Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DMJuU8Smr4OzFNcPhSf1e6LZ2RY.roa
File: DMJuU8Smr4OzFNcPhSf1e6LZ2RY.roa (raw, json)
Hash identifier: 8lLobLucq+Oq2nsqCtEwDIqBskuPhNPwqTUA16uwn9U=
Subject key identifier: 0C:C2:6E:53:C4:A6:AF:83:B3:14:D7:0F:85:27:F5:7B:A2:D9:D9:16
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0B5B
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DMJuU8Smr4OzFNcPhSf1e6LZ2RY.roa
Signing time: Tue 29 Sep 2020 10:08:19 +0000
ROA not before: Tue 29 Sep 2020 10:08:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24164
IP address blocks: 49.158.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2907 (0xb5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:08:19 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0CC26E53C4A6AF83B314D70F8527F57BA2D9D916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5b:cc:5f:8a:bc:cb:44:89:21:20:11:a2:32:
1d:0a:62:67:ad:b3:9b:07:31:b3:15:ff:3b:f6:ea:
8f:44:91:f7:cf:06:47:d4:f3:ae:d1:17:39:be:e8:
d8:b9:d9:07:8b:92:08:2c:c8:3a:b3:f3:43:cc:0a:
7d:0d:26:8f:81:de:00:79:f0:33:ef:fb:fa:83:45:
a8:04:f3:6b:6b:48:9b:ef:a7:58:fd:46:4a:6e:52:
fa:b6:d8:d0:70:e0:a4:33:3c:b2:dc:79:0d:2c:0d:
f0:d6:39:71:dc:28:fc:71:72:b2:c7:ab:44:01:b0:
e4:00:52:3c:48:2d:96:e4:04:a6:4e:03:af:32:6d:
6c:57:53:ce:bf:2b:97:ec:a4:0a:5a:01:03:e6:b9:
1a:a9:a3:34:22:1b:2a:00:f1:0c:63:82:1b:d6:7d:
13:b7:bb:92:d9:23:57:d3:09:fd:4a:c3:47:82:7c:
13:06:bc:75:0d:da:89:52:b8:7f:cc:ac:80:6c:10:
f2:c2:55:e9:65:d3:6f:fa:4a:f6:45:99:01:fb:a4:
c3:58:1c:64:6c:b2:63:6a:66:83:8a:ea:be:cb:6a:
86:38:29:af:db:85:6f:0a:27:b1:6d:36:3b:ab:d9:
f6:74:af:02:7d:58:27:8e:63:f0:dc:63:e9:d1:ae:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:6E:53:C4:A6:AF:83:B3:14:D7:0F:85:27:F5:7B:A2:D9:D9:16
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/DMJuU8Smr4OzFNcPhSf1e6LZ2RY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:c3:2c:36:87:d0:a1:a1:a9:00:18:23:dc:00:97:6b:0f:0f:
85:27:cf:18:b9:25:41:f0:52:54:b2:ad:79:5e:a8:e9:98:a6:
3c:17:51:d8:81:88:44:68:02:72:35:7e:ae:22:0c:13:53:6b:
90:e9:90:a2:03:f8:b3:65:5f:f2:46:47:85:d0:5d:13:68:a0:
3b:0b:62:9e:94:67:9e:fe:59:2d:6f:68:98:b3:9d:82:18:5c:
f1:d5:b5:08:55:f8:4f:ea:36:a0:fa:ee:90:5c:fe:0e:20:86:
68:9b:a2:c7:ae:a8:84:9a:e6:8d:ab:b9:c1:67:94:a6:8f:4c:
cc:5e:37:50:4f:38:28:00:26:88:e5:dc:ea:28:3b:09:6d:d5:
c1:d1:cf:af:41:01:29:af:8c:bd:78:f1:e1:a4:37:bd:0f:ff:
39:9b:5a:53:4b:c8:c6:8e:a3:a2:c0:ce:38:8d:d2:df:52:9a:
03:1b:cd:ac:17:0a:c6:92:b9:7f:7c:42:b9:77:3c:dc:dd:4a:
33:d2:65:e2:e0:1e:10:64:b6:49:72:3b:f7:79:12:a2:5c:78:
b6:6c:6a:61:f9:dd:d3:78:94:f2:cc:8b:99:54:82:df:f5:3a:
81:44:bd:af:90:7b:7a:7c:5e:b3:e5:bf:9c:0b:07:ff:5b:9e:
b0:a3:34:2b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICC1swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA4MTlaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDBDQzI2RTUzQzRBNkFG
ODNCMzE0RDcwRjg1MjdGNTdCQTJEOUQ5MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnW8xfirzLRIkhIBGiMh0KYmets5sHMbMV/zv26o9EkffPBkfU
867RFzm+6Ni52QeLkggsyDqz80PMCn0NJo+B3gB58DPv+/qDRagE82trSJvvp1j9
RkpuUvq22NBw4KQzPLLceQ0sDfDWOXHcKPxxcrLHq0QBsOQAUjxILZbkBKZOA68y
bWxXU86/K5fspApaAQPmuRqpozQiGyoA8QxjghvWfRO3u5LZI1fTCf1Kw0eCfBMG
vHUN2olSuH/MrIBsEPLCVell02/6SvZFmQH7pMNYHGRssmNqZoOK6r7LaoY4Ka/b
hW8KJ7FtNjur2fZ0rwJ9WCeOY/DcY+nRrhYZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDMJuU8Smr4OzFNcPhSf1e6LZ2RYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0RNSnVVOFNtcjRPekZOY1Bo
U2YxZTZMWjJSWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAx
nlAwDQYJKoZIhvcNAQELBQADggEBAB7DLDaH0KGhqQAYI9wAl2sPD4Unzxi5JUHw
UlSyrXleqOmYpjwXUdiBiERoAnI1fq4iDBNTa5DpkKID+LNlX/JGR4XQXRNooDsL
Yp6UZ57+WS1vaJiznYIYXPHVtQhV+E/qNqD67pBc/g4ghmiboseuqISa5o2rucFn
lKaPTMxeN1BPOCgAJojl3OooOwlt1cHRz69BASmvjL148eGkN70P/zmbWlNLyMaO
o6LAzjiN0t9SmgMbzawXCsaSuX98Qrl3PNzdSjPSZeLgHhBktklyO/d5EqJceLZs
amH53dN4lPLMi5lUgt/1OoFEva+Qe3p8XrPlv5wLB/9bnrCjNCs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:45 2024 by rpki-client on console-ams.rpki-client.org