQAVmmkL4J+Zh8Aj
LvGdfgsYwLpouMlFlXFg+FRNVchMvQsEFHgyVqa2jB2rzlI530F9QcXvx0ThmW2Q
Y5tU8yg42hxCnLMbP+VfB1hcYSLUTa3FkkSxEbvHdZEykbMCZUNHr+oIUdHq8KT8
Fhj3jLv2MzhqszPKZq6YZKoCcy8pFCup4cNuU7kF3rT9g+ObBLU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:02 2024 by rpki-client on console-fra.rpki-client.org