Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JNdcyaIzgd6xaji5hSQhKAcIiVA.roa
File: JNdcyaIzgd6xaji5hSQhKAcIiVA.roa (raw, json)
Hash identifier: qwuL/iqE/EDjgnVxq89vSvyyHKujYdJuqac+6Dt3HKk=
Subject key identifier: 24:D7:5C:C9:A2:33:81:DE:B1:6A:38:B9:85:24:21:28:07:08:89:50
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 134D
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JNdcyaIzgd6xaji5hSQhKAcIiVA.roa
Signing time: Wed 29 Sep 2021 02:55:36 +0000
ROA not before: Wed 29 Sep 2021 02:55:36 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 115.165.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4941 (0x134d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:36 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=24D75CC9A23381DEB16A38B98524212807088950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6b:30:af:84:a5:ec:b3:4d:87:ac:60:ce:e1:
77:8f:6d:40:db:2c:0e:06:0a:91:ee:75:18:32:ce:
2d:b2:b0:a6:eb:45:29:df:50:63:8d:d4:5f:17:ef:
2a:83:ab:39:09:72:4f:94:08:da:7b:0d:d7:25:c0:
31:ce:1c:8b:33:93:4f:33:8b:76:ba:1e:2f:fe:ac:
73:96:6b:64:ab:6d:6e:67:96:ae:d8:d9:bb:20:df:
e5:0a:67:a3:64:fc:d9:d7:16:96:7b:f1:24:bb:ff:
2f:08:e4:de:68:e2:e5:de:38:b4:16:02:13:1d:08:
59:94:97:ba:1a:15:50:b2:5d:c0:df:85:82:b5:82:
a4:44:11:2f:43:87:d9:ee:08:bf:0d:b0:5f:00:fb:
a2:f4:0d:98:e3:91:06:a8:c9:cb:40:45:d5:cd:ad:
69:a3:b2:32:22:93:47:49:db:32:42:96:80:d1:0a:
3b:64:49:ce:08:1c:ee:c1:20:2d:a3:cb:cb:f4:3b:
f9:04:5b:21:68:f4:3c:be:35:2d:0f:b9:2d:f5:47:
a5:35:b8:c9:7f:d0:8c:2d:b4:6c:6a:82:35:19:3c:
75:cb:99:d9:d9:3c:d7:0c:4d:b3:b4:14:ee:8e:77:
3c:b4:98:da:9f:98:be:d4:78:2c:8a:6c:ca:f0:20:
17:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D7:5C:C9:A2:33:81:DE:B1:6A:38:B9:85:24:21:28:07:08:89:50
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/JNdcyaIzgd6xaji5hSQhKAcIiVA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.165.236.0/22
Signature Algorithm: sha256WithRSAEncryption
77:8c:ee:b6:d3:60:af:5a:d9:62:ba:2d:f4:1b:d0:89:22:8e:
c3:b7:cd:69:a2:b7:bd:59:49:c6:d7:2b:e6:5d:81:04:10:ac:
ff:ef:6b:db:50:c4:ee:f9:e9:2a:01:36:74:7a:9f:b8:2c:f4:
ee:69:45:03:c7:a6:2d:5a:e7:78:33:5f:43:fa:03:b4:58:28:
1a:bf:af:85:f6:88:3b:3e:5e:f9:02:63:bb:30:41:c1:ce:ee:
0d:37:4f:8e:af:34:bd:4b:64:72:57:27:e6:ff:2a:6e:4d:ed:
f8:e4:48:01:d9:b0:f2:5d:00:6a:d7:0b:c6:7d:b1:38:1c:03:
25:06:8e:62:cb:20:65:fe:9b:dd:18:12:b7:a3:f8:2a:bf:79:
94:01:c7:e3:f0:30:29:ce:62:99:ea:f8:ad:17:ef:c2:1c:b9:
ab:5b:f8:bf:5f:3c:e3:70:e0:68:22:00:b0:e0:79:1f:cd:b0:
d7:4f:24:55:b1:b7:85:5e:14:64:bc:0d:3c:62:f3:30:41:2a:
11:02:de:ab:3f:3d:45:6e:4c:25:84:fe:42:fe:09:e1:20:31:
4a:4b:3d:9a:99:f5:1c:5e:d9:9a:fc:6c:4c:5a:02:85:51:df:
5f:0d:1f:f9:ec:43:3b:e0:6a:45:1c:f6:2c:bd:70:20:c6:fc:
78:c5:91:1a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICE00wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MzZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDI0RDc1Q0M5QTIzMzgx
REVCMTZBMzhCOTg1MjQyMTI4MDcwODg5NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZazCvhKXss02HrGDO4XePbUDbLA4GCpHudRgyzi2ysKbrRSnf
UGON1F8X7yqDqzkJck+UCNp7DdclwDHOHIszk08zi3a6Hi/+rHOWa2SrbW5nlq7Y
2bsg3+UKZ6Nk/NnXFpZ78SS7/y8I5N5o4uXeOLQWAhMdCFmUl7oaFVCyXcDfhYK1
gqREES9Dh9nuCL8NsF8A+6L0DZjjkQaoyctARdXNrWmjsjIik0dJ2zJCloDRCjtk
Sc4IHO7BIC2jy8v0O/kEWyFo9Dy+NS0PuS31R6U1uMl/0IwttGxqgjUZPHXLmdnZ
PNcMTbO0FO6Odzy0mNqfmL7UeCyKbMrwIBedAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUJNdcyaIzgd6xaji5hSQhKAcIiVAwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0pOZGN5YUl6Z2Q2eGFqaTVo
U1FoS0FjSWlWQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJz
pewwDQYJKoZIhvcNAQELBQADggEBAHeM7rbTYK9a2WK6LfQb0IkijsO3zWmit71Z
ScbXK+ZdgQQQrP/va9tQxO756SoBNnR6n7gs9O5pRQPHpi1a53gzX0P6A7RYKBq/
r4X2iDs+XvkCY7swQcHO7g03T46vNL1LZHJXJ+b/Km5N7fjkSAHZsPJdAGrXC8Z9
sTgcAyUGjmLLIGX+m90YErej+Cq/eZQBx+PwMCnOYpnq+K0X78Icuatb+L9fPONw
4GgiALDgeR/NsNdPJFWxt4VeFGS8DTxi8zBBKhEC3qs/PUVuTCWE/kL+CeEgMUpL
PZqZ9Rxe2Zr8bExaAoVR318NH/nsQzvgakUc9iy9cCDG/HjFkRo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org