Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JEMxrKUavDPpY3CK0qFbY1RrTCg.roa
File: JEMxrKUavDPpY3CK0qFbY1RrTCg.roa (raw, json)
Hash identifier: PX5VatmT/G1Qm9u9VUQl8NIq1pnhzcGO6G5svYScA/Q=
Subject key identifier: 24:43:31:AC:A5:1A:BC:33:E9:63:70:8A:D2:A1:5B:63:54:6B:4C:28
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 128C
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JEMxrKUavDPpY3CK0qFbY1RrTCg.roa
Signing time: Wed 29 Sep 2021 02:54:42 +0000
ROA not before: Wed 29 Sep 2021 02:54:42 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 49.158.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4748 (0x128c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:54:42 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=244331ACA51ABC33E963708AD2A15B63546B4C28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:00:ae:eb:f0:ac:7b:67:7c:eb:75:e9:77:
9b:38:c6:e8:43:9c:55:d9:b3:60:44:d1:53:9d:b1:
f2:fb:cb:b2:6b:7a:fd:d2:d4:8a:7c:ee:78:b3:c0:
c8:67:02:df:ac:13:a3:39:bf:99:98:ec:a3:e2:3c:
70:42:a4:28:f4:a5:46:a1:af:90:03:b0:cf:99:2e:
18:f5:58:4a:9d:8b:25:92:be:3c:c0:9a:62:e4:4d:
e0:ee:ff:ae:96:4b:76:06:c3:ec:d8:48:a6:bd:0c:
93:dd:cd:4b:b5:22:e4:dc:06:f0:dc:79:c1:d4:f7:
b3:7c:44:9e:df:a6:ba:5f:5c:12:70:64:6f:71:3f:
c2:22:f4:d5:37:09:1a:b6:8f:36:a6:df:a0:51:34:
6f:58:da:65:3f:c9:85:ad:62:c0:44:df:3d:54:f6:
fb:42:bf:ed:ca:41:84:c8:c2:94:98:4d:e1:7b:10:
33:92:d3:38:16:73:ef:3c:1f:b2:c4:89:9e:3e:70:
74:76:0b:0e:a3:e3:45:b4:2b:13:f8:5c:d0:95:02:
4c:68:07:8d:ad:f1:13:ab:cd:35:b4:07:fa:26:89:
73:96:b3:b2:07:37:d9:c6:c3:c4:60:7f:87:7c:7f:
d8:95:54:e0:53:b9:89:2f:cf:34:c7:f3:b9:8f:35:
c7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:43:31:AC:A5:1A:BC:33:E9:63:70:8A:D2:A1:5B:63:54:6B:4C:28
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JEMxrKUavDPpY3CK0qFbY1RrTCg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.124.0/22
Signature Algorithm: sha256WithRSAEncryption
41:a3:fd:21:7e:d4:77:d8:dc:40:11:82:b6:d1:23:42:f4:9e:
6c:89:57:5b:f6:90:fa:05:f9:3c:cb:e3:fc:f0:10:42:15:5d:
d6:99:97:97:87:03:ba:fa:ca:82:be:76:46:9d:8e:0e:b2:37:
1c:1f:d4:59:f5:db:14:c9:d8:f0:72:a4:66:03:1a:0d:67:ce:
9a:dd:53:55:32:6a:43:c2:4a:a9:79:63:33:6b:f9:8d:4f:97:
f4:8c:d4:e6:17:91:28:7d:07:dc:7f:9d:7c:d0:5f:12:7a:6f:
e2:f9:ef:8c:f9:b3:48:33:3b:8b:02:ce:3b:e7:db:7f:21:b5:
a4:c8:68:fe:42:00:9d:2d:32:d2:8d:47:6b:b3:b1:73:a6:8d:
70:97:34:4a:c9:27:e8:3e:0b:87:50:45:53:41:6d:ca:0c:29:
c6:bf:7f:93:12:17:00:d9:35:e3:e4:b9:18:a9:9a:3e:7a:a5:
4e:6c:fb:93:70:6d:4f:5f:f5:24:48:fa:fb:26:6c:bf:13:76:
9a:7b:88:ce:dd:73:e9:db:ad:28:fa:d9:95:3e:54:64:95:18:
a1:af:5b:da:40:8c:58:0b:8c:15:98:9b:91:2f:7a:5f:2d:90:
85:29:76:77:3a:8a:c9:17:b9:86:16:af:23:6c:73:9f:5a:00:
6e:b3:6e:25
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU0NDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDI0NDMzMUFDQTUxQUJD
MzNFOTYzNzA4QUQyQTE1QjYzNTQ2QjRDMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiWQCu6/Cse2d863Xpd5s4xuhDnFXZs2BE0VOdsfL7y7Jrev3S
1Ip87nizwMhnAt+sE6M5v5mY7KPiPHBCpCj0pUahr5ADsM+ZLhj1WEqdiyWSvjzA
mmLkTeDu/66WS3YGw+zYSKa9DJPdzUu1IuTcBvDcecHU97N8RJ7fprpfXBJwZG9x
P8Ii9NU3CRq2jzam36BRNG9Y2mU/yYWtYsBE3z1U9vtCv+3KQYTIwpSYTeF7EDOS
0zgWc+88H7LEiZ4+cHR2Cw6j40W0KxP4XNCVAkxoB42t8ROrzTW0B/omiXOWs7IH
N9nGw8Rgf4d8f9iVVOBTuYkvzzTH87mPNcexAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUJEMxrKUavDPpY3CK0qFbY1RrTCgwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0pFTXhyS1VhdkRQcFkzQ0sw
cUZiWTFSclRDZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIx
nnwwDQYJKoZIhvcNAQELBQADggEBAEGj/SF+1HfY3EARgrbRI0L0nmyJV1v2kPoF
+TzL4/zwEEIVXdaZl5eHA7r6yoK+dkadjg6yNxwf1Fn12xTJ2PBypGYDGg1nzprd
U1UyakPCSql5YzNr+Y1Pl/SM1OYXkSh9B9x/nXzQXxJ6b+L574z5s0gzO4sCzjvn
238htaTIaP5CAJ0tMtKNR2uzsXOmjXCXNErJJ+g+C4dQRVNBbcoMKca/f5MSFwDZ
NePkuRipmj56pU5s+5NwbU9f9SRI+vsmbL8Tdpp7iM7dc+nbrSj62ZU+VGSVGKGv
W9pAjFgLjBWYm5Evel8tkIUpdnc6iskXuYYWryNsc59aAG6zbiU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org