Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LBmf8ibr1RtPRrVBnZmN8Bk-H7U.roa
File: LBmf8ibr1RtPRrVBnZmN8Bk-H7U.roa (raw, json)
Hash identifier: Evz851qUmIedRhlRguhPdYau6wdOIUMSVoKdumX4cMY=
Subject key identifier: 2C:19:9F:F2:26:EB:D5:1B:4F:46:B5:41:9D:99:8D:F0:19:3E:1F:B5
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 0AC1
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LBmf8ibr1RtPRrVBnZmN8Bk-H7U.roa
Signing time: Tue 29 Sep 2020 10:07:35 +0000
ROA not before: Tue 29 Sep 2020 10:07:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 24165
IP address blocks: 49.158.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2753 (0xac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 10:07:35 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2C199FF226EBD51B4F46B5419D998DF0193E1FB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:15:55:01:04:be:2f:51:2c:4a:81:b0:72:
c7:6c:9f:e9:2e:34:53:90:aa:70:49:73:e4:88:0f:
11:f7:f7:94:e5:58:ef:d9:34:3a:6e:7d:46:e9:a9:
2b:02:df:a3:e6:7d:43:74:f8:2f:49:f9:04:18:21:
ac:75:0a:1a:cf:57:dd:13:cb:ab:78:2f:ec:d2:de:
57:53:c8:7f:2a:3b:65:3f:33:28:fd:d9:64:33:30:
28:e2:d2:c9:95:3d:33:96:b4:56:7e:ac:20:a2:75:
c8:91:1d:c8:f4:33:77:0a:10:a6:bc:6d:35:24:79:
20:21:91:71:d5:6d:9d:5d:86:98:65:5e:e0:74:87:
14:ad:5b:3c:b5:ad:49:9a:54:7d:12:b4:e3:fc:15:
3d:e4:2b:6c:d1:f2:e6:6c:57:ae:b2:24:5a:b2:da:
b7:20:49:84:a3:c7:8b:eb:ce:e4:24:a9:66:27:7e:
51:4a:a1:97:f8:66:5e:1e:ae:9c:07:13:ec:71:fb:
0a:ed:40:78:63:75:23:54:00:4b:70:13:b9:b8:f0:
7b:31:b9:f4:28:15:7c:60:65:05:c2:fb:7c:88:56:
60:3e:55:ea:7d:15:c7:51:f5:d3:06:6e:15:d0:17:
b5:81:d1:3a:de:54:f7:94:a5:3f:50:92:6a:45:70:
33:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:19:9F:F2:26:EB:D5:1B:4F:46:B5:41:9D:99:8D:F0:19:3E:1F:B5
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LBmf8ibr1RtPRrVBnZmN8Bk-H7U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.158.168.0/21
Signature Algorithm: sha256WithRSAEncryption
88:fb:18:bd:15:5e:52:12:58:86:df:69:00:88:14:04:0c:29:
b3:f1:da:81:90:61:5b:c2:e8:f1:27:34:5e:20:66:3e:99:c3:
a1:24:56:5b:e7:57:15:1a:b0:45:8a:2f:7b:d3:e9:13:b3:3c:
fa:08:30:86:50:e3:3d:db:dd:6e:95:80:a7:6b:11:43:6c:39:
a8:21:7b:58:d6:90:f0:0a:f2:79:b1:fc:82:53:36:83:05:0a:
39:15:bb:c9:cf:18:61:30:3d:d2:62:06:c5:f5:2d:55:ed:3b:
27:35:b8:b5:9c:46:5e:8b:97:88:44:e6:96:a6:f2:d3:db:e1:
27:d8:c7:36:50:32:9c:f8:66:e2:0c:b0:d1:9b:f9:1e:bf:86:
c2:f6:95:e7:71:20:73:e2:4a:0c:19:7b:7f:25:d3:a8:2b:b7:
ee:82:16:7d:96:3d:7e:f8:a4:03:b7:24:ac:1f:b5:67:09:41:
bc:90:38:ff:df:ea:df:fe:13:4e:75:53:4b:c3:23:ea:c8:18:
bc:5e:bb:98:97:be:42:68:b3:08:34:56:76:82:75:14:5c:c8:
6d:31:39:31:4f:11:64:0b:83:6a:f2:a9:64:36:47:bf:0e:79:
5c:a5:80:89:b2:28:59:9b:4c:e6:d8:96:34:51:35:5c:81:a9:
0a:a4:cc:a3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCsEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMDA5Mjkx
MDA3MzVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDJDMTk5RkYyMjZFQkQ1
MUI0RjQ2QjU0MTlEOTk4REYwMTkzRTFGQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/mxVVAQS+L1EsSoGwcsdsn+kuNFOQqnBJc+SIDxH395TlWO/Z
NDpufUbpqSsC36PmfUN0+C9J+QQYIax1ChrPV90Ty6t4L+zS3ldTyH8qO2U/Myj9
2WQzMCji0smVPTOWtFZ+rCCidciRHcj0M3cKEKa8bTUkeSAhkXHVbZ1dhphlXuB0
hxStWzy1rUmaVH0StOP8FT3kK2zR8uZsV66yJFqy2rcgSYSjx4vrzuQkqWYnflFK
oZf4Zl4erpwHE+xx+wrtQHhjdSNUAEtwE7m48HsxufQoFXxgZQXC+3yIVmA+Vep9
FcdR9dMGbhXQF7WB0TreVPeUpT9QkmpFcDPvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULBmf8ibr1RtPRrVBnZmN8Bk+H7UwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0xCbWY4aWJyMVJ0UFJyVkJu
Wm1OOEJrLUg3VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMx
nqgwDQYJKoZIhvcNAQELBQADggEBAIj7GL0VXlISWIbfaQCIFAQMKbPx2oGQYVvC
6PEnNF4gZj6Zw6EkVlvnVxUasEWKL3vT6ROzPPoIMIZQ4z3b3W6VgKdrEUNsOagh
e1jWkPAK8nmx/IJTNoMFCjkVu8nPGGEwPdJiBsX1LVXtOyc1uLWcRl6Ll4hE5pam
8tPb4SfYxzZQMpz4ZuIMsNGb+R6/hsL2ledxIHPiSgwZe38l06grt+6CFn2WPX74
pAO3JKwftWcJQbyQOP/f6t/+E051U0vDI+rIGLxeu5iXvkJoswg0VnaCdRRcyG0x
OTFPEWQLg2ryqWQ2R78OeVylgImyKFmbTObYljRRNVyBqQqkzKM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:03 2024 by rpki-client on console-fra.rpki-client.org