Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JF1V5zCnpmhI2mAhtb9sgWZxDLs.roa
File: JF1V5zCnpmhI2mAhtb9sgWZxDLs.roa (raw, json)
Hash identifier: yiCotEOiRmrJV1PoyX3avik7/g9zEAD+2z6pz3eMQc0=
Subject key identifier: 24:5D:55:E7:30:A7:A6:68:48:DA:60:21:B5:BF:6C:81:66:71:0C:BB
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 1363
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JF1V5zCnpmhI2mAhtb9sgWZxDLs.roa
Signing time: Wed 29 Sep 2021 02:55:42 +0000
ROA not before: Wed 29 Sep 2021 02:55:42 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24163
IP address blocks: 61.61.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4963 (0x1363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:42 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=245D55E730A7A66848DA6021B5BF6C8166710CBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:04:4a:bc:ec:f5:0c:30:92:2b:d0:21:f7:
cc:05:51:cb:1b:bd:af:64:ec:9e:16:e1:ad:df:72:
f6:38:2c:fd:fe:ae:08:62:30:8a:b8:b4:e2:8d:7f:
32:10:2e:ec:a6:aa:d8:1d:ab:3b:64:c2:94:8c:54:
3c:16:90:50:b7:39:76:e9:53:74:87:bd:02:b2:73:
6b:5c:3d:97:fa:16:93:0d:db:df:af:70:dd:cc:35:
ce:f0:9b:59:14:19:bd:d7:72:35:cb:8a:ef:b6:57:
3f:47:2a:9c:44:a4:9a:1c:36:95:25:b2:33:4f:c2:
11:5f:48:24:70:d3:a3:67:2e:c3:17:cd:ca:f9:97:
4e:9f:87:10:dc:3f:39:14:9a:e3:d6:08:d8:2e:bc:
71:40:55:7d:3b:8e:d2:e9:4e:b4:73:cb:e8:79:2e:
9b:6b:cc:cc:38:42:0d:3f:e6:0d:b8:58:54:cc:66:
ec:74:74:36:c6:c1:f3:f8:02:0e:c4:4e:91:b8:63:
f8:18:81:36:71:48:c8:26:f5:7e:88:8b:86:84:e4:
da:7d:aa:bc:85:30:4e:1f:65:24:f5:e7:e1:9b:1d:
ab:c3:27:d4:e0:3f:08:17:70:58:50:47:fc:fb:8e:
91:62:d3:a8:b7:d8:de:74:e2:0d:1c:ee:c2:e9:f8:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5D:55:E7:30:A7:A6:68:48:DA:60:21:B5:BF:6C:81:66:71:0C:BB
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JF1V5zCnpmhI2mAhtb9sgWZxDLs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:4f:1e:50:28:ed:8a:6e:53:19:f3:bb:68:1c:22:87:31:b6:
e2:9e:74:12:7f:97:12:69:99:b5:17:ba:f4:d1:08:54:4f:4f:
e1:0a:99:e4:5b:10:af:58:bb:0d:9c:97:0d:36:3b:f4:9e:c4:
97:ea:54:17:6e:e3:35:a8:a3:9a:b4:de:c2:62:a6:5b:19:be:
cc:d8:d7:82:87:d7:88:2b:19:8b:08:7b:cc:45:c8:a0:dc:0a:
91:e8:21:ee:80:a2:0d:ef:b7:7d:2b:85:a4:79:ab:be:83:d3:
14:4d:90:87:05:b5:9d:79:92:72:1a:1f:3d:df:c5:55:41:fb:
20:a9:23:99:44:f0:a0:a7:4a:c3:b8:88:6e:a5:65:d0:a0:e6:
a2:da:64:60:d1:35:19:83:4c:69:a8:63:8c:eb:70:e2:31:f4:
b9:a0:19:e5:b8:5d:5a:26:eb:bc:48:9e:b4:a0:b1:48:fb:93:
9e:04:41:81:d4:2e:fb:0c:9c:f1:2e:59:4b:d9:0e:c9:55:6b:
55:d2:22:19:4d:63:49:f3:85:12:38:e8:57:c7:4d:b3:23:e2:
c6:db:61:61:56:86:2d:85:96:42:6b:71:ac:d7:44:11:2f:82:
1c:09:8c:a8:89:72:03:0a:59:4e:ba:6e:18:8b:b5:ee:8c:cc:
3c:ec:99:54
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1NDJaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDI0NUQ1NUU3MzBBN0E2
Njg0OERBNjAyMUI1QkY2QzgxNjY3MTBDQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLkQRKvOz1DDCSK9Ah98wFUcsbva9k7J4W4a3fcvY4LP3+rghi
MIq4tOKNfzIQLuymqtgdqztkwpSMVDwWkFC3OXbpU3SHvQKyc2tcPZf6FpMN29+v
cN3MNc7wm1kUGb3XcjXLiu+2Vz9HKpxEpJocNpUlsjNPwhFfSCRw06NnLsMXzcr5
l06fhxDcPzkUmuPWCNguvHFAVX07jtLpTrRzy+h5LptrzMw4Qg0/5g24WFTMZux0
dDbGwfP4Ag7ETpG4Y/gYgTZxSMgm9X6Ii4aE5Np9qryFME4fZST15+GbHavDJ9Tg
PwgXcFhQR/z7jpFi06i32N504g0c7sLp+PqDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUJF1V5zCnpmhI2mAhtb9sgWZxDLswHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0pGMVY1ekNucG1oSTJtQWh0
YjlzZ1daeERMcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9
PdgwDQYJKoZIhvcNAQELBQADggEBAI9PHlAo7YpuUxnzu2gcIocxtuKedBJ/lxJp
mbUXuvTRCFRPT+EKmeRbEK9Yuw2clw02O/SexJfqVBdu4zWoo5q03sJiplsZvszY
14KH14grGYsIe8xFyKDcCpHoIe6Aog3vt30rhaR5q76D0xRNkIcFtZ15knIaHz3f
xVVB+yCpI5lE8KCnSsO4iG6lZdCg5qLaZGDRNRmDTGmoY4zrcOIx9LmgGeW4XVom
67xInrSgsUj7k54EQYHULvsMnPEuWUvZDslVa1XSIhlNY0nzhRI46FfHTbMj4sbb
YWFWhi2FlkJrcazXRBEvghwJjKiJcgMKWU66bhiLte6MzDzsmVQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:46 2024 by rpki-client on console-ams.rpki-client.org